last executing test programs: 2.086949381s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280080009"], 0x44}}, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000340)='[\x00'], &(0x7f00000005c0)=[&(0x7f0000000580)='l\x00']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0xc0}, 0x4c) pwritev(r3, &(0x7f0000000a00)=[{&(0x7f00000003c0)="e3c4d874c656d7999e7ab2b202cc631f49ff02d5a27de36353f4f127ab87f216538a899f330c4d803cd281735d702a87031fc79539361e3cc75d22c7e0509834789536a809960fa5613802dd9255a873c0a9b5b3f47954165f546b432f8bab23941354a1541336adf3ab7a8c2e039d33ae9d191a721723dcdfd04e29dabd86c0a64c524f7084e992ad9c5a2becc7", 0x8e}, {&(0x7f00000002c0)="9aeed811706706a6304f66afd9e4779e401cbab4c4d09753e24cf1f47224fcc06cfc834b89b512008e4e52ef63079ae24088807fc4b16543b3251714747d0eeb499c2000e868443a22d84f06e35d40feed588de7a3a496dfeeaadfb4576eac7a468f950ae70b7a27258b89", 0x6b}, {&(0x7f0000000480)="96ba43f0d465902346d23d214d8ec715a32ca42ff2a07e3a021ecac5c46d3f8917931f82ff537261ecb119c564e34480cbaa979a13b587726dc1e812b8e3fe4b4f9615e4fdbaf25073486d48121a3030a07bb2840a873e8b34e7fc531c06cc8bc75b3d0edd87ea4ed09df29050d1513c6f85e0301f180d5324d46099c617f8f3b23bf93fbfe01cef9c4a2252515bbb83f6dc27cfb75f1a4dc6a69b30", 0x9c}, {&(0x7f0000000080)="2be1d773bb99c890f7938a74350a245efe", 0xe}, {&(0x7f0000000600)="325f20606542278449cf8103bbb17fea3226732fdb58e351df3b8a746d55578ab9de0b47387287eebf2fb89e2ae634c2b0c730eb7ea9b340c8118dbff77adb3511c136cdc45678a4a4db04b1ebd6e98c775f1350833b35c3", 0x58}, {&(0x7f0000000700)="46caf14eb6b93982419215d7a7961cacfbf9795e34bc791a521174774e129bdfb1142a0defe63c965efb88a6d53ba34995ebc986e27a808cca705f054e57477e7ddcdd003ddae120de718ffa57e3047dadbe136453274b615ed72aaf9aaf56e869ecd4c65d12b15b6a4ea1c48f1a3bd8c367", 0x72}, {&(0x7f00000001c0)="7f632c668e90f655d3f7374180f6", 0xe}], 0x7, 0x40000004, 0x1002) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7) socket$inet(0x2, 0x80001, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r4, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.847231268s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PORT_TO={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 1.63700151s ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e000000000000000000050003"], 0x3c}}, 0x0) 1.548162874s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) 1.421791873s ago: executing program 1: getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket(0x2, 0x3, 0x0) bind$inet(r1, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, 0x0, 0x40c0000) socket$inet6(0xa, 0x3, 0x1) fsopen(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.304932491s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280080009"], 0x44}}, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000340)='[\x00'], &(0x7f00000005c0)=[&(0x7f0000000580)='l\x00']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25600000000600b1000400000013002a002a0100bd06ffffffffffff06029c2c000600b100080000000600b10000900000dc002a002670fd71d777cf1deb503cb5655b901bc5ca11f1c1ddd61d1fc0e8a697d48394160290fc8cf53668628b2382b9baafa2d9137c0cafafd80cb115b96fc2e0cb48af298e0d2a51c9882e610fe0ab2175e6ba2cb75c317aae9b6a03c4f67c2f523e872f321e0b2c770ad15c8542681938ce0c4472060303030303030103860c607606c18104000800264b01010dfaa1a65348c510afa2c09b541718863cc45490edabfd740eb831c16a8eb57c41afe8a6fc086e74b1d42f5c7bdde36b4ca351002c93d520928b60e4b02219196a664c504d7eba6b080602d44d20002a002d1a008019ff0700000000000040000600130000000100fcffffff0820002a00760600050e0006006512f277aaf2dd0708021100000108021100000021022a0075180100ff01ff072d00bd47d423cabb4806c1ff8ace104442f47e151c06ff0802110000010400000004000000080000002a010104413f465e43c23ccbe53e7a9fe046a390c09d8999ace72c0ecfddb6a689c936dda550a6b296302644657def3b4bdd2862d26bb3f4f8b626476fb5d26daea978cf440084166a120008021100000120000000060000080211000000ffffffff3c0040080211000000330600000802110000001d0000080211000000060000001900400802110000017f0000000802110000012e004008021100000103000000ffffffffffff0d004008021100000100000000080211000001100000080211000001000000001a0000ffffffffffff060000001f004008021100000005000000080211000001250000080211000000010000801c0000ffffffffffffe100000014004008021100000040000000080211000001120040080211000001c60b00000802110000011d00000802110000006ac000001e0000ffffffffffff09000000400000ffffffffffff200000003300000802110000010700000012000602050001019b8482070800ffffffffffff08000000270040ffffffffffffa4490000ffffffffffff080040ffffffffffff090000000802110000012c00998f0211000000030000001b0040ffffffffffff300d0000080211000000240040080211000000fbffffffffffffffffff14000008021100000139070000010000080211000001070000002700"], 0x380}, 0x1, 0x0, 0x0, 0xc0}, 0x4c) pwritev(r3, &(0x7f0000000a00)=[{&(0x7f00000003c0)="e3c4d874c656d7999e7ab2b202cc631f49ff02d5a27de36353f4f127ab87f216538a899f330c4d803cd281735d702a87031fc79539361e3cc75d22c7e0509834789536a809960fa5613802dd9255a873c0a9b5b3f47954165f546b432f8bab23941354a1541336adf3ab7a8c2e039d33ae9d191a721723dcdfd04e29dabd86c0a64c524f7084e992ad9c5a2becc7", 0x8e}, {&(0x7f00000002c0)="9aeed811706706a6304f66afd9e4779e401cbab4c4d09753e24cf1f47224fcc06cfc834b89b512008e4e52ef63079ae24088807fc4b16543b3251714747d0eeb499c2000e868443a22d84f06e35d40feed588de7a3a496dfeeaadfb4576eac7a468f950ae70b7a27258b89", 0x6b}, {&(0x7f0000000480)="96ba43f0d465902346d23d214d8ec715a32ca42ff2a07e3a021ecac5c46d3f8917931f82ff537261ecb119c564e34480cbaa979a13b587726dc1e812b8e3fe4b4f9615e4fdbaf25073486d48121a3030a07bb2840a873e8b34e7fc531c06cc8bc75b3d0edd87ea4ed09df29050d1513c6f85e0301f180d5324d46099c617f8f3b23bf93fbfe01cef9c4a2252515bbb83f6dc27cfb75f1a4dc6a69b30", 0x9c}, {&(0x7f0000000080)="2be1d773bb99c890f7938a74350a245efe", 0xe}, {&(0x7f0000000600)="325f20606542278449cf8103bbb17fea3226732fdb58e351df3b8a746d55578ab9de0b47387287eebf2fb89e2ae634c2b0c730eb7ea9b340c8118dbff77adb3511c136cdc45678a4a4db04b1ebd6e98c775f1350833b35c3", 0x58}, {&(0x7f0000000700)="46caf14eb6b93982419215d7a7961cacfbf9795e34bc791a521174774e129bdfb1142a0defe63c965efb88a6d53ba34995ebc986e27a808cca705f054e57477e7ddcdd003ddae120de718ffa57e3047dadbe136453274b615ed72aaf9aaf56e869ecd4c65d12b15b6a4ea1c48f1a3bd8c367", 0x72}, {&(0x7f00000001c0)="7f632c668e90f655d3f7374180f6", 0xe}], 0x7, 0x40000004, 0x1002) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7) socket$inet(0x2, 0x80001, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x10000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.284951814s ago: executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x4a0, &(0x7f0000000240)="$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") socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008040000b70400000000000085000000820000e4dcd17a9bad050018110000e0", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095", @ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd18, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KDDISABIO(r1, 0x4b37) 1.24109839s ago: executing program 4: socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad4dace0f5119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c78e7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x181}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c13bc", 0x57}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e", 0x25}], 0x4}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.059700979s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) 1.057344278s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PORT_TO={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 1.04879422s ago: executing program 3: capset(0x0, &(0x7f0000000040)={0x80000001}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000600), 0x7ff, r1}, 0x38) 969.231322ms ago: executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) 966.460942ms ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x40}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f00000002c0)={0x0, 0x0, 0x4002, 0xfffffffd, 0x354}, &(0x7f0000000480), &(0x7f00000004c0)) 863.204799ms ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e000000000000000000050003"], 0x3c}}, 0x0) 833.955213ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040), 0x8) 766.796273ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0xf03a0005) sendfile(r2, r1, 0x0, 0x8000000000002) 733.106068ms ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$unix(r0, 0x0, 0x0) 683.213276ms ago: executing program 0: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() chdir(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 623.304355ms ago: executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 621.416425ms ago: executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)={0x20, r2, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x0) sendmsg$tipc(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) 519.305981ms ago: executing program 4: getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket(0x2, 0x3, 0x0) bind$inet(r1, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, 0x0, 0x40c0000) socket$inet6(0xa, 0x3, 0x1) fsopen(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 466.674799ms ago: executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[], 0x0) 421.464636ms ago: executing program 2: socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad4dace0f5119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c78e7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x181}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c13bc", 0x57}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e", 0x25}], 0x4}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 415.664587ms ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="96"], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 259.629801ms ago: executing program 0: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0}, 0x90) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000180)=""/116, &(0x7f0000000300)=0x74) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000a40)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v3, 0x18, 0x0) 233.378715ms ago: executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="35ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 172.311954ms ago: executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 56.151212ms ago: executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f00000002c0)={0x0, 0x0, 0x4002, 0xfffffffd, 0x354}, &(0x7f0000000480), &(0x7f00000004c0)) 35.489645ms ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e000000000000000000050003"], 0x3c}}, 0x0) 0s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 48.168110][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 548.181763][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 548.591051][ T29] audit: type=1326 audit(2000000127.126:18101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fdc9430a9 code=0x0 [ 548.945389][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 549.170148][T22731] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.562266][T22742] syzkaller0: refused to change device tx_queue_len [ 549.721275][T22746] syzkaller0: entered promiscuous mode [ 549.726772][T22746] syzkaller0: entered allmulticast mode [ 549.991129][T22755] bridge_slave_1: mtu less than device minimum [ 550.050570][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.059875][T22759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.218142][T22763] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 550.770705][T22788] loop4: detected capacity change from 0 to 512 [ 550.798108][T22788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 550.806337][T22788] EXT4-fs (loop4): orphan cleanup on readonly fs [ 550.814861][T22788] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 550.831673][T22788] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 550.838449][T22788] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 550.858520][T22788] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 550.879588][T22788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.901247][T22788] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 550.922263][T22788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 550.942876][T22788] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 551.012044][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 551.024957][T22255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.958681][T22834] loop0: detected capacity change from 0 to 512 [ 551.981873][T22834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 551.992633][T22834] EXT4-fs (loop0): orphan cleanup on readonly fs [ 551.999495][T22834] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 552.032508][T22834] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 552.062917][T22834] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 552.103738][T22834] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 13 (err -117) [ 552.117043][T22834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 552.136019][T22834] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 552.145982][T22834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 552.169798][T22834] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 552.249905][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.682678][T22864] loop0: detected capacity change from 0 to 512 [ 552.724184][T22864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.757373][T22864] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.834491][ T29] audit: type=1326 audit(2000000131.364:18102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b94ee60a9 code=0x7ffc0000 [ 552.865973][ T29] audit: type=1326 audit(2000000131.364:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f6b94ee60a9 code=0x7ffc0000 [ 552.890224][ T29] audit: type=1326 audit(2000000131.364:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b94ee60a9 code=0x7ffc0000 [ 552.944872][ T29] audit: type=1326 audit(2000000131.424:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b94ee60a9 code=0x7ffc0000 [ 553.158750][T22879] loop1: detected capacity change from 0 to 512 [ 553.172577][T22879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 553.180944][T22879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 553.187886][T22879] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 553.203872][T22879] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 553.210651][T10468] kmmpd-loop2: attempt to access beyond end of device [ 553.210651][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 553.224149][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 553.233276][T22879] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 553.251852][T22879] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 553.265695][T22879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 553.299081][T22879] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 553.311984][T22879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 553.342288][T22879] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 553.422347][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.557270][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.182256][T22906] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 554.196697][T22907] loop1: detected capacity change from 0 to 512 [ 554.225665][T22907] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 554.240064][T22907] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 554.253449][T22907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.318192][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.638888][T22919] loop1: detected capacity change from 0 to 512 [ 554.689329][T22919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.704623][T22919] ext4 filesystem being mounted at /root/syzkaller-testdir1444609415/syzkaller.SrBw6g/18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.284396][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.626003][T22947] syzkaller0: entered promiscuous mode [ 556.655384][T22976] loop0: detected capacity change from 0 to 512 [ 556.684176][T22976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.706681][T22976] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 557.552629][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.256997][T10468] kmmpd-loop2: attempt to access beyond end of device [ 558.256997][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 558.270647][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 558.683283][T23043] loop4: detected capacity change from 0 to 256 [ 558.696450][T23040] syzkaller0: entered promiscuous mode [ 558.701986][T23040] syzkaller0: entered allmulticast mode [ 558.999142][T23047] loop1: detected capacity change from 0 to 512 [ 559.029748][T23047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 559.044395][T11754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.078260][T23047] ext4 filesystem being mounted at /root/syzkaller-testdir1444609415/syzkaller.SrBw6g/27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.217935][T11754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.426290][T11754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.559411][T11754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.687090][T11754] bridge_slave_1: left allmulticast mode [ 559.692758][T11754] bridge_slave_1: left promiscuous mode [ 559.698458][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.735712][T11754] bridge_slave_0: left allmulticast mode [ 559.741376][T11754] bridge_slave_0: left promiscuous mode [ 559.747089][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.906815][T11754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.935939][T11754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.947824][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 559.958309][T11754] bond0 (unregistering): Released all slaves [ 560.039111][T23058] geneve1 speed is unknown, defaulting to 1000 [ 560.162111][T11754] hsr_slave_0: left promiscuous mode [ 560.170124][T11754] hsr_slave_1: left promiscuous mode [ 560.176039][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.183518][T11754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.224436][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.231879][T11754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.295144][T11754] veth1_macvtap: left promiscuous mode [ 560.300813][T11754] veth0_macvtap: left promiscuous mode [ 560.306526][T11754] veth1_vlan: left promiscuous mode [ 560.311750][T11754] veth0_vlan: left promiscuous mode [ 560.780410][T11754] team0 (unregistering): Port device team_slave_1 removed [ 560.802841][T11754] team0 (unregistering): Port device team_slave_0 removed [ 560.860905][T23058] chnl_net:caif_netlink_parms(): no params data found [ 560.922670][T23058] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.930024][T23058] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.034135][T23058] bridge_slave_0: entered allmulticast mode [ 561.040737][T23058] bridge_slave_0: entered promiscuous mode [ 561.065081][T23058] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.072259][T23058] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.084317][T23058] bridge_slave_1: entered allmulticast mode [ 561.091237][T23058] bridge_slave_1: entered promiscuous mode [ 561.125478][T23058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.138368][T23058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.166671][T23058] team0: Port device team_slave_0 added [ 561.175848][T23058] team0: Port device team_slave_1 added [ 561.203499][T23058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.210486][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.236427][T23058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.248812][T23058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.255829][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.281760][T23058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.337315][T23058] hsr_slave_0: entered promiscuous mode [ 561.444490][T23058] hsr_slave_1: entered promiscuous mode [ 561.453901][T23058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.467144][T23058] Cannot create hsr debugfs directory [ 561.864492][T23058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 561.873257][T23058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 561.884489][T23058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 561.893385][T23058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 561.948160][T23058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.967071][T23058] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.977755][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.984834][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.008501][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.015578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.110264][T23058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.593878][T23058] veth0_vlan: entered promiscuous mode [ 562.613958][T23058] veth1_vlan: entered promiscuous mode [ 562.633082][T23058] veth0_macvtap: entered promiscuous mode [ 562.642593][T23058] veth1_macvtap: entered promiscuous mode [ 562.653690][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.664257][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.674216][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.684692][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.694538][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.704990][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.714841][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.725431][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.735453][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.745910][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.755753][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.766193][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.776033][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.786535][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.798988][T23058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.812442][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.823231][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.833164][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.843650][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.853550][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.864053][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.873892][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.884406][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.894373][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.904956][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.914838][T23058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.925533][T23058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.940355][T23058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.959620][T23058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.968388][T23058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.977226][T23058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.986116][T23058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.318895][T10468] kmmpd-loop2: attempt to access beyond end of device [ 563.318895][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 563.332445][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 563.577287][T23175] loop0: detected capacity change from 0 to 512 [ 563.695044][T23175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.720449][T23175] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 564.777539][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.038649][T23206] loop1: detected capacity change from 0 to 512 [ 565.055963][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.069913][T23206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 565.092836][T23206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 565.112289][T23206] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 565.129453][T23206] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 565.137737][T23206] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 565.158918][T23206] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 565.172961][T23206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.232484][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.446755][ T29] audit: type=1400 audit(2000000143.977:18106): avc: denied { connect } for pid=23213 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 568.339206][T10468] kmmpd-loop2: attempt to access beyond end of device [ 568.339206][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 568.352751][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 571.369847][T23373] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 573.380239][T10468] kmmpd-loop2: attempt to access beyond end of device [ 573.380239][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 573.393815][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 573.542773][T23444] /dev/nbd4: Can't lookup blockdev [ 575.761815][T23538] syzkaller1: entered promiscuous mode [ 575.767364][T23538] syzkaller1: entered allmulticast mode [ 575.871631][T23542] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 575.977965][T23546] loop4: detected capacity change from 0 to 512 [ 576.024113][T23546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.040985][T23546] ext4 filesystem being mounted at /root/syzkaller-testdir1158345900/syzkaller.fD9as8/22/control supports timestamps until 2038-01-19 (0x7fffffff) [ 576.071694][T23546] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 18: comm syz-executor.4: lblock 23 mapped to illegal pblock 18 (length 1) [ 576.147457][T23556] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 18: comm syz-executor.4: lblock 23 mapped to illegal pblock 18 (length 1) [ 576.201842][T23058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.475222][T23568] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 576.741451][T23575] syz-executor.0[23575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.741505][T23575] syz-executor.0[23575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.803244][T23578] syzkaller1: entered promiscuous mode [ 576.820583][T23578] syzkaller1: entered allmulticast mode [ 577.446766][T23590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=23590 comm=syz-executor.1 [ 577.711048][T23598] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 577.921581][T23607] syzkaller1: entered promiscuous mode [ 577.927166][T23607] syzkaller1: entered allmulticast mode [ 578.427931][T10468] kmmpd-loop2: attempt to access beyond end of device [ 578.427931][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 578.441450][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 578.615349][T23633] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 579.147087][T23646] syzkaller1: entered promiscuous mode [ 579.152710][T23646] syzkaller1: entered allmulticast mode [ 579.464499][ T29] audit: type=1400 audit(2000000157.980:18107): avc: denied { transition } for pid=23651 comm="syz-executor.4" path="/root/syzkaller-testdir1158345900/syzkaller.fD9as8/33/file2" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 579.492819][ T29] audit: type=1400 audit(2000000157.980:18108): avc: denied { entrypoint } for pid=23651 comm="syz-executor.4" path="/root/syzkaller-testdir1158345900/syzkaller.fD9as8/33/file2" dev="sda1" ino=1965 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 579.521018][ T29] audit: type=1400 audit(2000000157.980:18109): avc: denied { noatsecure } for pid=23651 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 579.568240][T23659] loop1: detected capacity change from 0 to 256 [ 581.242144][T23720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35072 sclass=netlink_tcpdiag_socket pid=23720 comm=syz-executor.2 [ 581.639331][T23730] usb usb9: usbfs: process 23730 (syz-executor.4) did not claim interface 0 before use [ 581.880613][T23743] team0: Device ipvlan1 failed to register rx_handler [ 582.983961][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 582.995361][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.002826][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.010273][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.017671][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.025228][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.032626][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.040114][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.047606][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.055003][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.062380][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.069893][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.077344][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.084730][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.092163][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.099573][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.106972][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.114385][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.121842][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.129287][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.136696][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.144079][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.151515][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.159346][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.166793][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.174179][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.181586][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.189106][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.196771][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.204407][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.211893][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.219300][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.226798][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.234246][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.241673][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.249237][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.256640][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.264039][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 583.285372][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 583.469446][T10468] kmmpd-loop2: attempt to access beyond end of device [ 583.469446][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 583.483033][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 583.529284][T23790] loop0: detected capacity change from 0 to 8192 [ 584.897557][T23819] team0: Device ipvlan1 failed to register rx_handler [ 585.886519][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.896515][T23843] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 586.380969][T23868] syzkaller1: entered promiscuous mode [ 586.386466][T23868] syzkaller1: entered allmulticast mode [ 586.952916][T23882] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 587.585813][T23899] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 587.815143][T23905] syzkaller1: entered promiscuous mode [ 587.820718][T23905] syzkaller1: entered allmulticast mode [ 588.043975][T23913] loop0: detected capacity change from 0 to 512 [ 588.123667][T23919] usb usb8: usbfs: process 23919 (syz-executor.1) did not claim interface 0 before use [ 588.214739][T23913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.256205][T23922] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.363098][T23913] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.507813][T10468] kmmpd-loop2: attempt to access beyond end of device [ 588.507813][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 588.521356][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 588.812592][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.012820][T23943] loop4: detected capacity change from 0 to 256 [ 589.038113][T23943] FAT-fs (loop4): IO charset cp950 not found [ 589.330196][T23953] syzkaller1: entered promiscuous mode [ 589.335674][T23953] syzkaller1: entered allmulticast mode [ 589.436587][T23957] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 589.444717][T23957] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 589.713594][T23973] loop0: detected capacity change from 0 to 512 [ 589.761727][T23973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.788483][T23973] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.900640][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 589.918534][T23982] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 590.273996][T23999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 590.283867][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.552364][T24007] loop4: detected capacity change from 0 to 8192 [ 590.695362][T24016] pim6reg1: entered promiscuous mode [ 590.700773][T24016] pim6reg1: entered allmulticast mode [ 590.739465][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.749478][T24019] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 591.072153][T24036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.236740][T24043] loop0: detected capacity change from 0 to 512 [ 591.322940][T24043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.354936][T24043] ext4 filesystem being mounted at /root/syzkaller-testdir1778511165/syzkaller.KtC2VL/129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.851643][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.081967][T24069] loop0: detected capacity change from 0 to 2048 [ 592.112995][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 592.122265][T24072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 592.130181][T24069] loop0: p1 < > p4 [ 592.149647][T24069] loop0: p4 size 8388608 extends beyond EOD, truncated [ 592.305971][ T29] audit: type=1326 audit(2000000170.814:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 592.346843][ T29] audit: type=1326 audit(2000000170.844:18111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 592.371223][ T29] audit: type=1326 audit(2000000170.844:18112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 592.395417][ T29] audit: type=1326 audit(2000000170.844:18113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8696040827 code=0x7ffc0000 [ 592.419517][ T29] audit: type=1326 audit(2000000170.844:18114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86960064e9 code=0x7ffc0000 [ 592.443588][ T29] audit: type=1326 audit(2000000170.844:18115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8696040827 code=0x7ffc0000 [ 592.467856][ T29] audit: type=1326 audit(2000000170.844:18116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86960064e9 code=0x7ffc0000 [ 592.492644][ T29] audit: type=1326 audit(2000000170.844:18117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8696040827 code=0x7ffc0000 [ 592.516897][ T29] audit: type=1326 audit(2000000170.844:18118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86960064e9 code=0x7ffc0000 [ 592.541371][ T29] audit: type=1326 audit(2000000170.844:18119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8696040827 code=0x7ffc0000 [ 593.647517][T10468] kmmpd-loop2: attempt to access beyond end of device [ 593.647517][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 593.661135][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 593.887577][T24103] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.905092][T24104] loop4: detected capacity change from 0 to 512 [ 593.937088][T24104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.950234][T24104] ext4 filesystem being mounted at /root/syzkaller-testdir1158345900/syzkaller.fD9as8/74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.019222][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.035955][T24112] syz-executor.3[24112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.036067][T24112] syz-executor.3[24112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.062246][T24111] bridge0: port 3(hsr_slave_1) entered blocking state [ 594.080952][T24111] bridge0: port 3(hsr_slave_1) entered disabled state [ 594.120963][T24111] hsr_slave_1: entered allmulticast mode [ 594.132678][T24111] hsr_slave_1: left allmulticast mode [ 594.594279][T24127] loop0: detected capacity change from 0 to 8192 [ 594.603276][T24133] usb usb8: usbfs: process 24133 (syz-executor.2) did not claim interface 0 before use [ 594.690722][T23058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.970295][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.201482][T24150] loop1: detected capacity change from 0 to 1024 [ 595.232850][T24150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 595.323791][T24150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.344833][T24150] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2786: inode #2: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 595.436152][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.963731][T24174] loop1: detected capacity change from 0 to 512 [ 596.001966][T24174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.022802][T24174] ext4 filesystem being mounted at /root/syzkaller-testdir1444609415/syzkaller.SrBw6g/109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.217967][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 596.706698][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.246559][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 597.474100][T24226] team0: Device ipvlan1 failed to register rx_handler [ 597.666978][T24237] loop1: detected capacity change from 0 to 512 [ 597.728770][T24237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.857658][T24237] ext4 filesystem being mounted at /root/syzkaller-testdir1444609415/syzkaller.SrBw6g/112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.048645][T24246] loop4: detected capacity change from 0 to 512 [ 598.065402][T24246] EXT4-fs (loop4): 1 truncate cleaned up [ 598.071666][T24246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.115702][T23058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.268792][T24249] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 598.480588][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.673091][T10468] kmmpd-loop2: attempt to access beyond end of device [ 598.673091][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 598.681095][T24268] team0: Device ipvlan1 failed to register rx_handler [ 598.686774][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 598.913369][T24277] loop0: detected capacity change from 0 to 512 [ 598.938146][T24277] EXT4-fs (loop0): 1 truncate cleaned up [ 598.944504][T24277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.011617][T22428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.041050][T24282] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.527058][T24304] team0: Device ipvlan1 failed to register rx_handler [ 599.571300][T24306] serio: Serial port pts0 [ 601.673473][T24367] bridge0: entered promiscuous mode [ 601.681576][T24367] bridge0: entered allmulticast mode [ 601.937710][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 602.228406][T24388] pimreg: entered allmulticast mode [ 602.237404][T24388] pimreg: left allmulticast mode [ 602.452887][T24395] loop0: detected capacity change from 0 to 8192 [ 602.970055][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 603.289992][T24431] loop1: detected capacity change from 0 to 8192 [ 603.715455][T10468] kmmpd-loop2: attempt to access beyond end of device [ 603.715455][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 603.729029][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 604.435141][T24471] loop1: detected capacity change from 0 to 8192 [ 605.439130][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 605.666317][T24512] team0: Device ipvlan1 failed to register rx_handler [ 605.697805][T24515] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.334769][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.492000][T24544] team0: Device ipvlan1 failed to register rx_handler [ 606.603480][T24546] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 607.473354][T24569] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.572587][T24571] team0: Device ipvlan1 failed to register rx_handler [ 608.085533][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 608.758513][T10468] kmmpd-loop2: attempt to access beyond end of device [ 608.758513][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 608.772067][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 609.916628][T24632] loop4: detected capacity change from 0 to 8192 [ 610.503106][T24648] usb usb8: usbfs: process 24648 (syz-executor.2) did not claim interface 0 before use [ 610.753948][T24658] loop1: detected capacity change from 0 to 8192 [ 611.934044][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 612.402982][ T29] kauditd_printk_skb: 3672 callbacks suppressed [ 612.402993][ T29] audit: type=1326 audit(2000000190.904:21792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24700 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11cb4130a9 code=0x0 [ 612.775203][T24719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.784938][T24719] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 613.800435][T10468] kmmpd-loop2: attempt to access beyond end of device [ 613.800435][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 613.813983][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 614.547323][T24786] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 614.585326][T24789] usb usb8: usbfs: process 24789 (syz-executor.4) did not claim interface 0 before use [ 615.001151][T24809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.010533][T24809] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 615.231788][T24818] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 615.240032][T24818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.308876][T24817] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 615.319333][T24817] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 615.328714][T24817] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 615.428471][T24824] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 616.119667][T24854] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.583662][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 616.777031][T24882] cgroup: none used incorrectly [ 617.090158][T24891] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.758196][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 617.769467][T24918] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 618.289328][T24940] bridge_slave_1: left allmulticast mode [ 618.295128][T24940] bridge_slave_1: left promiscuous mode [ 618.300796][T24940] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.495590][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.508265][T24951] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 618.842905][T10468] kmmpd-loop2: attempt to access beyond end of device [ 618.842905][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 618.856465][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 619.415906][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 619.433360][T24991] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 621.339195][T25059] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 621.506215][T25066] 9pnet_fd: Insufficient options for proto=fd [ 621.762503][ T29] audit: type=1400 audit(2000000200.249:21793): avc: denied { write } for pid=25070 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 621.938163][T25074] geneve1 speed is unknown, defaulting to 1000 [ 622.437321][T25084] loop1: detected capacity change from 0 to 256 [ 622.474977][T25084] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 622.748236][ T29] audit: type=1400 audit(2000000201.239:21794): avc: denied { setopt } for pid=25089 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 623.888680][T10468] kmmpd-loop2: attempt to access beyond end of device [ 623.888680][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 623.902296][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 623.985731][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.102222][ T29] audit: type=1326 audit(2000000202.598:21795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.180465][ T29] audit: type=1326 audit(2000000202.608:21796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.204647][ T29] audit: type=1326 audit(2000000202.608:21797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.228958][ T29] audit: type=1326 audit(2000000202.608:21798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.253061][ T29] audit: type=1326 audit(2000000202.608:21799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.277835][ T29] audit: type=1326 audit(2000000202.608:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 624.302100][ T29] audit: type=1326 audit(2000000202.608:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 624.326745][ T29] audit: type=1326 audit(2000000202.608:21802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86960430a9 code=0x7ffc0000 [ 625.383716][T25162] usb usb8: usbfs: process 25162 (syz-executor.2) did not claim interface 0 before use [ 626.370703][T25194] bond_slave_1: mtu less than device minimum [ 627.532484][T25214] usb usb8: usbfs: process 25214 (syz-executor.1) did not claim interface 0 before use [ 628.928353][T10468] kmmpd-loop2: attempt to access beyond end of device [ 628.928353][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 628.941950][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 630.305856][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.819033][T25315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 632.816980][T25383] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.224607][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.970503][T10468] kmmpd-loop2: attempt to access beyond end of device [ 633.970503][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 633.984031][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 634.488169][T25434] random: crng reseeded on system resumption [ 635.546133][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 637.671082][T25511] loop1: detected capacity change from 0 to 512 [ 637.712970][T25511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.745895][T25511] ext4 filesystem being mounted at /root/syzkaller-testdir1444609415/syzkaller.SrBw6g/226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 637.802742][T22568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.232517][T25525] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 638.272855][T25525] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 638.841767][T25556] geneve1 speed is unknown, defaulting to 1000 [ 639.014022][T10468] kmmpd-loop2: attempt to access beyond end of device [ 639.014022][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 639.027558][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 640.501735][T25605] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.511359][T25605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.975853][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 640.975867][ T29] audit: type=1400 audit(2000000219.460:21804): avc: denied { mounton } for pid=25629 comm="syz-executor.1" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 641.246460][ T3235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.378647][ T3235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.522248][ T3235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.607816][ T3235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.741510][ T3235] bridge_slave_0: left allmulticast mode [ 641.747253][ T3235] bridge_slave_0: left promiscuous mode [ 641.753017][ T3235] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.027257][ T3235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.041096][ T3235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.053379][ T3235] bond0 (unregistering): Released all slaves [ 642.206883][T25643] geneve1 speed is unknown, defaulting to 1000 [ 642.514933][ T3235] hsr_slave_0: left promiscuous mode [ 642.553473][ T3235] hsr_slave_1: left promiscuous mode [ 642.564881][ T3235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.572416][ T3235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.596924][ T3235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.604414][ T3235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.628634][ T3235] veth1_macvtap: left promiscuous mode [ 642.634205][ T3235] veth0_macvtap: left promiscuous mode [ 642.639823][ T3235] veth1_vlan: left promiscuous mode [ 642.645078][ T3235] veth0_vlan: left promiscuous mode [ 642.838703][ T3235] team0 (unregistering): Port device team_slave_1 removed [ 642.865961][ T3235] team0 (unregistering): Port device team_slave_0 removed [ 643.089308][T25643] chnl_net:caif_netlink_parms(): no params data found [ 643.200916][T25643] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.208031][T25643] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.217477][T25643] bridge_slave_0: entered allmulticast mode [ 643.224037][T25643] bridge_slave_0: entered promiscuous mode [ 643.231135][T25643] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.238282][T25643] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.245649][T25643] bridge_slave_1: entered allmulticast mode [ 643.252095][T25643] bridge_slave_1: entered promiscuous mode [ 643.345587][T25643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.371143][T25643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.392738][T25643] team0: Port device team_slave_0 added [ 643.408103][T25643] team0: Port device team_slave_1 added [ 643.430927][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.486320][T25643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.493298][T25643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.519326][T25643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.531054][T25643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.538046][T25643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.564103][T25643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.581212][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.627023][T25643] hsr_slave_0: entered promiscuous mode [ 643.637608][T25643] hsr_slave_1: entered promiscuous mode [ 643.647792][T25643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.663598][T25643] Cannot create hsr debugfs directory [ 643.672110][ T28] team0: Port device netdevsim1 removed [ 643.684046][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.739683][T25689] geneve1 speed is unknown, defaulting to 1000 [ 643.921912][T25689] chnl_net:caif_netlink_parms(): no params data found [ 643.960456][T25689] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.967587][T25689] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.974926][T25689] bridge_slave_0: entered allmulticast mode [ 643.981494][T25689] bridge_slave_0: entered promiscuous mode [ 643.997521][T25689] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.004608][T25689] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.026554][T25689] bridge_slave_1: entered allmulticast mode [ 644.039545][T25689] bridge_slave_1: entered promiscuous mode [ 644.057483][T10468] kmmpd-loop2: attempt to access beyond end of device [ 644.057483][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 644.071069][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 644.087368][T25689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.118756][T25689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.131252][T25643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.185890][T25643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.196303][T25689] team0: Port device team_slave_0 added [ 644.210438][T25643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.228900][T25689] team0: Port device team_slave_1 added [ 644.243001][T25643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 644.262133][T25689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.269137][T25689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.295149][T25689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.336104][T25689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.343099][T25689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.369074][T25689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.383903][T25643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.399654][T25643] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.411787][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.418973][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.447977][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.455066][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.472182][T25643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.482589][T25643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.502655][T25689] hsr_slave_0: entered promiscuous mode [ 644.509218][T25689] hsr_slave_1: entered promiscuous mode [ 644.515361][T25689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.525100][T25689] Cannot create hsr debugfs directory [ 644.624742][T25643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.707689][T25643] veth0_vlan: entered promiscuous mode [ 644.718926][T25643] veth1_vlan: entered promiscuous mode [ 644.769167][T25643] veth0_macvtap: entered promiscuous mode [ 644.789256][T25643] veth1_macvtap: entered promiscuous mode [ 644.810806][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.821433][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.831321][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.841760][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.851582][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.862078][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.871917][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.882407][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.892324][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.902790][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.912710][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.923158][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.933069][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.943633][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.956316][T25643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.964573][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.975147][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.985026][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.995518][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.005361][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.015894][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.025769][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.036203][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.046047][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.056485][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.066513][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.076940][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.099039][T25643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.123677][T25643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.132540][T25643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.141355][T25643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.150186][T25643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.489623][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.584492][ T28] bridge_slave_1: left allmulticast mode [ 645.590221][ T28] bridge_slave_1: left promiscuous mode [ 645.595876][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.625510][ T28] bridge_slave_0: left promiscuous mode [ 645.631266][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.849445][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.882084][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.898868][ T28] bond0 (unregistering): Released all slaves [ 646.057196][ T28] IPVS: stopping backup sync thread 19032 ... [ 646.112639][ T28] hsr_slave_0: left promiscuous mode [ 646.118445][T25748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=238 sclass=netlink_route_socket pid=25748 comm=syz-executor.1 [ 646.142625][ T28] hsr_slave_1: left promiscuous mode [ 646.158550][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.165998][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.190755][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.198332][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.224487][T25748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.235765][ T28] veth1_macvtap: left promiscuous mode [ 646.241304][ T28] veth0_macvtap: left promiscuous mode [ 646.246978][ T28] veth1_vlan: left promiscuous mode [ 646.252392][ T28] veth0_vlan: left promiscuous mode [ 646.421776][ T28] team0 (unregistering): Port device team_slave_1 removed [ 646.439999][ T28] team0 (unregistering): Port device team_slave_0 removed [ 646.499997][T25689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 646.537644][T25689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 646.548386][T25689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 646.563443][T25689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 646.631355][T25689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.652461][T25689] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.667992][T22338] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.675075][T22338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.708154][T22338] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.715249][T22338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.848990][T25689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.943242][T25689] veth0_vlan: entered promiscuous mode [ 646.954990][T25689] veth1_vlan: entered promiscuous mode [ 646.980131][T25689] veth0_macvtap: entered promiscuous mode [ 646.995523][T25689] veth1_macvtap: entered promiscuous mode [ 647.019330][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.029893][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.039812][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.050242][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.060107][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.070709][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.080668][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.091399][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.101306][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.111811][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.122184][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.132626][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.142465][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.152929][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.188206][T25689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.208218][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.218748][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.228875][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.239369][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.249264][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.259715][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.269573][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.280090][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.289941][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.300426][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.310261][T25689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.320731][T25689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.335266][T25689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.345872][T25689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.354867][T25689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.363854][T25689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.372580][T25689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.427220][T25788] ebtables: ebtables: counters copy to user failed while replacing table [ 648.807807][T25826] loop4: detected capacity change from 0 to 512 [ 648.844298][T25826] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 648.874053][T25826] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz-executor.4: iget: bad i_size value: -6917529027641081756 [ 648.902507][T25826] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 648.918120][T25826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.934599][T25826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 65: padding at end of block bitmap is not set [ 648.954073][T25826] Quota error (device loop4): write_blk: dquota write failed [ 648.961837][T25826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 648.972173][T25826] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0 [ 649.050959][T23058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.098075][T10468] kmmpd-loop2: attempt to access beyond end of device [ 649.098075][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 649.111625][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 651.052193][ T29] audit: type=1326 audit(2000000229.535:21805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82037510a9 code=0x7ffc0000 [ 651.076438][ T29] audit: type=1326 audit(2000000229.535:21806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82037510a9 code=0x7ffc0000 [ 651.105599][ T29] audit: type=1326 audit(2000000229.575:21807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f82037510a9 code=0x7ffc0000 [ 651.129875][ T29] audit: type=1326 audit(2000000229.575:21808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82037510a9 code=0x7ffc0000 [ 651.153977][ T29] audit: type=1326 audit(2000000229.575:21809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82037510a9 code=0x7ffc0000 [ 652.648428][ T29] audit: type=1400 audit(2000000231.124:21810): avc: denied { connect } for pid=25941 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 653.756444][T25983] loop1: detected capacity change from 0 to 2048 [ 653.811558][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x1 [ 653.813310][T25983] loop1: p1 < > p4 [ 653.819008][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.830181][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.833039][T25983] loop1: p4 size 8388608 extends beyond EOD, truncated [ 653.837605][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.851823][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.859206][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.866634][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4 [ 653.874113][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.881565][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x2 [ 653.888974][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.896390][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.903823][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.911218][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.918650][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4 [ 653.926076][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.933520][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.941041][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.948490][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.955934][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.963426][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.970889][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.978262][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.985881][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 653.993297][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.000801][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.008310][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.015762][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.023227][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.030691][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.038124][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.045562][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.053018][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.060418][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.067964][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.075462][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.082905][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.090384][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.097820][T22338] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 654.110103][T22338] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 654.140550][T10468] kmmpd-loop2: attempt to access beyond end of device [ 654.140550][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 654.154086][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 654.168186][ T29] audit: type=1326 audit(2000000232.643:21811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.192344][ T29] audit: type=1326 audit(2000000232.643:21812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.216445][ T29] audit: type=1326 audit(2000000232.643:21813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.240601][ T29] audit: type=1326 audit(2000000232.643:21814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.264791][ T29] audit: type=1326 audit(2000000232.643:21815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.288879][ T29] audit: type=1326 audit(2000000232.643:21816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e92e60a9 code=0x7ffc0000 [ 654.313050][ T29] audit: type=1326 audit(2000000232.643:21817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4e92e3827 code=0x7ffc0000 [ 654.337068][ T29] audit: type=1326 audit(2000000232.643:21818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4e92a94e9 code=0x7ffc0000 [ 654.361329][ T29] audit: type=1326 audit(2000000232.643:21819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4e92e3827 code=0x7ffc0000 [ 654.385688][ T29] audit: type=1326 audit(2000000232.643:21820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4e92a94e9 code=0x7ffc0000 [ 654.689644][T25997] 9pnet_fd: Insufficient options for proto=fd [ 654.749971][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.771817][T26001] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.781234][T26001] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 655.883017][T26034] geneve1 speed is unknown, defaulting to 1000 [ 657.401632][T26075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 657.410991][T26075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 657.655807][T26083] loop1: detected capacity change from 0 to 128 [ 657.678593][T26083] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 657.693009][T26083] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 657.924883][T25643] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.852679][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.986597][T26103] loop1: detected capacity change from 0 to 256 [ 659.014430][T26103] FAT-fs (loop1): codepage cp860 not found [ 659.183089][T10468] kmmpd-loop2: attempt to access beyond end of device [ 659.183089][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 659.196649][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 659.575621][T26126] geneve1 speed is unknown, defaulting to 1000 [ 662.270796][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 662.270808][ T29] audit: type=1400 audit(2000000240.739:23128): avc: denied { unmount } for pid=25643 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 663.044587][T11754] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.091955][T11754] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.128858][T11754] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.189551][T11754] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.469363][T11754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.481370][T11754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.492388][T11754] bond0 (unregistering): Released all slaves [ 663.643887][T11754] hsr_slave_0: left promiscuous mode [ 663.666334][T11754] hsr_slave_1: left promiscuous mode [ 663.672283][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.680251][T11754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.705670][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.713106][T11754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.737102][T11754] veth1_macvtap: left promiscuous mode [ 663.742598][T11754] veth0_macvtap: left promiscuous mode [ 663.748192][T11754] veth0_vlan: left promiscuous mode [ 663.917947][T11754] team0 (unregistering): Port device team_slave_1 removed [ 663.936740][T11754] team0 (unregistering): Port device team_slave_0 removed [ 664.041482][T26233] geneve1 speed is unknown, defaulting to 1000 [ 664.229037][T10468] kmmpd-loop2: attempt to access beyond end of device [ 664.229037][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 664.242728][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 664.247869][T26233] chnl_net:caif_netlink_parms(): no params data found [ 664.600269][T26233] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.607396][T26233] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.630153][T26233] bridge_slave_0: entered allmulticast mode [ 664.645033][T26233] bridge_slave_0: entered promiscuous mode [ 664.661826][T26233] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.669237][T26233] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.693270][T26233] bridge_slave_1: entered allmulticast mode [ 664.708716][T26233] bridge_slave_1: entered promiscuous mode [ 664.752974][T26233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.762135][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 664.777946][T26233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.819648][T26233] team0: Port device team_slave_0 added [ 664.828789][T26233] team0: Port device team_slave_1 added [ 664.863360][T26233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.870399][T26233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.896335][T26233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.027528][T26233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.034493][T26233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.060529][T26233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.172860][T26233] hsr_slave_0: entered promiscuous mode [ 665.186279][T26233] hsr_slave_1: entered promiscuous mode [ 665.206073][T26233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.213638][T26233] Cannot create hsr debugfs directory [ 665.356624][T26293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 665.544649][T26233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.555131][T26233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.565837][T26233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.577216][T26233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.645464][T26233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.787861][T26303] delete_channel: no stack [ 665.841671][T26233] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.911381][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.918573][T11947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.977358][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.984482][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.117333][T26233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.231386][T26233] veth0_vlan: entered promiscuous mode [ 666.247816][T26233] veth1_vlan: entered promiscuous mode [ 666.264763][T26233] veth0_macvtap: entered promiscuous mode [ 666.272945][T26233] veth1_macvtap: entered promiscuous mode [ 666.285637][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.296252][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.306165][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.316683][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.326479][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.336961][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.346942][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.357411][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.367306][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.377844][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.387742][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.391199][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 666.398218][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.418014][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.428438][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.451976][T26233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.463224][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.473763][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.483664][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.494247][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.504165][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.514591][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.524426][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.534911][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.544823][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.555279][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.565114][T26233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.575590][T26233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.603473][T26233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.621170][T26233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.629947][T26233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.638699][T26233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.647463][T26233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.118157][T11770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.186654][T11770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.226940][T26383] geneve1 speed is unknown, defaulting to 1000 [ 667.261677][T11770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.322523][T11770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.400301][T11770] bridge_slave_1: left allmulticast mode [ 667.406022][T11770] bridge_slave_1: left promiscuous mode [ 667.411815][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.505833][T11770] bridge_slave_0: left allmulticast mode [ 667.511689][T11770] bridge_slave_0: left promiscuous mode [ 667.517391][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.639186][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 667.662055][T11770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.674720][T11770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.689992][T11770] bond0 (unregistering): Released all slaves [ 667.757073][T26383] chnl_net:caif_netlink_parms(): no params data found [ 667.827048][T11770] hsr_slave_0: left promiscuous mode [ 667.838189][T11770] hsr_slave_1: left promiscuous mode [ 667.844332][T11770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.851892][T11770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.862609][T11770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.870132][T11770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.895571][T11770] veth1_macvtap: left promiscuous mode [ 667.901118][T11770] veth0_macvtap: left promiscuous mode [ 667.906661][T11770] veth1_vlan: left promiscuous mode [ 667.911956][T11770] veth0_vlan: left promiscuous mode [ 668.006945][T11770] team0 (unregistering): Port device team_slave_1 removed [ 668.018426][T11770] team0 (unregistering): Port device team_slave_0 removed [ 668.080590][T26383] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.087873][T26383] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.097623][T26383] bridge_slave_0: entered allmulticast mode [ 668.104072][T26383] bridge_slave_0: entered promiscuous mode [ 668.111740][T26383] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.119015][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.126362][T26383] bridge_slave_1: entered allmulticast mode [ 668.133343][T26383] bridge_slave_1: entered promiscuous mode [ 668.154775][T26383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.171771][T26383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.194305][T26383] team0: Port device team_slave_0 added [ 668.200992][T26383] team0: Port device team_slave_1 added [ 668.217418][T26383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.224434][T26383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.250442][T26383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.265552][T26383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.272534][T26383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.298438][T26383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.328346][T26383] hsr_slave_0: entered promiscuous mode [ 668.334660][T26383] hsr_slave_1: entered promiscuous mode [ 668.340617][T26383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.349437][T26383] Cannot create hsr debugfs directory [ 668.663388][T26383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.681968][T26383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.691054][T26383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.702747][T26383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.753894][T26383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.773455][T26383] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.787203][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.794328][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.825738][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.833032][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.852928][T26383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.921626][T26383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.007578][T26383] veth0_vlan: entered promiscuous mode [ 669.019014][T26383] veth1_vlan: entered promiscuous mode [ 669.069912][T26383] veth0_macvtap: entered promiscuous mode [ 669.078908][T26383] veth1_macvtap: entered promiscuous mode [ 669.104625][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.115142][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.125281][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.136070][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.145939][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.156418][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.166357][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.176907][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.186844][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.197311][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.207172][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.217629][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.227491][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.237947][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.268177][T10468] kmmpd-loop2: attempt to access beyond end of device [ 669.268177][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 669.281771][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 669.302687][T26383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.343669][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.354236][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.364260][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.374703][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.384543][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.395024][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.404849][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.415462][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.425335][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.436010][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.445879][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.456318][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.556786][T26383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.579828][T26383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.588771][T26383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.597511][T26383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.606342][T26383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.128425][T26571] bond_slave_0: entered promiscuous mode [ 671.134113][T26571] bond_slave_1: entered promiscuous mode [ 671.143367][T26571] macvlan2: entered allmulticast mode [ 671.148794][T26571] bond0: entered allmulticast mode [ 671.153988][T26571] bond_slave_0: entered allmulticast mode [ 671.159779][T26571] bond_slave_1: entered allmulticast mode [ 671.168473][T26571] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 671.177895][T26571] bond0: left allmulticast mode [ 671.182843][T26571] bond_slave_0: left allmulticast mode [ 671.188359][T26571] bond_slave_1: left allmulticast mode [ 671.194001][T26571] bond_slave_0: left promiscuous mode [ 671.199422][T26571] bond_slave_1: left promiscuous mode [ 671.268315][ T29] audit: type=1400 audit(2000000249.735:23129): avc: denied { shutdown } for pid=26574 comm="syz-executor.3" lport=46408 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 671.790006][T26595] loop1: detected capacity change from 0 to 1024 [ 671.809631][T26595] EXT4-fs: Ignoring removed nobh option [ 671.819381][T26595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 671.930164][T26595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.947733][T26595] EXT4-fs error (device loop1): __ext4_iget:4906: inode #12: block 13: comm syz-executor.1: invalid block [ 672.023566][T25643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.045604][T26608] random: crng reseeded on system resumption [ 672.158379][T26604] geneve1 speed is unknown, defaulting to 1000 [ 672.283073][T26604] chnl_net:caif_netlink_parms(): no params data found [ 672.348024][T26604] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.355140][T26604] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.362666][T26604] bridge_slave_0: entered allmulticast mode [ 672.369158][T26604] bridge_slave_0: entered promiscuous mode [ 672.376553][T26604] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.383772][T26604] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.394600][T26604] bridge_slave_1: entered allmulticast mode [ 672.401367][T26604] bridge_slave_1: entered promiscuous mode [ 672.420063][T26604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.430947][T26604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.452157][T26604] team0: Port device team_slave_0 added [ 672.459787][T26604] team0: Port device team_slave_1 added [ 672.478107][T26604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.485114][T26604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.511064][T26604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.523307][T26604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.530330][T26604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.556366][T26604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.603029][T26604] hsr_slave_0: entered promiscuous mode [ 672.620258][T26604] hsr_slave_1: entered promiscuous mode [ 672.628889][T26604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.649689][T26604] Cannot create hsr debugfs directory [ 672.692329][T26636] loop0: detected capacity change from 0 to 6 [ 672.761715][T26604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.839407][T26604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.930635][T26604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.014306][T26604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.166659][T26604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.182954][T26604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.203732][T26604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.223832][T26604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.326495][T26604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.359380][T26604] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.372535][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.379669][T11947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.405813][T26604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.416219][T26604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.436460][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.443598][T11947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.535172][T26604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.700895][T26604] veth0_vlan: entered promiscuous mode [ 673.724213][T26604] veth1_vlan: entered promiscuous mode [ 673.768552][T26604] veth0_macvtap: entered promiscuous mode [ 673.788773][T26604] veth1_macvtap: entered promiscuous mode [ 673.813782][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.824287][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.834514][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.845006][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.854858][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.865373][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.875352][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.885844][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.895729][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.906258][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.916346][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.926790][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.936630][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.947096][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.956990][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.967450][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.979871][T26604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.008922][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.009734][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 674.019378][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.039371][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.049901][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.059783][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.070199][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.080287][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.091142][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.100996][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.111433][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.121249][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.131676][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.141518][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.152078][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.171908][T26604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.184141][T26604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.192952][T26604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.201809][T26604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.210647][T26604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.311122][T10468] kmmpd-loop2: attempt to access beyond end of device [ 674.311122][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 674.324664][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 674.386939][T26687] loop0: detected capacity change from 0 to 2048 [ 674.405877][T26687] EXT4-fs: Ignoring removed mblk_io_submit option [ 674.432729][T26687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.447126][T26687] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 674.464171][T26687] EXT4-fs (loop0): Remounting filesystem read-only [ 674.531090][T26604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.366203][T10468] kmmpd-loop2: attempt to access beyond end of device [ 679.366203][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 679.379757][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 679.486058][T26852] can: request_module (can-proto-0) failed. [ 679.619289][T26860] loop0: detected capacity change from 0 to 512 [ 679.645959][T26860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.662240][T26860] ext4 filesystem being mounted at /root/syzkaller-testdir2679101127/syzkaller.2gmTts/16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.788721][T26604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.207796][T26931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.470273][T26939] cgroup: No subsys list or none specified [ 683.035705][ T29] audit: type=1400 audit(2000000261.499:23130): avc: denied { write } for pid=26989 comm="syz-executor.0" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 683.397044][T27010] loop1: detected capacity change from 0 to 2048 [ 683.423007][T27010] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.434698][T27013] caif0: entered promiscuous mode [ 683.439785][T27013] caif0: entered allmulticast mode [ 683.479474][T27010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.546879][T25643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.335535][T27053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.398963][T10468] kmmpd-loop2: attempt to access beyond end of device [ 684.398963][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 684.412550][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 685.428586][T27083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 686.009845][ T29] audit: type=1400 audit(2000000264.477:23131): avc: denied { name_bind } for pid=27097 comm="syz-executor.2" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 689.438380][T10468] kmmpd-loop2: attempt to access beyond end of device [ 689.438380][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 689.451965][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 689.859513][T27222] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 689.867728][T27222] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 690.419993][T27240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 692.559167][T27287] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 693.202112][T27313] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 693.340897][ T29] audit: type=1400 audit(2000000271.804:23132): avc: denied { watch watch_reads } for pid=27309 comm="syz-executor.2" path="/root/syzkaller-testdir437472635/syzkaller.ywmpOB/78/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 693.379262][T27322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.480712][T10468] kmmpd-loop2: attempt to access beyond end of device [ 694.480712][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 694.494275][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 695.673553][T27400] geneve1 speed is unknown, defaulting to 1000 [ 696.086472][T27414] dummy0: entered promiscuous mode [ 696.154028][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 697.254014][T27466] dummy0: entered promiscuous mode [ 697.487351][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 697.518995][T27473] loop1: detected capacity change from 0 to 128 [ 697.548431][T27473] FAT-fs (loop1): Unrecognized mount option "macvlan0" or missing value [ 697.586216][T27475] geneve1 speed is unknown, defaulting to 1000 [ 698.403938][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.960111][T22338] kernel write not supported for file /snd/seq (pid: 22338 comm: kworker/1:0) [ 699.523247][T10468] kmmpd-loop2: attempt to access beyond end of device [ 699.523247][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 699.536790][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 699.685631][ T29] audit: type=1326 audit(2000000278.140:23133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27555 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4e92e60a9 code=0x0 [ 700.575151][T11946] kernel write not supported for file /snd/seq (pid: 11946 comm: kworker/0:12) [ 701.684476][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.713635][T27658] tap0: tun_chr_ioctl cmd 1 [ 702.949782][T27665] loop1: detected capacity change from 0 to 512 [ 703.896899][T27698] geneve1 speed is unknown, defaulting to 1000 [ 704.565861][T10468] kmmpd-loop2: attempt to access beyond end of device [ 704.565861][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 704.579431][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 704.770469][T27723] loop4: detected capacity change from 0 to 512 [ 704.786241][T27723] EXT4-fs error (device loop4): __ext4_iget:4906: inode #2: block 1056964608: comm syz-executor.4: invalid block [ 704.804354][T27723] EXT4-fs (loop4): get root inode failed [ 704.810087][T27723] EXT4-fs (loop4): mount failed [ 704.972840][T27734] loop1: detected capacity change from 0 to 512 [ 705.009085][T27734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.024579][T27734] ext4 filesystem being mounted at /root/syzkaller-testdir792120675/syzkaller.FPxuwy/186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 705.696694][T25643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.118899][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.148527][T27770] loop1: detected capacity change from 0 to 128 [ 706.164197][T27770] FAT-fs (loop1): Unrecognized mount option "macvlan0" or missing value [ 708.005979][T27819] loop4: detected capacity change from 0 to 512 [ 708.042096][T27819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.056640][T27819] ext4 filesystem being mounted at /root/syzkaller-testdir1158345900/syzkaller.fD9as8/371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.250947][T11957] kernel write not supported for file /snd/seq (pid: 11957 comm: kworker/1:17) [ 708.531340][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 708.691888][T23058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.610058][T10468] kmmpd-loop2: attempt to access beyond end of device [ 709.610058][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 709.623642][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 714.650804][T10468] kmmpd-loop2: attempt to access beyond end of device [ 714.650804][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 714.664466][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 719.695477][T10468] kmmpd-loop2: attempt to access beyond end of device [ 719.695477][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 719.709002][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 721.440622][T27933] geneve1 speed is unknown, defaulting to 1000 [ 721.581129][T27933] chnl_net:caif_netlink_parms(): no params data found [ 721.646192][T27933] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.653334][T27933] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.676508][T27933] bridge_slave_0: entered allmulticast mode [ 721.683157][T27933] bridge_slave_0: entered promiscuous mode [ 721.690429][T27933] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.697681][T27933] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.707895][T27933] bridge_slave_1: entered allmulticast mode [ 721.721694][T27933] bridge_slave_1: entered promiscuous mode [ 721.758931][T27933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.770914][T27933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.801601][T27933] team0: Port device team_slave_0 added [ 721.810636][T27933] team0: Port device team_slave_1 added [ 721.841539][T27933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.848587][T27933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.874531][T27933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.885928][T27933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.892908][T27933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.918893][T27933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.947028][T27933] hsr_slave_0: entered promiscuous mode [ 721.953223][T27933] hsr_slave_1: entered promiscuous mode [ 721.962592][T27933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.970561][T27933] Cannot create hsr debugfs directory [ 722.044101][T27933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.120671][T27933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.193014][T27933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.262193][T27933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.359983][T27933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 722.369068][T27933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.387869][T27933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.403270][T27933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.458012][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 722.496842][T27933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.519643][T27933] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.550228][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.557313][T11941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.570963][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.578256][T11941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.711248][T27933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.879519][T27933] veth0_vlan: entered promiscuous mode [ 722.901219][T27933] veth1_vlan: entered promiscuous mode [ 722.939864][T27933] veth0_macvtap: entered promiscuous mode [ 722.960403][T27933] veth1_macvtap: entered promiscuous mode [ 722.992998][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.003467][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.013297][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.023860][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.033755][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.044229][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.054053][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.064567][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.074550][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.084982][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.094803][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.105231][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.115051][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.125534][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.135404][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.145934][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.155795][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.166233][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.177992][T27933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.186310][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.197132][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.207047][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.217553][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.227372][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.237792][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.247625][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.258087][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.267996][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.278457][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.288436][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.298889][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.308805][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.319292][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.329158][T27933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.339663][T27933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.351414][T27933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.369228][T27933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.378055][T27933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.386942][T27933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.395682][T27933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.553878][T27996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 723.580365][T27996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 723.624157][T27996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 723.673161][T28008] loop0: detected capacity change from 0 to 512 [ 723.725507][T28008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.765429][T28008] ext4 filesystem being mounted at /root/syzkaller-testdir1181592249/syzkaller.xj7T6Q/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 724.389752][T27933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.736274][T10468] kmmpd-loop2: attempt to access beyond end of device [ 724.736274][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 724.749811][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 729.078123][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.110330][T28202] loop0: detected capacity change from 0 to 128 [ 729.128136][T28202] FAT-fs (loop0): Unrecognized mount option "macvlan0" or missing value [ 729.246051][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 729.788376][T10468] kmmpd-loop2: attempt to access beyond end of device [ 729.788376][T10468] loop2: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 729.801892][T10468] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 729.890027][T28227] loop0: detected capacity change from 0 to 512 [ 729.908784][T28227] EXT4-fs error (device loop0): __ext4_iget:4906: inode #2: block 1056964608: comm syz-executor.0: invalid block [ 729.922202][T28227] EXT4-fs (loop0): get root inode failed [ 729.927894][T28227] EXT4-fs (loop0): mount failed [ 731.253660][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 731.273619][T28264] loop4: detected capacity change from 0 to 128 [ 731.288671][T28264] FAT-fs (loop4): Unrecognized mount option "macvlan0" or missing value [ 731.904061][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.072512][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.126088][T28300] loop0: detected capacity change from 0 to 512 [ 732.150573][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.160389][T28300] EXT4-fs error (device loop0): __ext4_iget:4906: inode #2: block 1056964608: comm syz-executor.0: invalid block [ 732.190036][T28300] EXT4-fs (loop0): get root inode failed [ 732.195887][T28300] EXT4-fs (loop0): mount failed [ 732.918348][T28330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.961841][T28332] loop0: detected capacity change from 0 to 512 [ 732.982332][T28332] EXT4-fs error (device loop0): __ext4_iget:4906: inode #2: block 1056964608: comm syz-executor.0: invalid block [ 732.999190][T28332] EXT4-fs (loop0): get root inode failed [ 733.004944][T28332] EXT4-fs (loop0): mount failed [ 734.068116][T28355] ================================================================== [ 734.076225][T28355] BUG: KCSAN: data-race in __filemap_add_folio / kiocb_invalidate_post_direct_write [ 734.085609][T28355] [ 734.087923][T28355] read-write to 0xffff888107cf2c08 of 8 bytes by task 28351 on cpu 1: [ 734.096064][T28355] __filemap_add_folio+0x439/0x710 [ 734.101171][T28355] filemap_add_folio+0x9c/0x1b0 [ 734.106012][T28355] page_cache_ra_unbounded+0x148/0x2e0 [ 734.111468][T28355] ondemand_readahead+0x542/0x6b0 [ 734.116483][T28355] page_cache_sync_ra+0xe0/0xf0 [ 734.121328][T28355] filemap_get_pages+0x252/0xfb0 [ 734.126262][T28355] filemap_splice_read+0x360/0x920 [ 734.131373][T28355] ext4_file_splice_read+0x95/0xc0 [ 734.136497][T28355] splice_direct_to_actor+0x26c/0x670 [ 734.141874][T28355] do_splice_direct+0xd7/0x150 [ 734.146645][T28355] do_sendfile+0x3ab/0x960 [ 734.151050][T28355] __x64_sys_sendfile64+0x110/0x150 [ 734.156257][T28355] x64_sys_call+0x2c9f/0x2d70 [ 734.160939][T28355] do_syscall_64+0xc9/0x1c0 [ 734.165441][T28355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.171330][T28355] [ 734.173646][T28355] read to 0xffff888107cf2c08 of 8 bytes by task 28355 on cpu 0: [ 734.181268][T28355] kiocb_invalidate_post_direct_write+0x5e/0x1b0 [ 734.187593][T28355] iomap_dio_complete+0x33a/0x4c0 [ 734.192618][T28355] iomap_dio_rw+0x62/0x90 [ 734.196949][T28355] ext4_file_write_iter+0xaa4/0xe30 [ 734.202149][T28355] iter_file_splice_write+0x5e6/0x970 [ 734.207523][T28355] direct_splice_actor+0x16c/0x2c0 [ 734.212642][T28355] splice_direct_to_actor+0x305/0x670 [ 734.218012][T28355] do_splice_direct+0xd7/0x150 [ 734.222780][T28355] do_sendfile+0x3ab/0x960 [ 734.227190][T28355] __x64_sys_sendfile64+0x110/0x150 [ 734.232394][T28355] x64_sys_call+0x2c9f/0x2d70 [ 734.237067][T28355] do_syscall_64+0xc9/0x1c0 [ 734.241566][T28355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.247460][T28355] [ 734.249774][T28355] value changed: 0x0000000000000263 -> 0x0000000000000266 [ 734.256876][T28355] [ 734.259188][T28355] Reported by Kernel Concurrency Sanitizer on: 2033/05/18 03:38:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 734.265339][T28355] CPU: 0 PID: 28355 Comm: syz-executor.1 Tainted: G W 6.10.0-rc4-syzkaller-00330-g7c16f0a4ed1c #0 [ 734.277313][T28355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 734.287363][T28355] ================================================================== [ 734.326175][ T29] audit: type=1400 audit(2000000312.753:23134): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[1638]" dev="pipefs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1