last executing test programs: 1m12.231163684s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$PTRACE_SETSIGMASK(0x3, r1, 0x8, &(0x7f0000000080)) 44.837846526s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5, 0x81b, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "527da5709529cd7ad1758927520e74ca7912a96e1d69bfd9c622282cff9e583a941288ec8cdfe8ae2efddbd917e852f601243a354afd76d60820ec6a937ea1ae"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5, 0x822, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "960280741928807fe0af372638720e7e618c613c74bc41b811aa42f449d501fb9870e5b7363d454f0c748cd00414dafedc9fe9f2d31ba64f96781c44b206c0d1"}}, 0x80}}, 0x0) 41.598649378s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x3, 0x0, 0x0) 41.590381509s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5, 0x81b, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "527da5709529cd7ad1758927520e74ca7912a96e1d69bfd9c622282cff9e583a941288ec8cdfe8ae2efddbd917e852f601243a354afd76d60820ec6a937ea1ae"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5, 0x822, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "960280741928807fe0af372638720e7e618c613c74bc41b811aa42f449d501fb9870e5b7363d454f0c748cd00414dafedc9fe9f2d31ba64f96781c44b206c0d1"}}, 0x80}}, 0x0) 41.550330636s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) 41.526287689s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000020000580070001006962"], 0x34}}, 0x0) 41.350209726s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x21, r1, 0x0, 0x0) 41.289738456s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040500000000000000000000000000060006402b2f"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x2b, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x24008014) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r4, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x40000000000005, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 40.375952807s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x5, 0x140}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000140)="99", &(0x7f0000000440)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000140)}, 0x20) 40.36016616s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) 34.454135144s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0xaa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000085000000860000009500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = dup3(r9, r8, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rxrpc_skb\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x24, 0x93, &(0x7f00000002c0)="15149fad55a36e0cd8dcdeaf899dbe4f0ba57a49698368262c0176d5c99a6a4a1ebe8f79", &(0x7f0000000300)=""/147, 0x1, 0x0, 0x59, 0x56, &(0x7f00000003c0)="9ce356b2905fea930df5e7d4922a16477c7371f931805862fe23e77985f74e76d3696d0410451ade8b07d3189ec031bc0e8ebf60c8f202b0c405747e6369a0660bf673a8bd708ac683b9d36a77bd53a1f74f30358471c2be4c", &(0x7f00000004c0)="d095b83c71aea873f211c1c12dda24c8feff9c0e0aa9a86ddf004d0d1493e22a38f0824c24630bc164c64ba44df7c3d5966a79a1ae181ef50bd40d0ed27c296a9d8e8ca90f56ceaf8dee5cc662370b223fd5a8995e49", 0x2, 0x0, 0x80000001}, 0x50) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r11+10000000}}, 0x0) tkill(r6, 0x1000000000016) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 33.591856208s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000280)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b50000000000ecff160000000008000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000e0000000000060003000000000004001200"], 0x44}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(0xffffffffffffffff, r5, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x2) 33.559891613s ago: executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigsuspend(0x0, 0x0) 33.494316823s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040500000000000000000000000000060006402b2f"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x2b, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x24008014) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r4, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x40000000000005, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 33.414167076s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) setsockopt(r1, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x20, r6, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x24040091) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x44, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'syscall\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x44}}, 0x0) 33.38554466s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./control\x00', &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:newrole_exec_t:s0\x00', 0x24, 0x0) getdents64(r2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000d80)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private1, @private2, [], "1e520b4c951ee12e"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000001c0)='./control\x00', r0, 0x4000, r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6}]) 33.317278471s ago: executing program 3: openat$sndseq(0xffffffffffffff9c, 0x0, 0x4850cfbe28a876ba) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @nop, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x33) readv(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/131, 0x57}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x3}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fd02005000000000", 0x1c) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b020000586500"/32, 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 33.282876105s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 33.270277538s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@fat=@nfs}, {@utf8}, {@utf8}, {@shortname_winnt}]}, 0x1, 0x186, &(0x7f0000000440)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) 33.246741651s ago: executing program 4: getpriority(0x0, 0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 'dummy0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 33.238402043s ago: executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000640)=""/65, 0x41) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 33.129360549s ago: executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigsuspend(0x0, 0x0) 33.116818541s ago: executing program 3: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace$getenv(0x4205, r1, 0x202, &(0x7f0000000000)) 32.577167515s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000003780)="$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") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 32.513683975s ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r1 = memfd_create(&(0x7f00000000c0)='\x14E\x82\xa0\x1f\x1c\x90o\xb4(\xc4\x9bq\x05<~J\x94\x9cH\xa4~z\x03\xe9\xa2\xe5\x7f\xf4\xaaW\xea\xd9N\xad\xcb\xed\a\x8d\xae*$ok\xfa\x156\x97\xbb\x1a1\xca\x87\x1f&\x90\x8e\xc6<\xd1\x97\x99W*\xe9\x04\x17\x8e3\xf1\xda\x14\x82k\xc8\x8d\xfca\xc5P\x0e&\x99\x91\xbb\xae]\x1egi\xcb\xc0\x17\xc3.\x92\f\f\x01y[\x89\xb8b5Q\xc8\xa7\xb1$\x89M9\xe73\x9b`\xd6\x85yN\xea\x9bn\x11\x8e\xa5gy\xb8@\xf2\xf6\x1e\xf8\x91\xc4\xc8\xea\xfaa\x959\n\xf1V\x98c\xfb\xbb\xd7\x01^*\xa22\xfd\x89\r\xc3\xde\xcc\xda\xe1\xd8c\xf9n2\x904J\xf3g\xfa?\xf6\x99\xd3\xa6qC\xbfY\xa2\xe7Qt\\\x14T\x9d\t\xef\xe9\x15\x8e\x94\xa4\xbaF\xb4\x16T\x96\xc8\xe9\xee~\x0fk\xa1\xb4\x89\xcc\x96\x1f\x86F\xdfwZ9\x84\x1e\xa0\xbf|\xf9U\x8b\x02;,\x84\xea\xad\xdeQ\x05F\x13o\x009\x83\x9ayf\xf5M\bZB~\x17\x14f\xd8l^X\x14\xdbO\"\xfc\x94\xa1\x19\xbcP\xa4\xdb\x8e \xf2\xfb\xd4-0H\x1cudcL\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x408cf, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x1, 0x2}]}, @union]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1}, 0x20) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) r3 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r5 = memfd_secret(0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) ftruncate(r5, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x42882}, &(0x7f0000000180)='./file0\x00', 0x18}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x15, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4, 0x6, "13a033565c06a08e69897f51d7f0d46cbfed22af736e77b2693b3fb00f0d98bfdfaf29999b210e639eee4b000000000000000085fc67cfa8fc1a56049ccf0c8f67f8dc2d506e3eb5c8df4701863b441d8fe39c23681214051360262bdb5c669d966a0f42b574c72433603ffa6d894729a8139fbe798f057c09498c0a31632899613c5ab9190b655f6b0a96b8a2bdb9dba20e5f557dd706d47210c8ed9ddb477d39b72124148f1445e70994b560cc70734b5019bac3a5527f5e817086c2da662b30129faf57a272c7fc09ffe6a30306f5f6105990b27bbefd0d396c4e514c"}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/245, 0xf5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{}, {0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000300)=""/173}, 0x90) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r9, 0x0) getsockopt$inet_int(r8, 0x10d, 0xa2, 0x0, &(0x7f0000000040)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x76, 0x0, &(0x7f0000000040)) 8.83934836s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000005c0)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x21, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}, @generic='\'']}]}, 0x34}], 0x1}, 0x0) 7.848550114s ago: executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 733.969726ms ago: executing program 4: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x420b, r1, 0x0, 0x0) 605.702056ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000077"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff0055e5c0d48bd63ffdb93bd43a847a1597c8ef039a5be422", 0x38}, 0x60) listen(r1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe1c, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @remote}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}]}, 0x38}}, 0x0) fstat(r2, &(0x7f0000000280)) splice(r0, &(0x7f00000001c0)=0x6, 0xffffffffffffffff, &(0x7f0000000240)=0x4000000000000005, 0x1, 0x9) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 1591] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.659605][T31600] tap0: tun_chr_ioctl cmd 1074025681 [ 322.691223][T10130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.734131][T31618] loop2: detected capacity change from 0 to 8192 [ 322.746049][T10130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.758527][T31618] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.810278][T10130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.875442][T10130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.944908][T31630] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.016116][T27573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.049664][T27573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.113614][T27573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.156934][T27573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.200378][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.308666][T27573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.454836][T31683] tap0: tun_chr_ioctl cmd 1074025681 [ 323.474391][T31701] __nla_validate_parse: 3 callbacks suppressed [ 323.474408][T31701] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.560791][T31710] loop2: detected capacity change from 0 to 256 [ 323.798525][T31728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 323.973820][T31763] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 324.043294][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.278588][T31804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.301309][T31801] loop2: detected capacity change from 0 to 1024 [ 324.317862][T31801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.365706][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.459916][T31819] loop0: detected capacity change from 0 to 8192 [ 324.530827][T31819] loop0: p1 p2 p3 [ 325.055354][ T29] audit: type=1400 audit(1718387122.273:42657): avc: denied { execute } for pid=31852 comm="syz-executor.3" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.104915][ T29] audit: type=1400 audit(1718387122.310:42658): avc: denied { dac_read_search } for pid=31856 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 325.110289][T31860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.217290][T31868] batman_adv: batadv0: Adding interface: macsec1 [ 325.223892][T31868] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.249319][T31868] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 325.456660][T31920] loop2: detected capacity change from 0 to 1024 [ 325.468236][ T29] audit: type=1400 audit(1718387122.652:42659): avc: denied { read } for pid=31918 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 325.501794][T31925] loop4: detected capacity change from 0 to 512 [ 325.509547][T31925] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.510739][T31920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.529717][T31925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.536683][ T29] audit: type=1400 audit(1718387122.716:42660): avc: denied { link } for pid=31896 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 325.546358][T31925] EXT4-fs (loop4): 1 truncate cleaned up [ 325.562244][ T29] audit: type=1400 audit(1718387122.716:42661): avc: denied { rename } for pid=31896 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 325.568603][T31925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.604783][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.634734][T31925] syz_tun: entered promiscuous mode [ 325.640175][T31925] macsec2: entered promiscuous mode [ 325.645593][T31925] macsec2: entered allmulticast mode [ 325.651008][T31925] syz_tun: entered allmulticast mode [ 325.658547][T31925] syz_tun: left allmulticast mode [ 325.663884][T31925] syz_tun: left promiscuous mode [ 325.680933][T31943] loop2: detected capacity change from 0 to 1024 [ 325.694621][T31943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.734067][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.758786][T30860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.894104][T31963] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.905661][T31963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=31963 comm=syz-executor.4 [ 325.920051][T31963] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 325.933100][T31963] bond0: entered promiscuous mode [ 325.938305][T31963] bond_slave_0: entered promiscuous mode [ 325.944297][T31963] bond_slave_1: entered promiscuous mode [ 325.950724][T31963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.989736][T31963] bond0: left promiscuous mode [ 325.994585][T31963] bond_slave_0: left promiscuous mode [ 326.000130][T31963] bond_slave_1: left promiscuous mode [ 326.335795][T31985] loop0: detected capacity change from 0 to 512 [ 326.354679][T31985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.373441][T31985] ext4 filesystem being mounted at /root/syzkaller-testdir2248807629/syzkaller.UizmSp/210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.400932][ T29] audit: type=1400 audit(1718387123.501:42662): avc: denied { ioctl } for pid=31984 comm="syz-executor.0" path="/root/syzkaller-testdir2248807629/syzkaller.UizmSp/210/file0/file1" dev="loop0" ino=15 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.432705][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.545652][T32016] loop4: detected capacity change from 0 to 2048 [ 326.553568][ T29] audit: type=1400 audit(1718387123.658:42663): avc: denied { recv } for pid=32015 comm="syz-executor.4" saddr=10.128.0.163 src=37586 daddr=10.128.1.26 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.599090][T32016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.661326][T30860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.766898][T32040] loop0: detected capacity change from 0 to 512 [ 326.801297][T32040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.814154][T32040] ext4 filesystem being mounted at /root/syzkaller-testdir2248807629/syzkaller.UizmSp/217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.844454][T32052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.855213][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.873845][T32046] batman_adv: batadv0: Adding interface: macsec1 [ 326.880312][T32046] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.905759][T32046] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 326.915752][ T29] audit: type=1326 audit(1718387123.953:42664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546336fea9 code=0x7ffc0000 [ 326.940051][ T29] audit: type=1326 audit(1718387123.953:42665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546336fea9 code=0x7ffc0000 [ 326.964235][ T29] audit: type=1326 audit(1718387123.953:42666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f546336fea9 code=0x7ffc0000 [ 327.019809][T32061] loop0: detected capacity change from 0 to 2048 [ 327.030636][T32067] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.042122][T32067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=32067 comm=syz-executor.2 [ 327.042485][T32061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.067402][T32067] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 327.080940][T32067] bond0: entered promiscuous mode [ 327.086038][T32067] bond_slave_0: entered promiscuous mode [ 327.091842][T32067] bond_slave_1: entered promiscuous mode [ 327.099453][T32067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.107315][T32067] bond0: left promiscuous mode [ 327.112233][T32067] bond_slave_0: left promiscuous mode [ 327.117954][T32067] bond_slave_1: left promiscuous mode [ 327.168759][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.262140][T32100] loop2: detected capacity change from 0 to 1024 [ 327.310573][T32100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.329495][T32097] cgroup: name respecified [ 327.361707][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.433749][T32120] pim6reg1: entered promiscuous mode [ 327.439204][T32120] pim6reg1: entered allmulticast mode [ 327.485955][T32133] loop2: detected capacity change from 0 to 128 [ 327.519270][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.581481][T32170] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.582700][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.632224][T32179] cgroup: name respecified [ 327.647951][T32106] chnl_net:caif_netlink_parms(): no params data found [ 327.668197][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.732653][T32106] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.738118][T32315] syz-executor.2[32315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.739780][T32106] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.739849][T32315] syz-executor.2[32315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.752123][T32106] bridge_slave_0: entered allmulticast mode [ 327.777855][T32106] bridge_slave_0: entered promiscuous mode [ 327.786585][T32106] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.793716][T32106] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.800975][T32106] bridge_slave_1: entered allmulticast mode [ 327.807560][T32106] bridge_slave_1: entered promiscuous mode [ 327.816491][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.843090][T32106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.854610][T32106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.878231][T32106] team0: Port device team_slave_0 added [ 327.885213][T32106] team0: Port device team_slave_1 added [ 327.910083][T32391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.910162][T32106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.925313][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.951433][T32106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.963623][T32106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.970629][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.996568][T32106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.026154][ T11] bridge_slave_1: left allmulticast mode [ 328.031904][ T11] bridge_slave_1: left promiscuous mode [ 328.037596][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.045349][ T11] bridge_slave_0: left allmulticast mode [ 328.051061][ T11] bridge_slave_0: left promiscuous mode [ 328.056739][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.155704][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.168521][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.180524][ T11] bond0 (unregistering): Released all slaves [ 328.214200][T32106] hsr_slave_0: entered promiscuous mode [ 328.221077][T32106] hsr_slave_1: entered promiscuous mode [ 328.227083][T32106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.234834][T32106] Cannot create hsr debugfs directory [ 328.301748][T32492] cgroup: name respecified [ 328.328712][T32528] usb usb5: usbfs: process 32528 (syz-executor.2) did not claim interface 0 before use [ 328.341176][ T11] hsr_slave_0: left promiscuous mode [ 328.346899][ T11] hsr_slave_1: left promiscuous mode [ 328.353323][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.360951][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.368854][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.376350][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.383813][ T11] batman_adv: batadv0: Removing interface: macsec1 [ 328.392669][ T11] veth1_macvtap: left promiscuous mode [ 328.398251][ T11] veth0_macvtap: left promiscuous mode [ 328.403829][ T11] veth1_vlan: left promiscuous mode [ 328.409055][ T11] veth0_vlan: left promiscuous mode [ 328.506624][ T11] team0 (unregistering): Port device team_slave_1 removed [ 328.519217][ T11] team0 (unregistering): Port device team_slave_0 removed [ 328.600807][T32553] loop0: detected capacity change from 0 to 512 [ 328.608314][T32553] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.615212][T32553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.628675][T32553] EXT4-fs (loop0): 1 truncate cleaned up [ 328.634741][T32553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.685033][T32559] futex_wake_op: syz-executor.2 tries to shift op by 35; fix this program [ 328.707565][T32562] loop2: detected capacity change from 0 to 128 [ 328.716445][T32562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.728740][T32562] ext4 filesystem being mounted at /root/syzkaller-testdir1657116572/syzkaller.lUlEia/158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 328.774784][T28717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.897267][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.952842][T32589] sit0: entered allmulticast mode [ 328.960761][T32590] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.987530][T32589] sit0: entered promiscuous mode [ 329.074263][T32603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.075846][T32106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.095738][T32106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.112521][T32106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.127383][T32106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.163682][T32613] loop2: detected capacity change from 0 to 128 [ 329.169517][T32106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.182700][T32106] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.220525][T27572] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.227656][T27572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.239722][T28180] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.246835][T28180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.343506][T32106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.521931][T32106] veth0_vlan: entered promiscuous mode [ 329.534607][T32106] veth1_vlan: entered promiscuous mode [ 329.553899][T32106] veth0_macvtap: entered promiscuous mode [ 329.563035][T32106] veth1_macvtap: entered promiscuous mode [ 329.576993][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.587491][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.597409][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.607972][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.618009][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.628718][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.638772][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.649370][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.664198][T32106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.673926][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.684512][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.694386][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.704884][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.714735][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.725232][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.735236][T32106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.745737][T32106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.756721][T32106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.772636][T32106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.781525][T32106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.790313][T32106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.799172][T32106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.816340][T32654] sit0: entered allmulticast mode [ 329.865369][T32654] sit0: entered promiscuous mode [ 329.952037][T32663] loop4: detected capacity change from 0 to 256 [ 330.333299][T32696] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.502954][T32707] pim6reg1: entered promiscuous mode [ 330.508334][T32707] pim6reg1: entered allmulticast mode [ 330.593767][T32717] syz-executor.4[32717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.593872][T32717] syz-executor.4[32717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.165470][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 331.165488][ T29] audit: type=1400 audit(1718387127.913:42689): avc: denied { map } for pid=32727 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 331.207957][ T29] audit: type=1400 audit(1718387127.913:42690): avc: denied { execute } for pid=32727 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 331.519104][ T29] audit: type=1326 audit(1718387128.236:42691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32763 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x0 [ 331.814376][ T312] loop4: detected capacity change from 0 to 256 [ 332.002246][ T29] audit: type=1326 audit(1718387128.679:42692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.026296][ T29] audit: type=1326 audit(1718387128.679:42693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.054100][ T29] audit: type=1326 audit(1718387128.679:42694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.078252][ T29] audit: type=1326 audit(1718387128.734:42695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.102261][ T29] audit: type=1326 audit(1718387128.734:42696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.126297][ T29] audit: type=1326 audit(1718387128.734:42697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.150376][ T29] audit: type=1326 audit(1718387128.734:42698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 332.253548][ T337] dummy0: entered promiscuous mode [ 332.260754][ T337] dummy0: left promiscuous mode [ 332.520906][ T377] dummy0: entered promiscuous mode [ 332.528053][ T377] dummy0: left promiscuous mode [ 332.834912][ T401] loop4: detected capacity change from 0 to 512 [ 332.843847][ T401] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz-executor.4: inode #13: comm syz-executor.4: iget: illegal inode # [ 332.857518][ T401] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 332.870742][ T401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.900919][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.328112][ T426] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.800743][ T457] loop0: detected capacity change from 0 to 1024 [ 333.831794][ T457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.848472][ T457] tmpfs: Bad value for 'mpol' [ 333.862888][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.031165][ T479] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 334.039579][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.049137][ T479] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 334.057439][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.067911][ T479] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 334.076111][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.146177][ T487] pimreg: entered allmulticast mode [ 334.312213][ T516] pimreg: entered allmulticast mode [ 334.324782][ T521] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.340139][ T523] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.370938][ T523] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 334.386876][ T527] loop0: detected capacity change from 0 to 256 [ 334.395468][ T527] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 334.396393][ T523] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 334.506750][ T545] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 334.594055][ T557] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.793492][ T564] loop2: detected capacity change from 0 to 256 [ 334.843258][ T564] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 335.088175][ T578] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 335.143998][ T585] loop0: detected capacity change from 0 to 764 [ 335.213203][ T585] loop0: detected capacity change from 0 to 8192 [ 335.224022][ T585] FAT-fs (loop0): Unrecognized mount option "iso9660" or missing value [ 335.942984][ T617] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 336.187643][ T639] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.207193][ T639] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 336.222448][ T639] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 336.355260][ T658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.439641][ T669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.550000][ T689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.561765][ T689] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 336.640199][ T710] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.646805][ T712] xt_bpf: check failed: parse error [ 336.688955][ T720] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.757320][ T734] loop0: detected capacity change from 0 to 256 [ 336.764290][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 336.764303][ T29] audit: type=1326 audit(1718387133.073:42723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x0 [ 336.777777][ T734] FAT-fs (loop0): Directory bread(block 64) failed [ 336.800686][ T734] FAT-fs (loop0): Directory bread(block 65) failed [ 336.807306][ T734] FAT-fs (loop0): Directory bread(block 66) failed [ 336.813988][ T734] FAT-fs (loop0): Directory bread(block 67) failed [ 336.820514][ T734] FAT-fs (loop0): Directory bread(block 68) failed [ 336.827006][ T734] FAT-fs (loop0): Directory bread(block 69) failed [ 336.833601][ T734] FAT-fs (loop0): Directory bread(block 70) failed [ 336.840179][ T734] FAT-fs (loop0): Directory bread(block 71) failed [ 336.847132][ T734] FAT-fs (loop0): Directory bread(block 72) failed [ 336.853783][ T734] FAT-fs (loop0): Directory bread(block 73) failed [ 336.898789][ T734] syz-executor.0: attempt to access beyond end of device [ 336.898789][ T734] loop0: rw=2049, sector=1800, nr_sectors = 2048 limit=256 [ 336.914419][ T734] syz-executor.0: attempt to access beyond end of device [ 336.914419][ T734] loop0: rw=2049, sector=3848, nr_sectors = 2048 limit=256 [ 336.929224][ T734] syz-executor.0: attempt to access beyond end of device [ 336.929224][ T734] loop0: rw=2049, sector=5896, nr_sectors = 104 limit=256 [ 337.152538][ T751] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.256678][ T776] dccp_invalid_packet: P.Data Offset(100) too large [ 337.276466][ T778] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.648646][ T842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.680773][ T29] audit: type=1326 audit(1718387133.922:42724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x0 [ 337.808754][ T867] loop4: detected capacity change from 0 to 764 [ 337.921906][ T867] loop4: detected capacity change from 0 to 8192 [ 337.932615][ T867] FAT-fs (loop4): Unrecognized mount option "iso9660" or missing value [ 338.071146][ T922] loop2: detected capacity change from 0 to 256 [ 338.086745][ T922] FAT-fs (loop2): Directory bread(block 64) failed [ 338.093399][ T922] FAT-fs (loop2): Directory bread(block 65) failed [ 338.100035][ T922] FAT-fs (loop2): Directory bread(block 66) failed [ 338.106708][ T922] FAT-fs (loop2): Directory bread(block 67) failed [ 338.113316][ T922] FAT-fs (loop2): Directory bread(block 68) failed [ 338.120670][ T922] FAT-fs (loop2): Directory bread(block 69) failed [ 338.127306][ T922] FAT-fs (loop2): Directory bread(block 70) failed [ 338.133889][ T922] FAT-fs (loop2): Directory bread(block 71) failed [ 338.140416][ T922] FAT-fs (loop2): Directory bread(block 72) failed [ 338.146989][ T922] FAT-fs (loop2): Directory bread(block 73) failed [ 338.211228][ T922] syz-executor.2: attempt to access beyond end of device [ 338.211228][ T922] loop2: rw=2049, sector=1800, nr_sectors = 4088 limit=256 [ 338.226508][ T922] syz-executor.2: attempt to access beyond end of device [ 338.226508][ T922] loop2: rw=2049, sector=5888, nr_sectors = 112 limit=256 [ 338.669914][ T950] loop2: detected capacity change from 0 to 256 [ 338.685038][ T950] FAT-fs (loop2): Directory bread(block 64) failed [ 338.691735][ T950] FAT-fs (loop2): Directory bread(block 65) failed [ 338.698479][ T950] FAT-fs (loop2): Directory bread(block 66) failed [ 338.705207][ T950] FAT-fs (loop2): Directory bread(block 67) failed [ 338.711869][ T950] FAT-fs (loop2): Directory bread(block 68) failed [ 338.718536][ T950] FAT-fs (loop2): Directory bread(block 69) failed [ 338.725128][ T950] FAT-fs (loop2): Directory bread(block 70) failed [ 338.731729][ T950] FAT-fs (loop2): Directory bread(block 71) failed [ 338.739435][ T950] FAT-fs (loop2): Directory bread(block 72) failed [ 338.746099][ T950] FAT-fs (loop2): Directory bread(block 73) failed [ 338.811086][ T950] syz-executor.2: attempt to access beyond end of device [ 338.811086][ T950] loop2: rw=2049, sector=1800, nr_sectors = 2160 limit=256 [ 338.827144][ T950] syz-executor.2: attempt to access beyond end of device [ 338.827144][ T950] loop2: rw=2049, sector=3960, nr_sectors = 2040 limit=256 [ 338.915386][ T968] dccp_invalid_packet: P.Data Offset(100) too large [ 339.208146][ T29] audit: type=1326 audit(1718387135.334:42725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.232311][ T29] audit: type=1326 audit(1718387135.334:42726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.260858][ T29] audit: type=1326 audit(1718387135.343:42727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.285037][ T29] audit: type=1326 audit(1718387135.352:42728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.309098][ T29] audit: type=1326 audit(1718387135.352:42729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.333192][ T29] audit: type=1326 audit(1718387135.362:42730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.357496][ T29] audit: type=1326 audit(1718387135.380:42731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b2057ea9 code=0x7ffc0000 [ 339.406032][ T29] audit: type=1326 audit(1718387135.380:42732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b2055627 code=0x7ffc0000 [ 339.465636][ T1020] loop0: detected capacity change from 0 to 164 [ 339.475591][ T1020] syz-executor.0: attempt to access beyond end of device [ 339.475591][ T1020] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 339.489995][ T1020] syz-executor.0: attempt to access beyond end of device [ 339.489995][ T1020] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.503874][ T1020] syz-executor.0: attempt to access beyond end of device [ 339.503874][ T1020] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 340.601714][ T1076] __nla_validate_parse: 8 callbacks suppressed [ 340.601733][ T1076] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.678861][ T1145] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.754379][ T1163] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.928653][ T1208] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.019763][ T1228] loop0: detected capacity change from 0 to 1024 [ 341.029242][ T1228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 341.041804][ T1228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.064946][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.241252][ T1268] loop0: detected capacity change from 0 to 1024 [ 341.249377][ T1268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 341.260074][ T1268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.280995][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.345288][ T1278] xt_connbytes: Forcing CT accounting to be enabled [ 341.354491][ T1278] loop0: detected capacity change from 0 to 128 [ 342.693688][ T1360] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 342.842467][ T1371] loop4: detected capacity change from 0 to 512 [ 342.856480][ T1371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.869337][ T1371] ext4 filesystem being mounted at /root/syzkaller-testdir4267291111/syzkaller.aOe3nc/67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.080557][ T1385] xt_connbytes: Forcing CT accounting to be enabled [ 343.091159][ T1385] loop2: detected capacity change from 0 to 128 [ 343.492099][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.784016][ T1413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 343.811411][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 343.811425][ T29] audit: type=1400 audit(1718387139.580:42798): avc: denied { create } for pid=1416 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 343.838152][ T29] audit: type=1400 audit(1718387139.580:42799): avc: denied { create } for pid=1416 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 343.966146][ T1433] sock: sock_timestamping_bind_phc: sock not bind to device [ 343.976077][ T1433] loop4: detected capacity change from 0 to 512 [ 343.992829][ T1433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.005577][ T1433] ext4 filesystem being mounted at /root/syzkaller-testdir4267291111/syzkaller.aOe3nc/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.021732][ T1433] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 344.030753][ T1433] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 344.040514][ T1433] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0 [ 344.059841][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.154831][ T1444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.351284][ T1469] RDS: rds_bind could not find a transport for ::200:0:2:20:0:0, load rds_tcp or rds_rdma? [ 344.376339][ T29] audit: type=1400 audit(1718387140.078:42800): avc: denied { create } for pid=1468 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.396393][ T29] audit: type=1400 audit(1718387140.078:42801): avc: denied { bind } for pid=1468 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.987679][ T1495] loop4: detected capacity change from 0 to 1024 [ 344.990477][ T1494] loop0: detected capacity change from 0 to 8192 [ 344.999781][ T1495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.430829][ T29] audit: type=1400 audit(1718387141.075:42802): avc: denied { read } for pid=1505 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.489107][ T1511] loop2: detected capacity change from 0 to 1024 [ 345.516006][ T1511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.520849][ T1522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.555425][ T1522] loop0: detected capacity change from 0 to 2048 [ 345.564324][ T1522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.574217][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.586534][ T1522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.598640][ T29] audit: type=1400 audit(1718387141.223:42803): avc: denied { write } for pid=3179 comm="kworker/1:4" path="socket:[84801]" dev="sockfs" ino=84801 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 345.629218][ T1522] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 345.692282][T26565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.773169][ T29] audit: type=1400 audit(1718387141.389:42804): avc: denied { mount } for pid=1554 comm="syz-executor.2" name="/" dev="autofs" ino=85872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 345.823692][ T1561] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.841832][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.871515][ T1565] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.900963][ T29] audit: type=1326 audit(1718387141.509:42805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3219f47ea9 code=0x0 [ 345.953615][ T1580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.018230][ T1590] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.195325][ T1615] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.220657][ T1620] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.280736][ T1630] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.470651][ T1644] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.813170][ T1658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.003169][ T1691] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 348.003169][ T1691] The task syz-executor.2 (1691) triggered the difference, watch for misbehavior. [ 348.060439][ T1691] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.154656][ T1704] ªªªªªªÿÿ: renamed from vlan0 (while UP) [ 348.629298][ T1712] loop4: detected capacity change from 0 to 1024 [ 348.637297][ T1712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.760236][ T1712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 348.768411][ T1712] System zones: 0-1, 3-12 [ 348.802232][ T1712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.037501][ T1731] loop2: detected capacity change from 0 to 128 [ 349.292255][ T1756] netlink: get zone limit has 8 unknown bytes [ 349.390457][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.451282][ T1779] cgroup: noprefix used incorrectly [ 349.822438][ T1831] cgroup: noprefix used incorrectly [ 350.176514][ T1860] netlink: get zone limit has 8 unknown bytes [ 350.207622][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 350.207640][ T29] audit: type=1326 audit(1718387145.478:42810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1865 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3219f47ea9 code=0x0 [ 350.246932][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.257351][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.332851][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.343337][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.356799][ T1845] chnl_net:caif_netlink_parms(): no params data found [ 350.397461][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.404609][ T1845] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.412591][ T1845] bridge_slave_0: entered allmulticast mode [ 350.419567][ T1845] bridge_slave_0: entered promiscuous mode [ 350.430134][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.440487][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.451671][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.458738][ T1845] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.466053][ T1845] bridge_slave_1: entered allmulticast mode [ 350.472997][ T1845] bridge_slave_1: entered promiscuous mode [ 350.493760][ T1845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.504746][ T1845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.517255][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.527719][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.551396][ T1845] team0: Port device team_slave_0 added [ 350.558096][ T1845] team0: Port device team_slave_1 added [ 350.576489][ T1845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.583553][ T1845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.609509][ T1845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.639815][ T1845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.646916][ T1845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.673222][ T1845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.676343][ T56] batadv0: left allmulticast mode [ 350.676441][ T56] bridge0: port 3(batadv0) entered disabled state [ 350.687665][ T56] bridge_slave_1: left allmulticast mode [ 350.704595][ T56] bridge_slave_1: left promiscuous mode [ 350.710305][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.718178][ T56] bridge_slave_0: left allmulticast mode [ 350.723875][ T56] bridge_slave_0: left promiscuous mode [ 350.729519][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.807420][ T2137] loop4: detected capacity change from 0 to 512 [ 350.815416][ T2137] EXT4-fs (loop4): first meta block group too large: 16711680 (group descriptor block count 1) [ 350.927238][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.937560][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.947735][ T56] bond0 (unregistering): Released all slaves [ 350.956130][ T56] bond1 (unregistering): Released all slaves [ 350.964720][ T56] bond2 (unregistering): Released all slaves [ 350.993615][ T1845] hsr_slave_0: entered promiscuous mode [ 351.000576][ T1845] hsr_slave_1: entered promiscuous mode [ 351.008266][ T1845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.016176][ T1845] Cannot create hsr debugfs directory [ 351.021643][ T56] tipc: Left network mode [ 351.058819][ T56] hsr_slave_0: left promiscuous mode [ 351.064507][ T56] hsr_slave_1: left promiscuous mode [ 351.070731][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.078297][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.085797][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.093291][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.102527][ T56] batadv0: left promiscuous mode [ 351.107720][ T56] veth1_macvtap: left promiscuous mode [ 351.113236][ T56] veth0_macvtap: left promiscuous mode [ 351.118797][ T56] veth1_vlan: left promiscuous mode [ 351.124245][ T56] veth0_vlan: left promiscuous mode [ 351.210787][ T56] team0 (unregistering): Port device vlan2 removed [ 351.270506][ T56] team0 (unregistering): Port device team_slave_1 removed [ 351.281567][ T56] team0 (unregistering): Port device team_slave_0 removed [ 351.349695][ T2202] can0: slcan on ptm0. [ 351.406819][ T2226] loop2: detected capacity change from 0 to 8192 [ 351.456733][ T2226] loop2: p1 p2 p4 < > [ 351.461065][ T2226] loop2: p1 start 16777472 is beyond EOD, truncated [ 351.467712][ T2226] loop2: p2 start 34144256 is beyond EOD, truncated [ 351.555727][ T29] audit: type=1400 audit(1718387146.733:42811): avc: denied { map } for pid=2260 comm="syz-executor.2" path="socket:[86549]" dev="sockfs" ino=86549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.615525][ T29] audit: type=1326 audit(1718387146.779:42812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3219f47ea9 code=0x0 [ 351.774472][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.843677][ T1845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.853378][ T1845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.868488][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.880405][ T1845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.892481][ T1845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.936371][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.976670][ T2167] can0 (unregistered): slcan off ptm0. [ 352.029550][ T1845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.041796][ T1845] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.055570][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.073586][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.080697][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.090696][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.100434][ T29] audit: type=1400 audit(1718387147.241:42813): avc: denied { write } for pid=2397 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.102506][ T2273] chnl_net:caif_netlink_parms(): no params data found [ 352.129175][ T2398] bio_check_eod: 24170 callbacks suppressed [ 352.129195][ T2398] syz-executor.4: attempt to access beyond end of device [ 352.129195][ T2398] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 352.153125][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.160377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.200973][ T2273] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.208270][ T2273] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.215858][ T2273] bridge_slave_0: entered allmulticast mode [ 352.222314][ T2273] bridge_slave_0: entered promiscuous mode [ 352.229629][ T2273] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.236724][ T2273] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.243920][ T2273] bridge_slave_1: entered allmulticast mode [ 352.250992][ T2273] bridge_slave_1: entered promiscuous mode [ 352.303573][ T56] bridge_slave_1: left allmulticast mode [ 352.309259][ T56] bridge_slave_1: left promiscuous mode [ 352.315259][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.324790][ T56] bridge_slave_0: left allmulticast mode [ 352.330475][ T56] bridge_slave_0: left promiscuous mode [ 352.336314][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.444391][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.454772][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.465048][ T56] bond0 (unregistering): Released all slaves [ 352.474448][ T2273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.485267][ T2273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.517637][ T1845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.533676][ T2273] team0: Port device team_slave_0 added [ 352.553435][ T56] hsr_slave_0: left promiscuous mode [ 352.562528][ T56] hsr_slave_1: left promiscuous mode [ 352.570966][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.578570][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.587885][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.595390][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.610858][ T56] veth1_macvtap: left promiscuous mode [ 352.611403][ T2548] loop4: detected capacity change from 0 to 1024 [ 352.616481][ T56] veth0_macvtap: left promiscuous mode [ 352.616580][ T56] veth1_vlan: left promiscuous mode [ 352.633629][ T56] veth0_vlan: left promiscuous mode [ 352.638977][ T2548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.690660][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.761072][ T2557] loop4: detected capacity change from 0 to 256 [ 352.767890][ T56] team0 (unregistering): Port device team_slave_1 removed [ 352.781318][ T56] team0 (unregistering): Port device team_slave_0 removed [ 352.829189][ T2273] team0: Port device team_slave_1 added [ 352.854910][ T2549] can0: slcan on ptm0. [ 352.878797][ T2273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.885827][ T2273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.911882][ T2273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.923524][ T2273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.930527][ T2273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.956505][ T2273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.009032][ T2273] hsr_slave_0: entered promiscuous mode [ 353.015460][ T2273] hsr_slave_1: entered promiscuous mode [ 353.021779][ T2273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.030964][ T2273] Cannot create hsr debugfs directory [ 353.059829][ T1845] veth0_vlan: entered promiscuous mode [ 353.074874][ T1845] veth1_vlan: entered promiscuous mode [ 353.120469][ T1845] veth0_macvtap: entered promiscuous mode [ 353.134722][ T2660] loop4: detected capacity change from 0 to 1024 [ 353.149687][ T2660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 353.150567][ T1845] veth1_macvtap: entered promiscuous mode [ 353.163861][ T2660] System zones: 0-1, 3-12 [ 353.170908][ T2660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.207166][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.217758][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.227683][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.238173][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.248248][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.258790][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.269922][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.271545][ T1845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.297158][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.307629][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.317531][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.327958][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.337886][ T1845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.348316][ T1845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.359122][ T1845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.370500][ T1845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.379324][ T1845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.388187][ T1845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.396948][ T1845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.617070][ T2273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.627628][ T2273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.639339][ T2273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.647479][ T2539] can0 (unregistered): slcan off ptm0. [ 353.662660][ T2273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.734075][ T2273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.751803][ T2273] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.763521][T28178] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.770691][T28178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.795011][ T2273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.805445][ T2273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.821681][ T2753] netlink: zone id is out of range [ 353.826832][ T2753] netlink: zone id is out of range [ 353.832545][ T2753] netlink: set zone limit has 8 unknown bytes [ 353.843108][T28178] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.850288][T28178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.943005][ T2273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.093101][ T2273] veth0_vlan: entered promiscuous mode [ 354.109001][ T2273] veth1_vlan: entered promiscuous mode [ 354.120948][ T2777] loop4: detected capacity change from 0 to 256 [ 354.146806][ T2273] veth0_macvtap: entered promiscuous mode [ 354.167236][ T2273] veth1_macvtap: entered promiscuous mode [ 354.169915][ T29] audit: type=1400 audit(1718387149.142:42814): avc: denied { execute } for pid=2750 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=88212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 354.178468][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.210685][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.220799][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.231324][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.241302][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.251749][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.262072][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.272528][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.282338][ T29] audit: type=1326 audit(1718387149.243:42815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x0 [ 354.308437][ T2273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.317206][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.327675][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.337579][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.348058][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.357971][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.368497][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.378363][ T2273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.388844][ T2273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.400374][ T2273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.412314][ T2785] can0: slcan on ptm0. [ 354.416535][ T2273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.425343][ T2273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.434158][ T2273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.442940][ T2273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.456811][ T2791] loop3: detected capacity change from 0 to 1024 [ 354.466384][ T2791] EXT4-fs: Ignoring removed orlov option [ 354.472375][ T2791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.505161][ T2791] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 1056964608 [ 354.517420][ T2791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.551473][ T1845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.567390][ T2808] openvswitch: netlink: IPv4 tun info is not correct [ 354.653886][ T2826] netlink: zone id is out of range [ 354.659059][ T2826] netlink: zone id is out of range [ 354.664880][ T2826] netlink: set zone limit has 8 unknown bytes [ 354.675270][ T2828] gretap0: refused to change device tx_queue_len [ 354.682435][ T2828] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 354.924306][ T29] audit: type=1326 audit(1718387149.843:42816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 354.948383][ T29] audit: type=1326 audit(1718387149.843:42817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 354.976119][ T29] audit: type=1326 audit(1718387149.843:42818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 355.000297][ T29] audit: type=1326 audit(1718387149.843:42819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 355.157883][ T2863] gretap0: refused to change device tx_queue_len [ 355.165014][ T2863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.166821][ T2783] can0 (unregistered): slcan off ptm0. [ 355.224367][ T2869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.227771][ T2871] loop4: detected capacity change from 0 to 512 [ 355.241917][ T2871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 355.253371][ T2871] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 355.267640][ T2871] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 355.280955][ T2871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.299874][ T2871] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 355.325976][ T2871] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor.4: path /root/syzkaller-testdir4267291111/syzkaller.aOe3nc/179/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 355.353455][ T2871] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 355.383705][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.392305][ T2876] openvswitch: netlink: IPv4 tun info is not correct [ 355.470047][ T2890] gretap0: refused to change device tx_queue_len [ 355.477195][ T2890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.577575][ T2897] can0: slcan on ptm0. [ 355.607828][ T2904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.656333][ T2904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.668245][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 355.668283][ T29] audit: type=1326 audit(1718387150.526:42859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.720832][ T2904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.761236][ T29] audit: type=1326 audit(1718387150.526:42860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.785549][ T29] audit: type=1326 audit(1718387150.526:42861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.810345][ T29] audit: type=1326 audit(1718387150.526:42862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.834936][ T29] audit: type=1326 audit(1718387150.526:42863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.859068][ T29] audit: type=1326 audit(1718387150.526:42864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.883261][ T29] audit: type=1326 audit(1718387150.526:42865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.907870][ T29] audit: type=1326 audit(1718387150.526:42866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.932333][ T29] audit: type=1326 audit(1718387150.536:42867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 355.956457][ T29] audit: type=1326 audit(1718387150.536:42868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c72f6ea9 code=0x7ffc0000 [ 356.050180][ T2904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.062384][ T2904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.074235][ T2904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.086443][ T2904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.119603][ T2941] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.505251][ T2891] can0 (unregistered): slcan off ptm0. [ 356.546260][ T2983] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.728745][ T2999] batadv_slave_0: entered promiscuous mode [ 356.745182][ T2998] batadv_slave_0: left promiscuous mode [ 356.838383][ T3006] can0: slcan on ptm0. [ 357.075571][ T3027] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.196243][ T3039] loop2: detected capacity change from 0 to 256 [ 357.285436][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.369965][ T3056] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.773340][ T3003] can0 (unregistered): slcan off ptm0. [ 357.802090][ T3080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.840959][ T3089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.884101][ T3100] loop4: detected capacity change from 0 to 256 [ 358.076496][ T3122] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.023994][ T3169] batadv_slave_0: entered promiscuous mode [ 359.041155][ T3168] batadv_slave_0: left promiscuous mode [ 359.926257][ T3208] loop2: detected capacity change from 0 to 512 [ 359.941347][ T3208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 359.966601][ T3208] EXT4-fs (loop2): 1 truncate cleaned up [ 359.976875][ T3208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.023689][ T3208] team0 (unregistering): Port device team_slave_0 removed [ 360.045434][ T3208] team0 (unregistering): Port device team_slave_1 removed [ 360.077460][ T3211] batadv_slave_0: entered promiscuous mode [ 360.093563][ T3209] batadv_slave_0: left promiscuous mode [ 360.296986][ T3258] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 360.467455][ T3263] loop4: detected capacity change from 0 to 1024 [ 360.791816][ T3282] batadv_slave_0: entered promiscuous mode [ 360.809557][ T3281] batadv_slave_0: left promiscuous mode [ 360.935178][ T3290] validate_nla: 4 callbacks suppressed [ 360.935193][ T3290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 360.996477][ T3293] loop3: detected capacity change from 0 to 1024 [ 361.341161][ T3327] loop1: detected capacity change from 0 to 1024 [ 361.353404][ T3327] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 361.420485][ T3327] pim6reg: entered allmulticast mode [ 361.662382][ T3339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.073816][ T3353] Invalid ELF section header overflow [ 362.073863][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 362.073875][ T29] audit: type=1400 audit(1718387156.443:42904): avc: denied { module_load } for pid=3352 comm="syz-executor.4" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 362.307444][ T3381] vlan2: entered promiscuous mode [ 362.312842][ T3381] dummy0: entered promiscuous mode [ 362.319342][ T3381] team0: Port device vlan2 added [ 362.412482][ T3391] loop3: detected capacity change from 0 to 1024 [ 362.510998][ T3400] loop3: detected capacity change from 0 to 512 [ 362.530585][ T3400] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 362.538539][ T3400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 362.546660][ T3400] System zones: 0-1, 15-15, 18-18, 34-34 [ 362.554813][ T3400] EXT4-fs (loop3): orphan cleanup on readonly fs [ 362.561267][ T3400] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 362.570589][ T3400] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 362.574445][ T3412] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 362.585168][ T3400] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 362.593234][ T3412] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 362.608162][ T3412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.608228][ T3400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 362.633107][ T3400] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 362.641978][ T3400] EXT4-fs (loop3): 1 truncate cleaned up [ 362.648129][ T3400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.821834][ T3425] vlan2: entered promiscuous mode [ 362.827090][ T3425] dummy0: entered promiscuous mode [ 362.833387][ T3425] team0: Port device vlan2 added [ 363.050990][ T3441] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.403796][ T1845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.482551][ T3454] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 363.490820][ T3454] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 363.508306][ T3454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.540421][ T3462] loop3: detected capacity change from 0 to 1024 [ 363.548257][ T3462] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 363.604167][ T3462] pim6reg: entered allmulticast mode [ 363.827894][ T3480] loop4: detected capacity change from 0 to 512 [ 363.837176][ T3480] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 363.845586][ T3480] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 363.860368][ T3480] EXT4-fs (loop4): 1 truncate cleaned up [ 363.866499][ T3480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.900882][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.961236][ T3492] vlan2: entered promiscuous mode [ 363.966460][ T3492] dummy0: entered promiscuous mode [ 363.973131][ T3492] team0: Port device vlan2 added [ 364.141743][ T29] audit: type=1400 audit(1718387158.344:42905): avc: denied { lock } for pid=3517 comm="syz-executor.1" path="socket:[90426]" dev="sockfs" ino=90426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 364.178867][ T3509] loop4: detected capacity change from 0 to 512 [ 364.237297][ T29] audit: type=1326 audit(1718387158.437:42906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x0 [ 364.273070][ T3546] loop1: detected capacity change from 0 to 512 [ 364.282367][ T3546] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 364.290952][ T3546] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 364.306504][ T3546] EXT4-fs (loop1): 1 truncate cleaned up [ 364.312652][ T3546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.356569][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.508277][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.547803][ T3558] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.633652][ T3570] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 364.641898][ T3570] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 364.650111][ T3570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.713367][ T29] audit: type=1326 audit(1718387158.870:42907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb06adb9ea9 code=0x0 [ 364.870239][ T3584] loop3: detected capacity change from 0 to 512 [ 364.877771][ T3584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 364.889266][ T3584] EXT4-fs (loop3): 1 truncate cleaned up [ 364.895806][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.919949][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 364.932924][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 364.942790][ T3584] dummy0: left promiscuous mode [ 364.968684][ T3584] team0 (unregistering): Port device vlan2 removed [ 364.995683][ T3621] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.049288][ T1845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.111830][ T3627] loop4: detected capacity change from 0 to 512 [ 365.141394][ T3627] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 365.149449][ T3627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 365.160247][ T3627] System zones: 0-1, 15-15, 18-18, 34-34 [ 365.167593][ T3627] EXT4-fs (loop4): orphan cleanup on readonly fs [ 365.174376][ T3627] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 365.188310][ T3627] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 365.202938][ T3627] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 365.213329][ T3627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 365.229709][ T3627] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 365.238741][ T3627] EXT4-fs (loop4): 1 truncate cleaned up [ 365.244859][ T3627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.270106][ T3635] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 365.278232][ T3635] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 365.287906][ T3635] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.614965][ T3658] loop2: detected capacity change from 0 to 512 [ 365.631011][ T3658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 365.659635][ T3658] EXT4-fs (loop2): 1 truncate cleaned up [ 365.674828][ T29] audit: type=1400 audit(1718387159.766:42908): avc: denied { mount } for pid=3661 comm="syz-executor.1" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 365.675636][ T3658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.716531][ T29] audit: type=1400 audit(1718387159.766:42909): avc: denied { mounton } for pid=3661 comm="syz-executor.1" path="/root/syzkaller-testdir1077410130/syzkaller.Cal2KM/75/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 365.827763][T28717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.991804][ T3693] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.027986][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.243260][ T3727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 366.252789][ T29] audit: type=1400 audit(1718387160.292:42910): avc: denied { ioctl } for pid=3694 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90070 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.293091][ T3729] loop1: detected capacity change from 0 to 512 [ 366.327130][ T3729] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 366.335172][ T3729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 366.366996][ T3729] System zones: 0-1, 15-15, 18-18, 34-34 [ 366.372943][ T3729] EXT4-fs (loop1): orphan cleanup on readonly fs [ 366.379512][ T3729] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 366.391167][ T3729] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 366.405788][ T3729] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 366.414114][ T3729] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 366.430745][ T3729] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 366.439617][ T3729] EXT4-fs (loop1): 1 truncate cleaned up [ 366.445971][ T3729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.507769][ T3743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.097357][ T3776] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 367.193116][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.303436][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.312845][ T3795] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.345974][ T3795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.355394][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.370193][ T3795] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 45992 - 0 [ 367.379071][ T3795] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45992 - 0 [ 367.387986][ T3795] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45992 - 0 [ 367.396793][ T3795] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 45992 - 0 [ 367.407553][ T3795] geneve2: entered allmulticast mode [ 367.415048][ T3799] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.445544][ T3807] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 367.483112][ T3811] loop1: detected capacity change from 0 to 1024 [ 367.495766][ T3811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.525537][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.609592][ T3816] loop4: detected capacity change from 0 to 512 [ 367.691762][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 367.691785][ T29] audit: type=1326 audit(1718387161.621:42912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x0 [ 368.245962][ T3865] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 53348 - 0 [ 368.254359][ T3865] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 53348 - 0 [ 368.262757][ T3865] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 53348 - 0 [ 368.271057][ T3865] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 53348 - 0 [ 368.279456][ T3865] geneve2: entered allmulticast mode [ 368.316760][ T3875] loop1: detected capacity change from 0 to 1024 [ 368.330958][ T3875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.361289][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.511465][ T3896] dummy0: entered promiscuous mode [ 368.537917][ T3896] dummy0: left promiscuous mode [ 368.643406][ T3912] loop1: detected capacity change from 0 to 1024 [ 368.679801][ T3912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.744899][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.050895][ T3942] __nla_validate_parse: 11 callbacks suppressed [ 369.050911][ T3942] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.066657][ T3942] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.087965][ T3940] loop1: detected capacity change from 0 to 764 [ 369.773280][ T3982] loop1: detected capacity change from 0 to 1024 [ 369.813572][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.858779][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.771353][ T29] audit: type=1400 audit(1718387164.464:42913): avc: denied { setattr } for pid=4001 comm="syz-executor.2" name="/" dev="configfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.847307][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.875006][ T4011] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 371.119502][ T4047] tipc: Started in network mode [ 371.124555][ T4047] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 371.131852][ T4047] tipc: Enabled bearer , priority 10 [ 371.216650][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.246762][ T4057] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 371.338558][ T4062] loop2: detected capacity change from 0 to 512 [ 371.349768][ T4062] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 371.586528][ T4079] dummy0: entered promiscuous mode [ 371.597762][ T4079] dummy0: left promiscuous mode [ 371.634595][ T4083] tipc: Started in network mode [ 371.639632][ T4083] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 371.647072][ T4083] tipc: Enabled bearer , priority 10 [ 371.686263][ T4088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.703025][ T4092] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 371.871591][ T4123] tipc: Enabling of bearer rejected, already enabled [ 371.951881][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.017221][ T4145] loop4: detected capacity change from 0 to 512 [ 372.032836][ T29] audit: type=1400 audit(1718387165.636:42914): avc: denied { watch watch_reads } for pid=4150 comm="syz-executor.2" path="/root/syzkaller-testdir1657116572/syzkaller.lUlEia/395/file0" dev="ramfs" ino=92174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 372.075006][ T4145] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 372.082977][ T4145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 372.091306][ T4145] System zones: 0-1, 15-15, 18-18, 34-34 [ 372.098312][ T4145] EXT4-fs (loop4): orphan cleanup on readonly fs [ 372.104756][ T4145] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 372.114473][ T4145] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 372.129181][ T4145] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 372.137766][ T4145] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 372.152989][ T4145] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 372.162419][ T4145] EXT4-fs (loop4): 1 truncate cleaned up [ 372.168557][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.214264][ T3380] tipc: Node number set to 10005162 [ 372.265380][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.346204][ T4184] loop1: detected capacity change from 0 to 128 [ 372.355414][ T4184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.367889][ T4184] ext4 filesystem being mounted at /root/syzkaller-testdir1077410130/syzkaller.Cal2KM/144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.406433][ T29] audit: type=1400 audit(1718387165.968:42915): avc: denied { setattr } for pid=4183 comm="syz-executor.1" path="/root/syzkaller-testdir1077410130/syzkaller.Cal2KM/144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 372.464498][ T2273] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.608218][ T4194] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 372.645282][ T4198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.854501][T10130] tipc: Node number set to 10005162 [ 372.905578][T32106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.981426][ T4253] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.052261][ T4263] loop4: detected capacity change from 0 to 512 [ 373.063009][ T4263] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.069362][ T4264] loop2: detected capacity change from 0 to 128 [ 373.069599][ T4263] EXT4-fs: test_dummy_encryption option not supported [ 373.089894][ T4264] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.102492][ T4264] ext4 filesystem being mounted at /root/syzkaller-testdir1657116572/syzkaller.lUlEia/398/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.130586][ T4269] loop3: detected capacity change from 0 to 512 [ 373.159822][ T4269] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 373.167902][ T4269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 373.177704][ T4269] System zones: 0-1, 15-15, 18-18, 34-34 [ 373.186535][ T4269] EXT4-fs (loop3): orphan cleanup on readonly fs [ 373.193168][ T4269] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 373.204681][ T4269] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 373.219295][ T4269] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 373.226335][ T4269] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 373.241032][ T4269] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 373.249994][ T4269] EXT4-fs (loop3): 1 truncate cleaned up [ 373.257162][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.819217][ T4296] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.968151][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 374.035146][ T1845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.118503][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.125655][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.156404][ T4467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.165790][ T4291] bridge_slave_0: entered allmulticast mode [ 374.182072][ T4291] bridge_slave_0: entered promiscuous mode [ 374.189655][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.196962][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.205772][ T4291] bridge_slave_1: entered allmulticast mode [ 374.268150][ T4291] bridge_slave_1: entered promiscuous mode [ 374.347493][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.385436][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.431692][ T4514] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.455340][ T4291] team0: Port device team_slave_0 added [ 374.468948][ T4291] team0: Port device team_slave_1 added [ 374.516887][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.540114][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.547222][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.573174][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.587770][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.594727][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.620741][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.622774][ T4259] syz-executor.2 (4259) used greatest stack depth: 7184 bytes left [ 374.657138][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.670451][T28717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.684735][ T4291] hsr_slave_0: entered promiscuous mode [ 374.694827][ T4291] hsr_slave_1: entered promiscuous mode [ 374.701212][ T4291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.709223][ T4291] Cannot create hsr debugfs directory [ 374.719227][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.774773][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.877748][ T4505] chnl_net:caif_netlink_parms(): no params data found [ 374.912635][ T4291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.924279][ T56] bridge_slave_1: left allmulticast mode [ 374.929959][ T56] bridge_slave_1: left promiscuous mode [ 374.936025][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.945360][ T56] bridge_slave_0: left allmulticast mode [ 374.951237][ T56] bridge_slave_0: left promiscuous mode [ 374.957120][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.131209][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.141701][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.151829][ T56] bond0 (unregistering): Released all slaves [ 375.171045][ T4291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.211344][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.218453][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.225746][ T4505] bridge_slave_0: entered allmulticast mode [ 375.232835][ T4505] bridge_slave_0: entered promiscuous mode [ 375.240245][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.247430][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.254596][ T4505] bridge_slave_1: entered allmulticast mode [ 375.261159][ T4505] bridge_slave_1: entered promiscuous mode [ 375.273659][ T4291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.300888][ T56] hsr_slave_0: left promiscuous mode [ 375.306578][ T56] hsr_slave_1: left promiscuous mode [ 375.312402][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.319861][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.327754][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.335252][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.344349][ T56] veth1_macvtap: left promiscuous mode [ 375.350094][ T56] veth0_macvtap: left promiscuous mode [ 375.355704][ T56] veth1_vlan: left promiscuous mode [ 375.361034][ T56] veth0_vlan: left promiscuous mode [ 375.411328][ T56] pim6reg (unregistering): left allmulticast mode [ 375.501357][ T4505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.513732][ T4505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.556839][ T4505] team0: Port device team_slave_0 added [ 375.564324][ T4505] team0: Port device team_slave_1 added [ 375.584521][ T4505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.591891][ T4505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.618110][ T4505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.629985][ T4505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.637023][ T4505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.663424][ T4505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.716893][ T4505] hsr_slave_0: entered promiscuous mode [ 375.723540][ T4505] hsr_slave_1: entered promiscuous mode [ 375.731460][ T4505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.739338][ T4505] Cannot create hsr debugfs directory [ 375.764957][ T4291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.775118][ T4291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.793344][ T4291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.807215][ T4291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.826646][ T5000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.893805][ T5035] loop2: detected capacity change from 0 to 128 [ 375.911618][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.923207][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.939009][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.946136][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.954517][ T5035] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.963845][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.973705][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.981821][ T5035] ext4 filesystem being mounted at /root/syzkaller-testdir1657116572/syzkaller.lUlEia/404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.037256][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.078266][T28717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.131309][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.211659][ T4505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.236420][ T4505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.256121][ T4505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.288100][ T4505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.332736][ T4291] veth0_vlan: entered promiscuous mode [ 376.341237][ T4291] veth1_vlan: entered promiscuous mode [ 376.374747][ T29] audit: type=1326 audit(1718387169.633:42916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.382348][ T4505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.398850][ T29] audit: type=1326 audit(1718387169.633:42917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.434035][ T4291] veth0_macvtap: entered promiscuous mode [ 376.442214][ T4291] veth1_macvtap: entered promiscuous mode [ 376.454694][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.465221][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.475089][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.478132][ T29] audit: type=1326 audit(1718387169.669:42918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.485755][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.519478][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.530013][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.539996][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.550466][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.554864][ T29] audit: type=1326 audit(1718387169.771:42919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.564915][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.584381][ T29] audit: type=1326 audit(1718387169.771:42920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.584419][ T29] audit: type=1326 audit(1718387169.789:42921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.584509][ T29] audit: type=1326 audit(1718387169.789:42922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 376.584543][ T29] audit: type=1326 audit(1718387169.789:42923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e31281309 code=0x7ffc0000 [ 376.584574][ T29] audit: type=1326 audit(1718387169.789:42924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 376.592925][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.722580][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.732450][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.742883][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.752691][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.763246][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.773122][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.783695][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.799070][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.816733][ T4291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.825638][ T4291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.834480][ T4291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.843248][ T4291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.870365][ T4505] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.896105][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.903200][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.936662][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.943787][T10130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.978777][ T4505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.989230][ T4505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.052675][ T5111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.074156][ T4505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.115849][ T4505] veth0_vlan: entered promiscuous mode [ 377.126351][ T4505] veth1_vlan: entered promiscuous mode [ 377.162881][ T4505] veth0_macvtap: entered promiscuous mode [ 377.182995][ T4505] veth1_macvtap: entered promiscuous mode [ 377.200593][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.211184][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.221034][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.231548][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.241503][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.252019][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.261879][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.272376][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.282225][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.292721][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.293647][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.304699][ T4505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.325722][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.336399][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.346908][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.357458][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.367546][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.378118][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.388081][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.398627][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.408675][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.419333][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.434341][ T4505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.445556][ T4505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.454383][ T4505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.463200][ T4505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.472008][ T4505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.617245][ T29] kauditd_printk_skb: 4091 callbacks suppressed [ 378.617262][ T29] audit: type=1326 audit(1718387171.700:47016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6e312bdea9 code=0x7ffc0000 [ 378.647945][ T29] audit: type=1326 audit(1718387171.709:47017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 378.672121][ T29] audit: type=1326 audit(1718387171.709:47018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e31281309 code=0x7ffc0000 [ 378.696092][ T29] audit: type=1326 audit(1718387171.709:47019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 378.720081][ T29] audit: type=1326 audit(1718387171.709:47020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e31281309 code=0x7ffc0000 [ 378.744051][ T29] audit: type=1326 audit(1718387171.709:47021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 378.768081][ T29] audit: type=1326 audit(1718387171.709:47022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e31281309 code=0x7ffc0000 [ 378.792042][ T29] audit: type=1326 audit(1718387171.709:47023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 378.816037][ T29] audit: type=1326 audit(1718387171.709:47024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e31281309 code=0x7ffc0000 [ 378.839974][ T29] audit: type=1326 audit(1718387171.709:47025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e312bb627 code=0x7ffc0000 [ 379.296502][ T5238] loop1: detected capacity change from 0 to 512 [ 379.306010][ T5238] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.312910][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.337016][ T5238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.350949][ T5238] ext4 filesystem being mounted at /root/syzkaller-testdir1077410130/syzkaller.Cal2KM/182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.374961][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.427293][ T5280] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 380.427293][ T5280] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 380.427293][ T5280] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 380.427293][ T5280] csum(0x350e2a11 start=10769 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 380.427293][ T5280] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 380.427293][ T5280] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 380.427293][ T5280] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 380.477046][ T5280] dev name=veth0 feat=0x000061164fdd19e9 [ 380.482716][ T5280] skb linear: 00000000: 45 02 29 89 2b 5f 00 00 0f 2f b6 b5 ac 14 14 18 [ 380.491241][ T5280] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 380.499847][ T5280] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 380.508417][ T5280] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 380.516952][ T5280] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 380.525465][ T5280] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 380.534025][ T5280] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.542540][ T5280] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.551085][ T5280] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.559704][ T5280] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.568254][ T5280] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.576775][ T5280] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.585395][ T5280] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.593928][ T5280] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.602467][ T5280] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.604285][ T5282] loop1: detected capacity change from 0 to 4096 [ 380.610982][ T5280] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.611002][ T5280] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.626087][ T5282] EXT4-fs (loop1): invalid inodes per group: 0 [ 380.626087][ T5282] [ 380.634422][ T5280] ------------[ cut here ]------------ [ 380.634432][ T5280] offset (10633) >= skb_headlen() (10633) [ 380.635153][ T5280] WARNING: CPU: 0 PID: 5280 at net/core/dev.c:3325 skb_checksum_help+0x3bd/0x450 [ 380.663289][ T5280] Modules linked in: [ 380.667271][ T5280] CPU: 0 PID: 5280 Comm: syz-executor.1 Tainted: G W 6.10.0-rc3-syzkaller-00099-gd20f6b3d747c #0 [ 380.679263][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 380.689653][ T5280] RIP: 0010:skb_checksum_help+0x3bd/0x450 [ 380.695400][ T5280] Code: 29 0b 60 fd 41 8b 5d 00 48 8b 6c 24 08 48 89 ef e8 18 0b 60 fd 2b 5d 00 48 c7 c7 06 6e e1 85 44 89 e6 89 da e8 44 b5 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 c3 fe ff ff e8 70 8b 48 fd 48 c7 c7 [ 380.715033][ T5280] RSP: 0018:ffffc90001697410 EFLAGS: 00010246 [ 380.721184][ T5280] RAX: de2011263a031600 RBX: 0000000000002989 RCX: 0000000000040000 [ 380.729223][ T5280] RDX: ffffc9000a201000 RSI: 000000000002ad39 RDI: 000000000002ad3a [ 380.737248][ T5280] RBP: ffff88812803c974 R08: ffffffff81110bd7 R09: 0000000000000000 [ 380.745300][ T5280] R10: 0001ffffffffffff R11: 0001c90001697300 R12: 0000000000002989 [ 380.753334][ T5280] R13: ffff88812803c970 R14: ffff88812803c900 R15: 0000000000000000 [ 380.761309][ T5280] FS: 00007fb06a1346c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 380.770262][ T5280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.776886][ T5280] CR2: 000000002000e000 CR3: 000000013b1cc000 CR4: 00000000003506f0 [ 380.784896][ T5280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.792882][ T5280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 380.800956][ T5280] Call Trace: [ 380.804240][ T5280] [ 380.807200][ T5280] ? __warn+0x13c/0x350 [ 380.811386][ T5280] ? report_bug+0x315/0x420 [ 380.815930][ T5280] ? skb_checksum_help+0x3bd/0x450 [ 380.821081][ T5280] ? handle_bug+0x3e/0x70 [ 380.825406][ T5280] ? exc_invalid_op+0x1a/0x50 [ 380.830089][ T5280] ? asm_exc_invalid_op+0x1a/0x20 [ 380.835196][ T5280] ? __warn_printk+0x167/0x1b0 [ 380.840024][ T5280] ? skb_checksum_help+0x3bd/0x450 [ 380.845142][ T5280] ip_do_fragment+0xdb/0xd00 [ 380.849759][ T5280] ? __folio_put+0x114/0x150 [ 380.854496][ T5280] ? free_large_kmalloc+0x8c/0xb0 [ 380.859575][ T5280] ? kfree+0x148/0x290 [ 380.863660][ T5280] ? __pfx_ip_finish_output2+0x10/0x10 [ 380.869249][ T5280] ? skb_release_data+0x583/0x5a0 [ 380.874306][ T5280] ip_fragment+0xd2/0x140 [ 380.878647][ T5280] ip_finish_output+0x1c4/0x2a0 [ 380.883559][ T5280] ip_output+0xab/0x170 [ 380.887721][ T5280] ? __pfx_ip_finish_output+0x10/0x10 [ 380.893153][ T5280] ? __pfx_ip_output+0x10/0x10 [ 380.898089][ T5280] ip_local_out+0xab/0xd0 [ 380.902446][ T5280] iptunnel_xmit+0x33f/0x460 [ 380.907154][ T5280] ip_tunnel_xmit+0x1685/0x1740 [ 380.912073][ T5280] ipgre_xmit+0x5f4/0x6d0 [ 380.916440][ T5280] dev_hard_start_xmit+0x119/0x3f0 [ 380.921627][ T5280] __dev_queue_xmit+0xf83/0x1e50 [ 380.926690][ T5280] ? __dev_queue_xmit+0x161/0x1e50 [ 380.931894][ T5280] packet_xmit+0x4b/0x1e0 [ 380.936335][ T5280] packet_sendmsg+0x2ae1/0x3320 [ 380.941232][ T5280] ? selinux_socket_sendmsg+0x182/0x1b0 [ 380.946896][ T5280] ? __pfx_packet_sendmsg+0x10/0x10 [ 380.952125][ T5280] __sock_sendmsg+0x140/0x180 [ 380.956886][ T5280] ____sys_sendmsg+0x312/0x410 [ 380.961685][ T5280] __sys_sendmsg+0x1e9/0x280 [ 380.966302][ T5280] ? futex_wait+0x18e/0x1c0 [ 380.970866][ T5280] __x64_sys_sendmsg+0x46/0x50 [ 380.975646][ T5280] x64_sys_call+0xb25/0x2d70 [ 380.980275][ T5280] do_syscall_64+0xc9/0x1c0 [ 380.984796][ T5280] ? clear_bhb_loop+0x55/0xb0 [ 380.989487][ T5280] ? clear_bhb_loop+0x55/0xb0 [ 380.994252][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.000231][ T5280] RIP: 0033:0x7fb06adb9ea9 [ 381.004844][ T5280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 381.024513][ T5280] RSP: 002b:00007fb06a1340c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.032947][ T5280] RAX: ffffffffffffffda RBX: 00007fb06aef0f80 RCX: 00007fb06adb9ea9 [ 381.040974][ T5280] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 381.048980][ T5280] RBP: 00007fb06ae28ff4 R08: 0000000000000000 R09: 0000000000000000 [ 381.056960][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.064927][ T5280] R13: 000000000000000b R14: 00007fb06aef0f80 R15: 00007ffe9107c5e8 [ 381.072963][ T5280] [ 381.075973][ T5280] ---[ end trace 0000000000000000 ]--- [ 381.140117][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.265345][ T5288] loop4: detected capacity change from 0 to 512 [ 381.335998][ T5288] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 1 [ 381.428164][ T5288] EXT4-fs (loop4): Remounting filesystem read-only [ 381.468657][ T5288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.567377][ T5288] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 381.574311][ T5288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.732910][ T5288] loop4: detected capacity change from 0 to 512 [ 381.787152][ T5288] EXT4-fs: Ignoring removed i_version option [ 381.793337][ T5288] EXT4-fs: Ignoring removed nobh option [ 381.879663][ T5288] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 1 [ 382.031430][ T5288] EXT4-fs (loop4): Remounting filesystem read-only [ 382.038447][ T5288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.139809][ T5288] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 382.146747][ T5288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.255944][ T5310] loop1: detected capacity change from 0 to 512 [ 382.295089][ T5310] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.326496][ T5310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.346154][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.358764][ T5310] ext4 filesystem being mounted at /root/syzkaller-testdir1077410130/syzkaller.Cal2KM/194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.383023][ T2273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.468158][ T5325] loop1: detected capacity change from 0 to 4096 [ 382.475897][ T5325] EXT4-fs (loop1): invalid inodes per group: 0 [ 382.475897][ T5325] [ 382.525462][ T5325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.724650][ T5340] loop1: detected capacity change from 0 to 256 [ 382.857027][ T5352] can: request_module (can-proto-0) failed. [ 382.986865][ T5356] can: request_module (can-proto-0) failed. [ 383.023966][ T5359] loop3: detected capacity change from 0 to 4096 [ 383.031964][ T5359] EXT4-fs (loop3): invalid inodes per group: 0 [ 383.031964][ T5359] [ 383.089720][ T5359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.260079][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.269382][ T5364] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 383.565582][ T5378] loop4: detected capacity change from 0 to 256 [ 383.657813][ T5388] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 384.014280][ T5396] can: request_module (can-proto-0) failed. [ 384.124788][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.899201][ T5414] loop1: detected capacity change from 0 to 256 [ 384.996791][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.175568][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 385.219924][ T5470] loop4: detected capacity change from 0 to 128 [ 385.276492][ T5476] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 385.287750][ T5476] dummy0: left promiscuous mode [ 385.296913][ T5476] dummy0: entered promiscuous mode [ 385.308134][ T3179] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 385.315622][ T3179] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 385.335139][ T3179] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 385.939719][ T5489] loop1: detected capacity change from 0 to 8192 [ 386.102438][ T29] kauditd_printk_skb: 4010 callbacks suppressed [ 386.102473][ T29] audit: type=1326 audit(1718387178.613:51036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb06adb9ea9 code=0x0 [ 578.378941][ T0] ================================================================== [ 578.387065][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 578.395214][ T0] [ 578.397522][ T0] write to 0xffff888237c205e4 of 1 bytes by task 0 on cpu 0: [ 578.404877][ T0] __tmigr_cpu_activate+0x55/0x1f0 [ 578.409979][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 578.414817][ T0] timer_clear_idle+0x28/0x100 [ 578.419567][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 578.425371][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 578.430404][ T0] do_idle+0x1ee/0x230 [ 578.434487][ T0] cpu_startup_entry+0x25/0x30 [ 578.439247][ T0] rest_init+0xef/0xf0 [ 578.443305][ T0] start_kernel+0x581/0x5e0 [ 578.447801][ T0] x86_64_start_reservations+0x2a/0x30 [ 578.453257][ T0] x86_64_start_kernel+0x94/0xa0 [ 578.458213][ T0] common_startup_64+0x12c/0x137 [ 578.463151][ T0] [ 578.465458][ T0] read to 0xffff888237c205e4 of 1 bytes by task 0 on cpu 1: [ 578.472721][ T0] tmigr_update_events+0x41d/0x5d0 [ 578.477831][ T0] __tmigr_cpu_deactivate+0x283/0x470 [ 578.483208][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 578.488305][ T0] __get_next_timer_interrupt+0x137/0x530 [ 578.494015][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 578.499546][ T0] tick_nohz_idle_stop_tick+0x15b/0x640 [ 578.505102][ T0] do_idle+0x178/0x230 [ 578.509169][ T0] cpu_startup_entry+0x25/0x30 [ 578.513932][ T0] start_secondary+0x94/0xa0 [ 578.518510][ T0] common_startup_64+0x12c/0x137 [ 578.523463][ T0] 2024/06/14 17:49:16 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 578.525767][ T0] value changed: 0x00 -> 0x01 [ 578.530423][ T0] [ 578.532728][ T0] Reported by Kernel Concurrency Sanitizer on: [ 578.538864][ T0] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.10.0-rc3-syzkaller-00099-gd20f6b3d747c #0 [ 578.550047][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 578.560090][ T0] ================================================================== [ 578.569713][ T29] audit: type=1400 audit(1718387356.263:51037): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[749]" dev="pipefs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1