[ 150.516189][ T32] audit: type=1400 audit(1584021887.569:37): avc: denied { watch } for pid=12162 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16180 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 150.547741][ T32] audit: type=1400 audit(1584021887.569:38): avc: denied { watch } for pid=12162 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 151.033766][ T32] audit: type=1800 audit(1584021888.089:39): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 151.061769][ T32] audit: type=1800 audit(1584021888.109:40): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 152.638930][ T32] audit: type=1400 audit(1584021889.689:41): avc: denied { map } for pid=12247 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2020/03/12 14:05:04 fuzzer started [ 167.683853][ T32] audit: type=1400 audit(1584021904.739:42): avc: denied { map } for pid=12256 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=2339 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/03/12 14:05:10 dialing manager at 10.128.0.26:41683 2020/03/12 14:05:10 syscalls: 2967 2020/03/12 14:05:10 code coverage: enabled 2020/03/12 14:05:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/03/12 14:05:10 extra coverage: enabled 2020/03/12 14:05:10 setuid sandbox: enabled 2020/03/12 14:05:10 namespace sandbox: enabled 2020/03/12 14:05:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/12 14:05:10 fault injection: enabled 2020/03/12 14:05:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/12 14:05:10 net packet injection: enabled 2020/03/12 14:05:10 net device setup: enabled 2020/03/12 14:05:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/12 14:05:10 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 173.532416][ T32] audit: type=1400 audit(1584021910.579:43): avc: denied { integrity } for pid=12272 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 14:08:49 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000000)={0x0, r0+30000000}, 0x0) [ 392.876794][ T32] audit: type=1400 audit(1584022129.929:44): avc: denied { map } for pid=12274 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=93 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 393.370917][T12275] IPVS: ftp: loaded support on port[0] = 21 [ 393.620202][T12275] chnl_net:caif_netlink_parms(): no params data found [ 393.801381][T12275] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.809588][T12275] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.819447][T12275] device bridge_slave_0 entered promiscuous mode [ 393.837196][T12275] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.845025][T12275] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.854627][T12275] device bridge_slave_1 entered promiscuous mode [ 393.910798][T12275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.931988][T12275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.988451][T12275] team0: Port device team_slave_0 added [ 394.005429][T12275] team0: Port device team_slave_1 added [ 394.055530][T12275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.062772][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.088817][T12275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.108530][T12275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.115880][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.142020][T12275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.361011][T12275] device hsr_slave_0 entered promiscuous mode [ 394.483741][T12275] device hsr_slave_1 entered promiscuous mode [ 395.076521][ T32] audit: type=1400 audit(1584022132.129:45): avc: denied { create } for pid=12275 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 395.110142][T12275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.118586][ T32] audit: type=1400 audit(1584022132.159:46): avc: denied { write } for pid=12275 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 395.143626][ T32] audit: type=1400 audit(1584022132.159:47): avc: denied { read } for pid=12275 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 395.205052][T12275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.344872][T12275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.505716][T12275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.995192][T12275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.040684][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.050271][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.080226][T12275] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.107737][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.119468][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.129066][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.136444][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.150977][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.183621][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.194097][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.203578][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.210810][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.219813][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.276682][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.286574][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.297341][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.343366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.352509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.363584][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.375161][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.385107][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.401463][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.411357][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.446566][T12275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.521230][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.529278][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.572315][T12275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.658246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.668685][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.746737][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.757233][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.771455][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.782427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.809706][T12275] device veth0_vlan entered promiscuous mode [ 396.855895][T12275] device veth1_vlan entered promiscuous mode [ 396.957409][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.967733][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.991465][T12275] device veth0_macvtap entered promiscuous mode [ 397.019790][T12275] device veth1_macvtap entered promiscuous mode [ 397.087434][T12275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.096239][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.106313][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.116101][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.126729][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.156185][T12275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.165500][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.175821][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.746324][ T32] audit: type=1400 audit(1584022134.769:48): avc: denied { associate } for pid=12275 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 398.049075][ T32] audit: type=1400 audit(1584022135.099:49): avc: denied { open } for pid=12302 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 398.073068][ T32] audit: type=1400 audit(1584022135.099:50): avc: denied { kernel } for pid=12302 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 398.097149][ T32] audit: type=1400 audit(1584022135.099:51): avc: denied { confidentiality } for pid=12302 comm="syz-executor.0" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 14:08:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f00000d3000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00003c6000/0x3000)=nil) [ 398.602271][T12307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 14:08:55 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000001400)="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", 0xe00}]) 14:08:55 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 399.117128][ C0] hrtimer: interrupt took 67874 ns 14:08:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x7d}, 0x0) shutdown(r2, 0x0) [ 399.416388][T12318] IPVS: ftp: loaded support on port[0] = 21 14:08:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27) [ 399.696242][T12318] chnl_net:caif_netlink_parms(): no params data found [ 399.872411][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.880644][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.890210][T12318] device bridge_slave_0 entered promiscuous mode [ 399.909227][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.916758][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.926388][T12318] device bridge_slave_1 entered promiscuous mode [ 399.982830][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.004837][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.064715][T12318] team0: Port device team_slave_0 added [ 400.083264][T12318] team0: Port device team_slave_1 added [ 400.151519][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.158729][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.184938][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.259473][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.266779][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.293034][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.401403][T12318] device hsr_slave_0 entered promiscuous mode [ 400.434560][T12318] device hsr_slave_1 entered promiscuous mode [ 400.472771][T12318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.480540][T12318] Cannot create hsr debugfs directory 14:08:57 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x4000223, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000300)=""/232) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r2) getsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000200)="3391", 0x2}], 0x2, 0x0) [ 401.056030][T12318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.096246][T12318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.223345][T12338] mkiss: ax0: crc mode is auto. [ 401.231706][T12318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.364692][T12318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.470252][T12337] mkiss: ax0: crc mode is auto. 14:08:58 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x4000223, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000300)=""/232) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r2) getsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000200)="3391", 0x2}], 0x2, 0x0) [ 402.074188][T12361] mkiss: ax0: crc mode is auto. [ 402.273651][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 14:08:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x4000223, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000300)=""/232) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r2) getsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000200)="3391", 0x2}], 0x2, 0x0) [ 402.470717][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.480682][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.569011][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.690762][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.701618][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.711389][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.718750][T12282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.877089][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.886724][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.896883][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.907380][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.914737][T12282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.924011][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.989760][T12374] mkiss: ax0: crc mode is auto. [ 403.262050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.273657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.288020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.298722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.309616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.520029][T12318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.531457][T12318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.653994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.664197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.674088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.685799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.695710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:09:00 executing program 0: set_mempolicy(0x3, &(0x7f0000000140)=0x10000101, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x6, 0x11, 0x12, &(0x7f0000000180)}) [ 403.976485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.986363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.994383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.166205][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.384130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.394762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.411548][T12393] mkiss: ax0: crc mode is auto. [ 404.608406][T12395] mkiss: ax0: crc mode is auto. [ 404.621931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.632575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.728584][T12318] device veth0_vlan entered promiscuous mode [ 404.739097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.749198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.017602][T12318] device veth1_vlan entered promiscuous mode 14:09:02 executing program 0: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=""/159, &(0x7f0000000240)=0x9f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000002380), 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="034dedffffff0000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) [ 405.459683][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.470732][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.503893][T12318] device veth0_macvtap entered promiscuous mode [ 405.617654][T12318] device veth1_macvtap entered promiscuous mode [ 405.714264][T12421] device ip6gretap0 entered promiscuous mode [ 405.720473][T12421] device macvlan2 entered promiscuous mode [ 405.903673][T12421] device ip6gretap0 left promiscuous mode [ 406.448333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.458327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.577620][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 406.588757][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.604446][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.618037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 14:09:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff73) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x10b, 0x8, 0x9, 0xca, 0x62, 0x5, 0x30e, 0x6}, "200282f7e35bf5e612355e8aea96fd7b", [[]]}, 0x130) read(r0, &(0x7f0000000280)=""/384, 0x180) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x4, 0x18, 0x9}) [ 406.629596][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.811556][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 406.822371][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.840345][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.851514][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.863210][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:09:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff73) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x10b, 0x8, 0x9, 0xca, 0x62, 0x5, 0x30e, 0x6}, "200282f7e35bf5e612355e8aea96fd7b", [[]]}, 0x130) read(r0, &(0x7f0000000280)=""/384, 0x180) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x4, 0x18, 0x9}) [ 408.035346][T12459] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 408.040795][T12459] loop1: partition table partially beyond EOD, truncated [ 408.048859][T12459] loop1: p1 size 3892472105 extends beyond EOD, truncated [ 408.536310][T12459] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 408.541732][T12459] loop1: partition table partially beyond EOD, truncated [ 408.549785][T12459] loop1: p1 size 3892472105 extends beyond EOD, truncated 14:09:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) setreuid(0x0, 0xee00) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/119, 0x77) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 14:09:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@gid={'gid'}}]}) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/icmp\x00') 14:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x90, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "029200", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x18, 0x0, 0x0, 0x0, {[@generic={0x0, 0xc, "997dc9a470cd5618f005"}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @eol, @nop, @eol, @mss={0x2, 0x4}, @fastopen={0x22, 0xe, "dd118e02016f1ebbebaed1f3"}]}}}}}}}}, 0x0) 14:09:06 executing program 1: creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@ng={0x4, 0x5}, 0x2, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x10000000000008, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x2000}]) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000099c0)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000340)=""/37, 0xfffffffffffffdcb}], 0x5, &(0x7f00000004c0)=""/113, 0x71}, 0x9}, {{&(0x7f0000000680)=@tipc=@name, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000700)}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001840)=""/242, 0xf2}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000001a40)=""/3, 0x3}], 0x6, &(0x7f0000001ac0)=""/177, 0xb1}, 0x2c}, {{&(0x7f0000001b80)=@isdn, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/62, 0x3e}], 0x1, &(0x7f0000001c80)=""/105, 0x69}, 0x401}, {{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000004f40)=[{&(0x7f0000001d80)=""/23, 0x17}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/15, 0xf}, {&(0x7f0000002e00)=""/36, 0x24}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/134, 0x86}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/31, 0x1f}], 0x8, &(0x7f0000004f80)=""/138, 0x8a}, 0xba}, {{&(0x7f0000005040)=@ipx, 0x80, &(0x7f0000007680)=[{&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/114, 0x72}, {&(0x7f0000007140)=""/91, 0x5b}, {&(0x7f00000071c0)=""/147, 0x93}, {&(0x7f0000007280)=""/202, 0xca}, {&(0x7f0000007380)=""/238, 0xee}, {&(0x7f0000007480)=""/210, 0xd2}, {&(0x7f0000007580)=""/43, 0x2b}, {&(0x7f00000075c0)=""/181, 0xb5}], 0xa, &(0x7f0000007700)=""/180, 0xb4}, 0x7fff}, {{&(0x7f00000077c0)=@ipx, 0x80, &(0x7f0000008980)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/204, 0xcc}, {&(0x7f0000008940)=""/48, 0x30}], 0x3, &(0x7f00000089c0)=""/4088, 0xff8}, 0x10000}], 0x6, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0xc1, 0x1f, 0x2}, 0x10) 14:09:06 executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0) mq_timedsend(r1, &(0x7f00000000c0)="040350146ee87c41c35ffe6eebe13536488f5687aced83654572897aa958cacb42d3fda1d45d9d65c95c80656a221047a8a87ae2b13fa9fd17b23cdf04cd7f8d28d676b819f70e7b01dfd80be03a75102f4a5f0e5151f48235d738065f31ebcdd57b23cf58296b4124c937fcff4beb86b919a3f8204430ae394988bf486815d88e4145abc6014c505fec5c", 0x8b, 0x5, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000000), 0x4000223, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffc4, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x5865}, 0x20000080) 14:09:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="00f468d828c6e3f5fc7e2cb440dd5eaffb5f65446e169d714be71a45a9dc0101000000000000292a62ff1c4eb1f339e596a8cbeb1ccdd16482066964a6cfc38059b032fe9c1f169385a7ede02b5ad7350a81c62d08f0394347519364e8555ca48d6ea1cf"], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c00000010001fff00000000e84d0d000000000000000028a2aee3622b084b700ca8f9ed0a96e64b1b89a1bcc243d24cc90613fe7e45c8fb533f7fa2a6fac96909dafd2bc2260b50029514216ae851500f27e03ef26ca553897890b82c9d1ea76aff0f5328a9860bbcfd2be1ffc2c148fbffbdbe738a93376e1d06f252876af13786695efe4707bc285343b3d12955c0e748aa12c7fb32de2db4bdaf34569d77b0ae8bf8c35268f3a49ce7098aa829e43db842827c411333ace8518b2a72dffb41c886bc2ae931d71d1560a075de787e3793b00ddee2ad675947136574ba0e49ab80b8305750c8b20e39b51037d44c45a32bc1937c75799e3fc311ec696660338d593204f8", @ANYRES32=0x0, @ANYBLOB="0000000029220400740012800b000100697036746e6c000064000280060011004e24000006001000070000000500060081000000060012004e2300000800140000040000050009000400000008000800360000001400030000000000000000000000ffffe0000002080008001500000008000800310000000400130008000a00", @ANYRES32=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0xf158377e9ba535de}, 0x4000) [ 410.166667][T12502] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.246771][T12505] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. 14:09:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x40, 0xfffb}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x8}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400001, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$TCXONC(r9, 0x540a, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02869a9b60c9e7a3854b038c34b7297b0000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001900fc000000"], 0x44}}, 0x0) [ 410.619080][T12511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51552 sclass=netlink_route_socket pid=12511 comm=syz-executor.1 14:09:10 executing program 2: r0 = eventfd(0x200) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20080, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x320}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x231}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x4a80c0, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={[], 0x11}, 0x2}, 0xa) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1, 0x438000) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f00000002c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x422000, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x0, 'veth1_to_batadv\x00', {0x1}, 0x40}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='lp\x00', 0x3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000003c0)={0x6, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x401, 0x80000001}) sched_rr_get_interval(r6, &(0x7f0000000400)) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x1, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000480)="b1", 0x1, 0xc081, &(0x7f00000004c0)={0x9, @null=' \x00'}, 0x12) r8 = socket(0x8, 0x1, 0xc5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9c0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x560f}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x14000000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004884}, 0x20000001) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000a40)={0x28, 0x0, 0xc15408cd3aa48df6, @local}, 0x10, 0x80800) accept4$vsock_stream(r9, &(0x7f0000000a80)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x800) move_pages(r6, 0x2, &(0x7f0000000ac0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000b00)=[0x5, 0x5, 0x7fffffff, 0x3f], &(0x7f0000000b40)=[0x0, 0x0], 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0445611, &(0x7f0000000b80)={0x1, 0x2, 0x4, 0x10000, 0x800, {0x0, 0x7530}, {0x2, 0x0, 0x8, 0x2, 0x3f, 0x5, "a0010dea"}, 0x4, 0x2, @offset=0x5, 0x1, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_CLOCK(r10, 0x8030ae7c, &(0x7f0000000c00)) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer\x00', 0x80081, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x658}}, 0x3, 0x18, 0x8, 0x7, 0x5e, 0x1f, 0x40}, &(0x7f0000000d40)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000d80)={r12, 0x12c}, 0x8) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000dc0)=""/191) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) getresuid(&(0x7f0000000f00)=0x0, &(0x7f0000000f40), &(0x7f0000000f80)) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r13, &(0x7f0000000ec0)='./file0\x00', r14, r15, 0x100) [ 414.490259][T12515] IPVS: ftp: loaded support on port[0] = 21 [ 415.053244][T12515] chnl_net:caif_netlink_parms(): no params data found [ 415.418432][T12515] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.426031][T12515] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.435825][T12515] device bridge_slave_0 entered promiscuous mode [ 415.478372][T12515] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.485937][T12515] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.495758][T12515] device bridge_slave_1 entered promiscuous mode [ 415.644709][T12515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.694693][T12515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.793968][T12515] team0: Port device team_slave_0 added [ 415.822361][T12515] team0: Port device team_slave_1 added [ 415.929938][T12515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.937226][T12515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.963692][T12515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.039514][T12515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.046815][T12515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.073048][T12515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.182774][T12515] device hsr_slave_0 entered promiscuous mode [ 416.225217][T12515] device hsr_slave_1 entered promiscuous mode [ 416.264408][T12515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.272070][T12515] Cannot create hsr debugfs directory [ 416.906174][T12515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.975743][T12515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.104397][T12515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.166286][T12515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.816827][T12515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.895645][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.905050][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.950176][T12515] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.993445][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.003725][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.013988][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.021227][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.073506][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.108922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.119268][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.128908][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.136351][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.204879][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.216481][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.256542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.267735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.336805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.349940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.360980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.415839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.426034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.480816][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.493196][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.537771][T12515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.681778][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.690293][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.751447][T12515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.888553][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.899415][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.023846][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.034737][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.073570][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.083232][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.099097][T12515] device veth0_vlan entered promiscuous mode [ 419.152309][T12515] device veth1_vlan entered promiscuous mode [ 419.267131][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.277135][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.287186][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.297634][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.347712][T12515] device veth0_macvtap entered promiscuous mode [ 419.420190][T12515] device veth1_macvtap entered promiscuous mode [ 419.590356][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.601331][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.611762][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.622370][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.638998][T12515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.649564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.659601][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.669753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.680420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.790711][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.801547][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.811824][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.822545][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.837624][T12515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.845776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.856643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:09:18 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @empty, 0x4e21, 0x0, 'nq\x00', 0x26, 0xbaa8, 0x1a}, {@multicast2, 0x0, 0x1, 0x0, 0x0, 0x6}}, 0x44) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd1, 0x8101) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 421.868216][T12546] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 421.878146][T12546] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 020000e0) [ 421.889274][T12546] FAT-fs (loop2): Filesystem has been set read-only [ 421.896557][T12546] ===================================================== [ 421.903552][T12546] BUG: KMSAN: uninit-value in fat_evict_inode+0x2f4/0x920 [ 421.910956][T12546] CPU: 1 PID: 12546 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 421.919652][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.929740][T12546] Call Trace: [ 421.933080][T12546] dump_stack+0x1c9/0x220 [ 421.937488][T12546] kmsan_report+0xf7/0x1e0 [ 421.941974][T12546] __msan_warning+0x58/0xa0 [ 421.947057][T12546] fat_evict_inode+0x2f4/0x920 [ 421.951893][T12546] ? fat_write_inode+0x250/0x250 [ 421.956869][T12546] evict+0x4ab/0xe10 [ 421.960832][T12546] iput+0xa70/0xe10 [ 421.964716][T12546] fat_fill_super+0x7b5c/0x89b0 [ 421.969690][T12546] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 421.975542][T12546] ? kmsan_get_metadata+0x11d/0x180 [ 421.980792][T12546] vfat_fill_super+0xa6/0xc0 [ 421.985427][T12546] mount_bdev+0x654/0x880 [ 421.989778][T12546] ? vfat_mount+0xe0/0xe0 [ 421.994169][T12546] vfat_mount+0xc9/0xe0 [ 421.998373][T12546] legacy_get_tree+0x169/0x2e0 [ 422.003169][T12546] ? __fat_nfs_get_inode+0x6f0/0x6f0 [ 422.008506][T12546] ? legacy_parse_monolithic+0x2c0/0x2c0 [ 422.014192][T12546] vfs_get_tree+0xdd/0x580 [ 422.018659][T12546] do_mount+0x365c/0x4ac0 [ 422.023380][T12546] ? _copy_from_user+0x15b/0x260 [ 422.028404][T12546] __se_compat_sys_mount+0x3a8/0xa10 [ 422.033876][T12546] ? kmsan_get_metadata+0x4f/0x180 [ 422.039042][T12546] __ia32_compat_sys_mount+0x157/0x1b0 [ 422.044602][T12546] ? locks_show+0x580/0x580 [ 422.049156][T12546] do_fast_syscall_32+0x3c7/0x6e0 [ 422.054248][T12546] entry_SYSENTER_compat+0x68/0x77 [ 422.059385][T12546] RIP: 0023:0xf7f50d99 [ 422.063591][T12546] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 422.083362][T12546] RSP: 002b:00000000f5d4aef0 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 422.091806][T12546] RAX: ffffffffffffffda RBX: 00000000f5d4af8c RCX: 0000000020000380 [ 422.099811][T12546] RDX: 00000000f5d4af6c RSI: 0000000000000000 RDI: 00000000f5d4afcc [ 422.107841][T12546] RBP: 00000000f5d4b168 R08: 0000000000000000 R09: 0000000000000000 [ 422.115945][T12546] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 422.123958][T12546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.131999][T12546] [ 422.134343][T12546] Uninit was created at: [ 422.138620][T12546] kmsan_save_stack_with_flags+0x3c/0x90 [ 422.144274][T12546] kmsan_alloc_page+0x12a/0x310 [ 422.149161][T12546] __alloc_pages_nodemask+0x5712/0x5e80 [ 422.154756][T12546] alloc_pages_current+0x67d/0x990 [ 422.159895][T12546] alloc_slab_page+0x111/0x12f0 [ 422.164808][T12546] new_slab+0x2bc/0x1130 [ 422.169090][T12546] ___slab_alloc+0x1533/0x1f30 [ 422.173889][T12546] kmem_cache_alloc+0xb23/0xd70 [ 422.178788][T12546] fat_alloc_inode+0x58/0x120 [ 422.183515][T12546] new_inode_pseudo+0xb1/0x590 [ 422.188305][T12546] new_inode+0x5a/0x3d0 [ 422.192502][T12546] fat_fill_super+0x634b/0x89b0 [ 422.197500][T12546] vfat_fill_super+0xa6/0xc0 [ 422.202204][T12546] mount_bdev+0x654/0x880 [ 422.206553][T12546] vfat_mount+0xc9/0xe0 [ 422.210735][T12546] legacy_get_tree+0x169/0x2e0 [ 422.215525][T12546] vfs_get_tree+0xdd/0x580 [ 422.219979][T12546] do_mount+0x365c/0x4ac0 [ 422.224335][T12546] __se_compat_sys_mount+0x3a8/0xa10 [ 422.229644][T12546] __ia32_compat_sys_mount+0x157/0x1b0 [ 422.235151][T12546] do_fast_syscall_32+0x3c7/0x6e0 [ 422.240227][T12546] entry_SYSENTER_compat+0x68/0x77 [ 422.245370][T12546] ===================================================== [ 422.252321][T12546] Disabling lock debugging due to kernel taint [ 422.258502][T12546] Kernel panic - not syncing: panic_on_warn set ... [ 422.265123][T12546] CPU: 1 PID: 12546 Comm: syz-executor.2 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 422.275407][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.285577][T12546] Call Trace: [ 422.288902][T12546] dump_stack+0x1c9/0x220 [ 422.293279][T12546] panic+0x3d5/0xc3e [ 422.297282][T12546] kmsan_report+0x1df/0x1e0 [ 422.301835][T12546] __msan_warning+0x58/0xa0 [ 422.306377][T12546] fat_evict_inode+0x2f4/0x920 [ 422.311209][T12546] ? fat_write_inode+0x250/0x250 [ 422.316182][T12546] evict+0x4ab/0xe10 [ 422.320136][T12546] iput+0xa70/0xe10 [ 422.324013][T12546] fat_fill_super+0x7b5c/0x89b0 [ 422.329002][T12546] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 422.334848][T12546] ? kmsan_get_metadata+0x11d/0x180 [ 422.340093][T12546] vfat_fill_super+0xa6/0xc0 [ 422.344853][T12546] mount_bdev+0x654/0x880 [ 422.349214][T12546] ? vfat_mount+0xe0/0xe0 [ 422.353611][T12546] vfat_mount+0xc9/0xe0 [ 422.357836][T12546] legacy_get_tree+0x169/0x2e0 [ 422.362626][T12546] ? __fat_nfs_get_inode+0x6f0/0x6f0 [ 422.368051][T12546] ? legacy_parse_monolithic+0x2c0/0x2c0 [ 422.373753][T12546] vfs_get_tree+0xdd/0x580 [ 422.378244][T12546] do_mount+0x365c/0x4ac0 [ 422.382607][T12546] ? _copy_from_user+0x15b/0x260 [ 422.387619][T12546] __se_compat_sys_mount+0x3a8/0xa10 [ 422.393044][T12546] ? kmsan_get_metadata+0x4f/0x180 [ 422.399903][T12546] __ia32_compat_sys_mount+0x157/0x1b0 [ 422.405537][T12546] ? locks_show+0x580/0x580 [ 422.410070][T12546] do_fast_syscall_32+0x3c7/0x6e0 [ 422.415164][T12546] entry_SYSENTER_compat+0x68/0x77 [ 422.420298][T12546] RIP: 0023:0xf7f50d99 [ 422.424475][T12546] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 422.444107][T12546] RSP: 002b:00000000f5d4aef0 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 422.452558][T12546] RAX: ffffffffffffffda RBX: 00000000f5d4af8c RCX: 0000000020000380 [ 422.460559][T12546] RDX: 00000000f5d4af6c RSI: 0000000000000000 RDI: 00000000f5d4afcc [ 422.468655][T12546] RBP: 00000000f5d4b168 R08: 0000000000000000 R09: 0000000000000000 [ 422.476658][T12546] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 422.484659][T12546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.493929][T12546] Kernel Offset: 0x13400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 422.505609][T12546] Rebooting in 86400 seconds..