last executing test programs: 6.494902221s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3208012, &(0x7f0000000300), 0x1, 0x561, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x45b, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd14e5d29c2eeff0edf0300f4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(r0, &(0x7f0000000380), 0x101bf) 6.079750455s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @local}, 0xc) close_range(r1, r0, 0x0) socket(0x9, 0xa, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0xffffffffffffffff, 0x0, 0x2}}) socket$packet(0x11, 0x0, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000001240)=0x20, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f00000012c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x90) 5.677151768s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x9}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5.66423932s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 948.374963ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 842.290359ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002011207b1af8ff00000000bfa10000000000e60b2b2100f8ffffffb702000008000000b703040000000000850000007300000091"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="f3f54ceeefd97cb8707e92ebe0d483f041df2b1ad595f6622b42bfc8af6f364b4dc815450b101b1a6dc8378d1e1635f934e58d79dd574f53adbb0f798cdc09158e064ce4edea986eac445036cc70dc0cb0c61a3e362fc9a26c11632dfe972177d9b4e24dd3b96e5d4cc38692c737deb50d612eac"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x244, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@dev}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x10c, 0x14, {{'sha1\x00'}, 0x600, 0x0, "c085301b2d1f505edcf5d387e33f41b0faf343ee478a6c6a318ad2469e85a81a7f1e529ec51483a30e7df2c1fbf7082d2d50ef525efe998987ab9d3a9c331049aec8af3ad52141da92a074757af42e9afe3c104f5037fe565b02814181a06aa90e51d11896906b38403444a4268d8e54c40b7e7842733c0c088c92798d795120018d42f04e3a370b74759734937433fb05a063579fcee1d15e717dc288386e193e27115a4fa17ee7cd06fe052774ff669149dd1fff10507c5d1f4e64ebfac176"}}]}, 0x244}}, 0x0) 832.434361ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 703.204921ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001700), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="bfdc00000000000000000f00000008000100", @ANYRES64], 0x1c}}, 0x0) 635.198062ms ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1049c82, &(0x7f00000001c0)=ANY=[], 0x0, 0x249, &(0x7f0000000600)="$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") r0 = io_uring_setup(0x30d3, &(0x7f00000000c0)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000001c0), 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000240), 0x4) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000080), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x208040, 0x0, 0x0, 0xfffffffffffffebb, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 439.597272ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 431.378313ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 354.740685ms ago: executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket(0x10, 0x803, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x16, r1}) socket(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ftruncate(0xffffffffffffffff, 0x8979) 348.782806ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001700), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="bfdc00000000000000000f00000008000100", @ANYRES64], 0x1c}}, 0x0) 341.447757ms ago: executing program 4: r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r1 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000480)) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 317.928441ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x3e0000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 314.662022ms ago: executing program 4: perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0xf, 0x0, 0x0, 0x0) 288.960015ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000500)=0x9c) 278.907597ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x0, @empty}, @in6={0xa, 0x4e21, 0x0, @empty}], 0x38) 262.45299ms ago: executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket$netlink(0x10, 0x3, 0xd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000300)={0xc6, 0x8, 0x2, 0x6, 0x4, "e47d519a69f3ad50"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40286608, &(0x7f0000000540)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x2e000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) 255.415541ms ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/7, 0x7}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 221.253506ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007000000000002009500094000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x210}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@private1, @empty, @mcast1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400000c0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 199.018709ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 162.869835ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 145.622998ms ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) 106.592093ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 82.507208ms ago: executing program 1: r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r1 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000480)) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 73.665089ms ago: executing program 0: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x5402, 0x4) 51.091542ms ago: executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket(0x10, 0x803, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x16, r1}) socket(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ftruncate(0xffffffffffffffff, 0x8979) 27.622306ms ago: executing program 0: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x55, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x39, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000800)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x23, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x2, 0x1ec78000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r3, r3, r3], 0x0, 0x10, 0x7ff}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, [@map_idx, @alu={0x4, 0x1, 0x6, 0x9, 0xa, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x0, 0xef4c7729d53bfaa8, 0x2, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x0, 0x9, 0xa, 0x100}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000007c0)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0xe8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000880)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000080)) 0s ago: executing program 0: perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0xf, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T10829] loop0: p187 size 33024 extends beyond EOD, truncated [ 201.192217][T10829] loop0: p188 size 33024 extends beyond EOD, truncated [ 201.200118][T10829] loop0: p189 size 33024 extends beyond EOD, truncated [ 201.207676][T10829] loop0: p190 size 33024 extends beyond EOD, truncated [ 201.215376][T10829] loop0: p191 size 33024 extends beyond EOD, truncated [ 201.222925][T10829] loop0: p192 size 33024 extends beyond EOD, truncated [ 201.230365][T10829] loop0: p193 size 33024 extends beyond EOD, truncated [ 201.238675][T10829] loop0: p194 size 33024 extends beyond EOD, truncated [ 201.246275][T10829] loop0: p195 size 33024 extends beyond EOD, truncated [ 201.254162][T10829] loop0: p196 size 33024 extends beyond EOD, truncated [ 201.261695][T10829] loop0: p197 size 33024 extends beyond EOD, truncated [ 201.268908][T10945] syzkaller0: entered promiscuous mode [ 201.269359][T10829] loop0: p198 size 33024 extends beyond EOD, truncated [ 201.284025][T10945] syzkaller0 (unregistering): left promiscuous mode [ 201.285191][T10829] loop0: p199 size 33024 extends beyond EOD, truncated [ 201.298156][T10829] loop0: p200 size 33024 extends beyond EOD, truncated [ 201.305617][T10829] loop0: p201 size 33024 extends beyond EOD, truncated [ 201.312993][T10829] loop0: p202 size 33024 extends beyond EOD, truncated [ 201.320461][T10829] loop0: p203 size 33024 extends beyond EOD, truncated [ 201.328445][T10829] loop0: p204 size 33024 extends beyond EOD, truncated [ 201.337813][T10829] loop0: p205 size 33024 extends beyond EOD, truncated [ 201.338604][T10829] loop0: p206 size 33024 extends beyond EOD, truncated [ 201.352812][T10829] loop0: p207 size 33024 extends beyond EOD, truncated [ 201.360441][T10829] loop0: p208 size 33024 extends beyond EOD, truncated [ 201.368648][T10829] loop0: p209 size 33024 extends beyond EOD, truncated [ 201.372049][T10946] bridge0: port 3(gretap0) entered blocking state [ 201.378069][T10829] loop0: p210 size 33024 extends beyond EOD, [ 201.382019][T10946] bridge0: port 3(gretap0) entered disabled state [ 201.382264][T10946] gretap0: entered allmulticast mode [ 201.388180][T10829] truncated [ 201.389206][T10829] loop0: p211 size 33024 extends beyond EOD, [ 201.395326][T10946] gretap0: entered promiscuous mode [ 201.400010][T10829] truncated [ 201.403570][T10946] bridge0: port 3(gretap0) entered blocking state [ 201.418680][T10829] loop0: p212 size 33024 extends beyond EOD, [ 201.424124][T10946] bridge0: port 3(gretap0) entered forwarding state [ 201.437089][T10829] truncated [ 201.441020][T10829] loop0: p213 size 33024 extends beyond EOD, truncated [ 201.448654][T10829] loop0: p214 size 33024 extends beyond EOD, truncated [ 201.456270][T10829] loop0: p215 size 33024 extends beyond EOD, truncated [ 201.464036][T10829] loop0: p216 size 33024 extends beyond EOD, truncated [ 201.471598][T10829] loop0: p217 size 33024 extends beyond EOD, truncated [ 201.480790][T10829] loop0: p218 size 33024 extends beyond EOD, truncated [ 201.488404][T10829] loop0: p219 size 33024 extends beyond EOD, truncated [ 201.496024][T10829] loop0: p220 size 33024 extends beyond EOD, truncated [ 201.503505][T10829] loop0: p221 size 33024 extends beyond EOD, truncated [ 201.510918][T10829] loop0: p222 size 33024 extends beyond EOD, truncated [ 201.518824][T10829] loop0: p223 size 33024 extends beyond EOD, truncated [ 201.526775][T10829] loop0: p224 size 33024 extends beyond EOD, truncated [ 201.534556][T10829] loop0: p225 size 33024 extends beyond EOD, truncated [ 201.542786][T10829] loop0: p226 size 33024 extends beyond EOD, truncated [ 201.558411][T10829] loop0: p227 size 33024 extends beyond EOD, truncated [ 201.570617][T10829] loop0: p228 size 33024 extends beyond EOD, truncated [ 201.579074][T10829] loop0: p229 size 33024 extends beyond EOD, truncated [ 201.579569][T10951] loop4: detected capacity change from 0 to 256 [ 201.587226][T10829] loop0: p230 size 33024 extends beyond EOD, truncated [ 201.600114][T10829] loop0: p231 size 33024 extends beyond EOD, truncated [ 201.600440][T10951] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.618278][T10829] loop0: p232 size 33024 extends beyond EOD, truncated [ 201.626067][T10829] loop0: p233 size 33024 extends beyond EOD, truncated [ 201.634544][T10953] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.639133][T10829] loop0: p234 size 33024 extends beyond EOD, truncated [ 201.644670][T10952] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.653760][T10829] loop0: p235 size 33024 extends beyond EOD, truncated [ 201.670291][T10829] loop0: p236 size 33024 extends beyond EOD, truncated [ 201.683822][T10829] loop0: p237 size 33024 extends beyond EOD, truncated [ 201.692044][T10829] loop0: p238 size 33024 extends beyond EOD, truncated [ 201.701610][T10829] loop0: p239 size 33024 extends beyond EOD, truncated [ 201.711554][T10829] loop0: p240 size 33024 extends beyond EOD, truncated [ 201.722676][T10829] loop0: p241 size 33024 extends beyond EOD, truncated [ 201.730253][T10829] loop0: p242 size 33024 extends beyond EOD, truncated [ 201.739752][T10829] loop0: p243 size 33024 extends beyond EOD, truncated [ 201.749425][T10959] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 201.750656][T10829] loop0: p244 size 33024 extends beyond EOD, truncated [ 201.774228][T10829] loop0: p245 size 33024 extends beyond EOD, truncated [ 201.782047][T10829] loop0: p246 size 33024 extends beyond EOD, truncated [ 201.789593][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 201.789614][ T29] audit: type=1326 audit(1718676172.921:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a94d5f29 code=0x7fc00000 [ 201.789660][T10829] loop0: p247 size 33024 extends beyond EOD, truncated [ 201.849433][T10829] loop0: p248 size 33024 extends beyond EOD, truncated [ 201.858590][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.875873][T10829] loop0: p249 size 33024 extends beyond EOD, truncated [ 201.887570][T10829] loop0: p250 size 33024 extends beyond EOD, truncated [ 201.903641][T10829] loop0: p251 size 33024 extends beyond EOD, truncated [ 201.918345][T10977] loop3: detected capacity change from 0 to 256 [ 201.930825][T10972] syzkaller0: entered promiscuous mode [ 201.938479][T10829] loop0: p252 size 33024 extends beyond EOD, truncated [ 201.951059][T10972] syzkaller0 (unregistering): left promiscuous mode [ 201.960284][T10829] loop0: p253 size 33024 extends beyond EOD, truncated [ 201.973855][T10977] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.974551][T10829] loop0: p254 size 33024 extends beyond EOD, truncated [ 201.994216][T10829] loop0: p255 size 33024 extends beyond EOD, truncated [ 202.005335][T10978] tipc: MTU too low for tipc bearer [ 202.042651][T10979] bridge0: port 3(gretap0) entered blocking state [ 202.049292][T10979] bridge0: port 3(gretap0) entered disabled state [ 202.082161][T10979] gretap0: entered allmulticast mode [ 202.088137][T10979] gretap0: entered promiscuous mode [ 202.101704][T10979] bridge0: port 3(gretap0) entered blocking state [ 202.108402][T10979] bridge0: port 3(gretap0) entered forwarding state [ 202.400815][T10986] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.410983][T10985] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.569112][T10990] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 202.810276][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.823765][T11003] usb usb8: usbfs: process 11003 (syz-executor.4) did not claim interface 0 before use [ 202.833790][T11003] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 202.935813][T11020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 202.964653][ T29] audit: type=1326 audit(1718676174.102:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 203.539167][ T29] audit: type=1326 audit(1718676174.672:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bec07f29 code=0x7fc00000 [ 203.759004][T11030] loop3: detected capacity change from 0 to 256 [ 203.780580][T11030] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.814389][T11033] tipc: MTU too low for tipc bearer [ 204.585353][T11046] usb usb8: usbfs: process 11046 (syz-executor.3) did not claim interface 0 before use [ 204.600001][ T29] audit: type=1326 audit(1718676175.743:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11048 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc076f29 code=0x0 [ 204.624296][T11046] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 204.631577][T11052] bridge_slave_0: invalid flags given to default FDB implementation [ 204.705640][T11059] loop2: detected capacity change from 0 to 256 [ 204.929275][T11065] loop4: detected capacity change from 0 to 256 [ 204.938361][T11065] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.454543][T11072] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 205.478033][T11074] loop2: detected capacity change from 0 to 256 [ 205.486983][T11074] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.570635][T11081] tipc: MTU too low for tipc bearer [ 205.607671][T11088] usb usb8: usbfs: process 11088 (syz-executor.1) did not claim interface 0 before use [ 205.617663][T11088] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 205.690592][T11091] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.818175][T11100] loop4: detected capacity change from 0 to 256 [ 205.845974][T11100] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.430907][T11105] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 206.444717][T11105] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.513723][T11111] usb usb8: usbfs: process 11111 (syz-executor.0) did not claim interface 0 before use [ 206.533994][T11111] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 206.642469][T11127] loop0: detected capacity change from 0 to 256 [ 206.651490][T11127] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.765768][T11138] loop4: detected capacity change from 0 to 256 [ 206.777301][T11138] FAT-fs (loop4): bogus logical sector size 0 [ 206.783482][T11138] FAT-fs (loop4): Can't find a valid FAT filesystem [ 207.537117][T11126] loop4: detected capacity change from 0 to 1024 [ 207.544706][T11126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 207.553166][T11126] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.564233][T11126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 207.574073][T11126] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 207.585908][T11126] journal_load_superblock: Cannot read journal superblock [ 207.593090][T11126] EXT4-fs (loop4): Could not load journal inode [ 207.640195][T11160] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 207.663725][ T29] audit: type=1400 audit(1718676178.804:7447): avc: denied { listen } for pid=11164 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.745895][T11191] tap0: tun_chr_ioctl cmd 1074025675 [ 208.751312][T11191] tap0: persist enabled [ 208.781294][T11191] tap0: tun_chr_ioctl cmd 1074025675 [ 208.786719][T11191] tap0: persist disabled [ 208.816043][ T29] audit: type=1400 audit(1718676179.955:7448): avc: denied { connect } for pid=11193 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.982195][T11210] loop2: detected capacity change from 0 to 1024 [ 209.099124][T11220] loop1: detected capacity change from 0 to 256 [ 209.106531][T11220] FAT-fs (loop1): bogus logical sector size 0 [ 209.112660][T11220] FAT-fs (loop1): Can't find a valid FAT filesystem [ 209.211315][T11210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.246335][T11229] loop1: detected capacity change from 0 to 1024 [ 209.253583][T11229] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 209.262040][T11229] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.273003][T11229] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 209.282733][T11229] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 209.294222][T11229] journal_load_superblock: Cannot read journal superblock [ 209.301469][T11229] EXT4-fs (loop1): Could not load journal inode [ 209.356365][T10399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.724267][T11291] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 209.832973][T11308] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 209.843306][ T29] audit: type=1400 audit(1718676180.995:7449): avc: denied { relabelto } for pid=11307 comm="syz-executor.3" name="file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 209.879375][ T29] audit: type=1400 audit(1718676181.025:7450): avc: denied { unlink } for pid=10083 comm="syz-executor.3" name="file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 209.960770][T11322] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 210.210888][T11339] loop4: detected capacity change from 0 to 256 [ 210.220226][T11339] FAT-fs (loop4): bogus logical sector size 0 [ 210.226548][T11339] FAT-fs (loop4): Can't find a valid FAT filesystem [ 210.336131][T11343] loop4: detected capacity change from 0 to 1024 [ 210.343889][T11343] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 210.352612][T11343] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.363649][T11343] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 210.373345][T11343] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 210.385203][T11343] journal_load_superblock: Cannot read journal superblock [ 210.392521][T11343] EXT4-fs (loop4): Could not load journal inode [ 210.478482][T11346] usb usb9: usbfs: process 11346 (syz-executor.1) did not claim interface 0 before use [ 210.548442][T11358] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 210.633476][ T29] audit: type=1400 audit(1718676181.776:7451): avc: denied { map } for pid=11371 comm="syz-executor.0" path="socket:[40436]" dev="sockfs" ino=40436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.660331][ T29] audit: type=1326 audit(1718676181.806:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 210.684603][ T29] audit: type=1326 audit(1718676181.806:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 210.693221][T11381] usb usb9: usbfs: process 11381 (syz-executor.0) did not claim interface 0 before use [ 210.752953][T11388] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 210.849239][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.907689][T11410] usb usb9: usbfs: process 11410 (syz-executor.0) did not claim interface 0 before use [ 210.917930][ T29] audit: type=1326 audit(1718676182.066:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 211.052047][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.089941][T11434] usb usb9: usbfs: process 11434 (syz-executor.0) did not claim interface 0 before use [ 211.330456][T11451] loop1: detected capacity change from 0 to 256 [ 211.337322][T11451] FAT-fs (loop1): bogus logical sector size 0 [ 211.343478][T11451] FAT-fs (loop1): Can't find a valid FAT filesystem [ 211.444707][T11454] loop1: detected capacity change from 0 to 1024 [ 211.452442][T11454] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 211.460920][T11454] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.472005][T11454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 211.481673][T11454] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.493015][T11454] journal_load_superblock: Cannot read journal superblock [ 211.500238][T11454] EXT4-fs (loop1): Could not load journal inode [ 211.713965][ T29] audit: type=1326 audit(1718676182.856:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bec07f29 code=0x7fc00000 [ 211.738170][ T29] audit: type=1326 audit(1718676182.856:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f18bec07f29 code=0x7fc00000 [ 211.836121][T11464] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 212.012510][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.090289][T11471] usb usb9: usbfs: process 11471 (syz-executor.1) did not claim interface 0 before use [ 212.371436][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.434707][T11500] loop3: detected capacity change from 0 to 2048 [ 212.459941][T11500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.523518][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.722763][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.815038][T11536] loop3: detected capacity change from 0 to 2048 [ 212.841150][T11536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.935924][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 212.935941][ T29] audit: type=1400 audit(1718676184.077:7459): avc: denied { shutdown } for pid=11553 comm="syz-executor.4" lport=45816 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.977291][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.309769][T11582] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 213.340128][T11581] loop1: detected capacity change from 0 to 2048 [ 213.379049][T11581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.463513][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.782980][T11618] tap0: tun_chr_ioctl cmd 1074025675 [ 213.788423][T11618] tap0: persist enabled [ 213.803036][T11618] tap0: tun_chr_ioctl cmd 1074025675 [ 213.808540][T11618] tap0: persist disabled [ 213.960147][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.983907][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.168909][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.179878][T11649] tap0: tun_chr_ioctl cmd 1074025675 [ 214.185441][T11649] tap0: persist enabled [ 214.192544][T11649] tap0: tun_chr_ioctl cmd 1074025675 [ 214.198315][T11649] tap0: persist disabled [ 214.255070][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.275739][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.435518][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.508175][T11689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.586499][ T29] audit: type=1326 audit(1718676185.738:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bec07f29 code=0x0 [ 214.658287][ T29] audit: type=1400 audit(1718676185.808:7461): avc: denied { mount } for pid=11706 comm="syz-executor.1" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 214.734338][ T29] audit: type=1400 audit(1718676185.878:7462): avc: denied { remount } for pid=11706 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 214.798702][ T29] audit: type=1400 audit(1718676185.948:7463): avc: denied { unmount } for pid=10356 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 214.890862][T11727] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 214.958636][T11710] loop0: detected capacity change from 0 to 256 [ 215.046865][T11710] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 215.054761][T11710] FAT-fs (loop0): Filesystem has been set read-only [ 215.144234][T11746] loop4: detected capacity change from 0 to 512 [ 215.169702][T11746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 215.192805][T11746] System zones: 1-12 [ 215.198767][T11746] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #11: comm syz-executor.4: iget: bogus i_mode (0) [ 215.211673][T11746] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 215.224974][T11746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.251220][ T9966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.304745][ T29] audit: type=1326 audit(1718676186.448:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 215.329020][ T29] audit: type=1326 audit(1718676186.448:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 215.403454][ T29] audit: type=1326 audit(1718676186.498:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x7fc00000 [ 215.432904][T11772] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 215.565682][T11785] ip_vti0: Master is either lo or non-ether device [ 215.803905][T11798] loop4: detected capacity change from 0 to 256 [ 215.874804][T11798] FAT-fs (loop4): bogus logical sector size 0 [ 215.881026][T11798] FAT-fs (loop4): Can't find a valid FAT filesystem [ 215.992510][T11804] loop4: detected capacity change from 0 to 1024 [ 216.001486][T11804] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 216.010144][T11804] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.021055][T11804] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 216.030933][T11804] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 216.042962][T11804] journal_load_superblock: Cannot read journal superblock [ 216.050152][T11804] EXT4-fs (loop4): Could not load journal inode [ 216.081110][T11787] loop2: detected capacity change from 0 to 512 [ 216.100067][T11800] loop3: detected capacity change from 0 to 2048 [ 216.105975][T11787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 216.117929][T11809] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 216.131074][T11787] System zones: 1-12 [ 216.134374][T11800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.136941][T11787] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #11: comm syz-executor.2: iget: bogus i_mode (0) [ 216.161079][T11787] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 216.174307][T11787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.181802][T11814] loop0: detected capacity change from 0 to 1024 [ 216.196323][T11814] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 216.207554][T11814] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 216.217777][T11814] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 216.218585][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.228014][T11814] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 216.245952][T11814] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 216.255001][T10399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.433084][ T29] audit: type=1326 audit(1718676187.579:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11827 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 216.474041][ T29] audit: type=1400 audit(1718676187.619:7468): avc: denied { watch watch_reads } for pid=11831 comm="syz-executor.0" path="/proc/11831" dev="proc" ino=42240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 216.533985][T11839] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 216.651208][T11847] loop2: detected capacity change from 0 to 1024 [ 216.660079][T11847] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 216.671104][T11847] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 216.700741][T11848] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 216.708922][T11848] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 216.737250][T11847] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 216.747508][T11847] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 216.756259][T11847] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 217.007587][T11860] loop4: detected capacity change from 0 to 256 [ 217.061725][T11860] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 217.069804][T11860] FAT-fs (loop4): Filesystem has been set read-only [ 217.127733][T11844] loop3: detected capacity change from 0 to 512 [ 217.158844][T11844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 217.197902][T11844] System zones: 1-12 [ 217.218070][T11844] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #11: comm syz-executor.3: iget: bogus i_mode (0) [ 217.271671][T11844] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 217.390947][T11844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.526827][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.576254][T11873] loop0: detected capacity change from 0 to 2048 [ 217.586062][T11873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.596922][T11873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.612332][T11873] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 217.663385][T10149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.757683][T11883] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 217.994298][T11902] __nla_validate_parse: 10 callbacks suppressed [ 217.994312][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.994365][T11902] ip_vti0: Master is either lo or non-ether device [ 218.049844][T11896] loop2: detected capacity change from 0 to 512 [ 218.059381][T11909] loop0: detected capacity change from 0 to 1024 [ 218.068360][T11896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 218.068398][T11896] System zones: 1-12 [ 218.068595][T11909] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 218.068623][T11909] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 218.068664][T11909] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 218.068688][T11909] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 218.068704][T11909] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 218.068898][T11896] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #11: comm syz-executor.2: iget: bogus i_mode (0) [ 218.069192][T11896] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 218.069759][T11896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.080781][T11911] loop4: detected capacity change from 0 to 2048 [ 218.082240][T11911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.229053][T11911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.232807][T11911] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 218.275851][T10399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.280988][ T9966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.409814][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 218.409830][ T29] audit: type=1326 audit(1718676189.560:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11924 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 218.572228][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.572321][T11935] ip_vti0: Master is either lo or non-ether device [ 218.711442][T11939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.734715][T11942] loop0: detected capacity change from 0 to 1024 [ 218.738727][T11942] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 218.738754][T11942] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 218.738839][T11942] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 218.738865][T11942] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 218.738881][T11942] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 218.853166][T11946] loop4: detected capacity change from 0 to 256 [ 218.934167][T11936] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 218.934190][T11936] FAT-fs (loop4): Filesystem has been set read-only [ 219.033307][T11951] loop3: detected capacity change from 0 to 2048 [ 219.041013][T11951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.072064][T11954] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.096632][T11951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.144733][T11951] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 219.162345][T11960] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.211941][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.235336][T11959] loop0: detected capacity change from 0 to 512 [ 219.255023][T11959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 219.282953][T11959] System zones: 1-12 [ 219.287283][T11959] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #11: comm syz-executor.0: iget: bogus i_mode (0) [ 219.320578][T11959] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 219.348088][T11959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.365898][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.397504][T11971] ip_vti0: Master is either lo or non-ether device [ 219.438774][T10149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.509122][T11978] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.569724][T11986] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.576294][T11987] loop2: detected capacity change from 0 to 512 [ 219.577323][T11987] journal_path: Lookup failure for './file1' [ 219.577345][T11987] EXT4-fs: error: could not find journal device path [ 219.640323][T11987] loop2: detected capacity change from 0 to 1024 [ 219.657888][T11987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.675820][T11987] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2786: inode #2: comm syz-executor.2: corrupted in-inode xattr: bad e_name length [ 219.675965][T11987] EXT4-fs (loop2): Remounting filesystem read-only [ 219.678477][ T29] audit: type=1326 audit(1718676190.830:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc076f29 code=0x0 [ 219.811819][ T29] audit: type=1326 audit(1718676190.960:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 219.984545][T12002] loop1: detected capacity change from 0 to 512 [ 220.005343][T12013] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.010843][T12002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 220.026764][T12002] System zones: 1-12 [ 220.033428][T12002] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #11: comm syz-executor.1: iget: bogus i_mode (0) [ 220.045139][T12002] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 220.053182][T12002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.097353][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.126366][T12018] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.184447][T12008] loop4: detected capacity change from 0 to 256 [ 220.194553][T12008] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 220.194580][T12008] FAT-fs (loop4): Filesystem has been set read-only [ 220.411184][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.413006][T12039] loop0: detected capacity change from 0 to 512 [ 220.420231][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.432403][T12039] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 220.435742][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.454449][T12039] EXT4-fs (loop0): 1 truncate cleaned up [ 220.460650][T12039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.471021][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.486900][ T29] audit: type=1400 audit(1718676191.641:7473): avc: denied { bind } for pid=12038 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.496676][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.515893][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.516592][T10149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.530097][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 220.536042][ T29] audit: type=1400 audit(1718676191.681:7474): avc: denied { mount } for pid=12043 comm="syz-executor.3" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.567497][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 220.576600][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 220.585760][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 220.595025][T10399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 220.611708][T10399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.658597][T12051] pim6reg: entered allmulticast mode [ 220.670830][T12051] vxcan1: entered allmulticast mode [ 220.724194][ T29] audit: type=1400 audit(1718676191.881:7475): avc: denied { ioctl } for pid=12043 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 220.784218][T12055] loop0: detected capacity change from 0 to 764 [ 221.253050][T12075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.295454][T12084] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 221.384909][ T29] audit: type=1400 audit(1718676192.531:7476): avc: denied { unmount } for pid=10083 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 221.423848][T12067] chnl_net:caif_netlink_parms(): no params data found [ 221.459768][T12100] loop4: detected capacity change from 0 to 512 [ 221.475804][T12100] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 221.496732][T12100] EXT4-fs (loop4): 1 truncate cleaned up [ 221.503008][T12100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.503482][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.522830][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.530370][T12067] bridge_slave_0: entered allmulticast mode [ 221.536960][T12067] bridge_slave_0: entered promiscuous mode [ 221.545688][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.552908][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.560290][T12067] bridge_slave_1: entered allmulticast mode [ 221.560966][ T9966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.567191][T12067] bridge_slave_1: entered promiscuous mode [ 221.595259][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.606382][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.650713][T12067] team0: Port device team_slave_0 added [ 221.659878][T12067] team0: Port device team_slave_1 added [ 221.703604][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.710832][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.736920][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.758746][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.765895][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.791949][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.838077][T12128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.857531][T12067] hsr_slave_0: entered promiscuous mode [ 221.863855][T12067] hsr_slave_1: entered promiscuous mode [ 221.869850][T12067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.877470][T12067] Cannot create hsr debugfs directory [ 221.908933][T12138] loop1: detected capacity change from 0 to 2048 [ 221.918712][T12138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.930483][T12128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.949291][T12138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.988198][T12138] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 222.012694][T12128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.037647][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.057219][T12067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.103245][T12128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.143218][T12067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.179853][T12128] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.194180][T12128] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.213058][T12128] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.226204][T12161] pim6reg: entered allmulticast mode [ 222.240951][T12067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.258238][T12128] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.267131][T12161] vxcan1: entered allmulticast mode [ 222.309194][T12067] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.399727][T12067] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.408917][T12067] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.418282][T12067] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.423532][T12177] loop0: detected capacity change from 0 to 512 [ 222.434827][T12067] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.435615][T12177] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 222.449884][T12177] EXT4-fs (loop0): 1 truncate cleaned up [ 222.456489][T12177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.491004][T10149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.501060][T12067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.519227][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.530621][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.537919][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.548072][T12180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.574067][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.581192][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.623286][T12190] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 222.732961][T12067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.865561][T12230] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 222.890321][T12067] veth0_vlan: entered promiscuous mode [ 222.905813][T12067] veth1_vlan: entered promiscuous mode [ 222.929352][T12067] veth0_macvtap: entered promiscuous mode [ 222.938038][T12067] veth1_macvtap: entered promiscuous mode [ 222.953372][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.963909][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.973843][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.984396][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.994279][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.004778][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.014744][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.025218][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.035296][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.045991][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.055845][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.066477][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.082467][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.095099][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.105674][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.115628][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.126352][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.136306][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.146842][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.156780][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.167272][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.177187][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.187742][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.197717][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.208200][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.221000][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.232501][T12067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.241344][T12067] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.250134][T12067] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.259044][T12067] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.457505][T12257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.517340][T12257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.821255][ T29] audit: type=1400 audit(1718676194.922:7477): avc: denied { write } for pid=12261 comm="syz-executor.1" name="file0" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 223.844356][ T29] audit: type=1400 audit(1718676194.922:7478): avc: denied { open } for pid=12261 comm="syz-executor.1" path="/root/syzkaller-testdir445633836/syzkaller.0tzmBy/123/file0" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 223.871921][ T29] audit: type=1400 audit(1718676194.932:7479): avc: denied { ioctl } for pid=12261 comm="syz-executor.1" path="/root/syzkaller-testdir445633836/syzkaller.0tzmBy/123/file0" dev="sda1" ino=1968 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 223.944711][T12265] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 224.011629][ T29] audit: type=1400 audit(1718676195.162:7480): avc: denied { mounton } for pid=12271 comm="syz-executor.1" path="/proc/12271/cgroup" dev="proc" ino=45210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 224.035376][ T29] audit: type=1400 audit(1718676195.162:7481): avc: denied { mounton } for pid=12271 comm="syz-executor.1" path="/proc/12271/cgroup" dev="nsfs" ino=4026533066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.104122][T12296] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 225.147714][T12298] blktrace: Concurrent blktraces are not allowed on loop3 [ 225.253645][T12305] __nla_validate_parse: 8 callbacks suppressed [ 225.253666][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.299207][T12308] loop1: detected capacity change from 0 to 512 [ 225.310815][T12308] journal_path: Lookup failure for './file1' [ 225.316950][T12308] EXT4-fs: error: could not find journal device path [ 225.327959][ T29] audit: type=1326 audit(1718676196.483:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 225.376947][T12317] loop3: detected capacity change from 0 to 512 [ 225.386806][T12317] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 225.394133][T12308] loop1: detected capacity change from 0 to 1024 [ 225.395556][T12317] EXT4-fs (loop3): 1 truncate cleaned up [ 225.405461][T12308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.420480][T12317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.429132][T12308] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2786: inode #2: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 225.449485][T12308] EXT4-fs (loop1): Remounting filesystem read-only [ 225.461003][ T29] audit: type=1326 audit(1718676196.613:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85a94d5f29 code=0x0 [ 225.496624][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.631080][T12321] loop4: detected capacity change from 0 to 256 [ 225.643830][T12321] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 225.651900][T12321] FAT-fs (loop4): Filesystem has been set read-only [ 226.130539][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.142497][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.153104][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.163877][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.181998][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.191038][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.202879][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 226.212502][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 226.221511][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 226.221705][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 226.221747][T10356] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 226.254372][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.299941][T12257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.450104][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.474479][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.639389][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.646707][ T29] audit: type=1400 audit(1718676197.784:7484): avc: denied { watch watch_reads } for pid=12346 comm="syz-executor.4" path="/root/syzkaller-testdir3521184076/syzkaller.6z3U5M/193/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.765768][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.778089][T12351] tipc: Started in network mode [ 226.778118][T12351] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 226.778136][T12351] tipc: Enabling of bearer rejected, failed to enable media [ 226.834632][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.897466][ T36] gretap0: left allmulticast mode [ 226.897542][ T36] gretap0: left promiscuous mode [ 226.897653][ T36] bridge0: port 3(gretap0) entered disabled state [ 226.908444][ T36] bridge_slave_1: left allmulticast mode [ 226.908463][ T36] bridge_slave_1: left promiscuous mode [ 226.908675][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.917338][ T36] bridge_slave_0: left allmulticast mode [ 226.939975][ T36] bridge_slave_0: left promiscuous mode [ 226.940209][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.102160][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.114091][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.126125][ T36] bond0 (unregistering): Released all slaves [ 227.173267][T12352] chnl_net:caif_netlink_parms(): no params data found [ 227.220146][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.221642][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.227272][T12352] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.261819][T12352] bridge_slave_0: entered allmulticast mode [ 227.272861][T12352] bridge_slave_0: entered promiscuous mode [ 227.279236][ T29] audit: type=1326 audit(1718676198.434:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bec07f29 code=0x7ffc0000 [ 227.307668][ T29] audit: type=1326 audit(1718676198.434:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bec07f29 code=0x7ffc0000 [ 227.335195][ T36] hsr_slave_0: left promiscuous mode [ 227.341523][ T36] hsr_slave_1: left promiscuous mode [ 227.349062][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.356607][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.368915][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.376692][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.388459][ T36] veth1_macvtap: left promiscuous mode [ 227.394080][ T36] veth0_macvtap: left promiscuous mode [ 227.399704][ T36] veth1_vlan: left promiscuous mode [ 227.405008][ T36] veth0_vlan: left promiscuous mode [ 227.500773][ T36] pim6reg (unregistering): left allmulticast mode [ 227.558105][ T36] team0 (unregistering): Port device team_slave_1 removed [ 227.570556][ T36] team0 (unregistering): Port device team_slave_0 removed [ 227.607138][ T36] vxcan1 (unregistering): left allmulticast mode [ 227.629326][T12352] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.629673][T12352] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.629914][T12352] bridge_slave_1: entered allmulticast mode [ 227.630754][T12352] bridge_slave_1: entered promiscuous mode [ 227.683552][T12352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.685483][T12352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.723723][T12352] team0: Port device team_slave_0 added [ 227.730627][T12352] team0: Port device team_slave_1 added [ 227.747854][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.759468][T12352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.766454][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.792553][T12352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.830026][T12352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.830044][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.830078][T12352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.892979][T12352] hsr_slave_0: entered promiscuous mode [ 227.900874][T12352] hsr_slave_1: entered promiscuous mode [ 227.907008][T12352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.907024][T12352] Cannot create hsr debugfs directory [ 228.092461][T12410] loop3: detected capacity change from 0 to 256 [ 228.104865][T12410] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.245464][T12352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.256092][T12352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.258581][T12352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.273321][T12352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.313944][T12352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.333310][T12352] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.345880][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.345961][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.361964][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.375530][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.473950][T12352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.559772][T12352] veth0_vlan: entered promiscuous mode [ 228.570074][T12352] veth1_vlan: entered promiscuous mode [ 228.586784][T12352] veth0_macvtap: entered promiscuous mode [ 228.602452][T12352] veth1_macvtap: entered promiscuous mode [ 228.620628][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.631492][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.641459][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.651986][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.661851][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.672335][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.682312][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.692781][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.702756][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.713407][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.723353][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.733800][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.745554][T12352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.757420][T12257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.789537][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.800103][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.810078][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.820602][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.830466][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.840979][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.850830][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.861291][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.871308][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.881967][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.891998][T12352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.902489][T12352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.914238][T12352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.927862][T12352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.936759][T12352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.945586][T12352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.954390][T12352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.983980][T12257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.996149][T12257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.008873][T12257] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.024452][T12257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.055582][T12443] loop2: detected capacity change from 0 to 764 [ 229.092457][T12445] loop4: detected capacity change from 0 to 256 [ 229.101049][T12445] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.323190][T12467] tipc: Started in network mode [ 229.328276][T12467] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 229.337227][T12467] tipc: Enabling of bearer rejected, failed to enable media [ 229.369583][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 229.369598][ T29] audit: type=1400 audit(1718676200.525:7810): avc: denied { audit_control } for pid=12471 comm="syz-executor.1" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.399681][T12470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.435337][ T29] audit: type=1326 audit(1718676200.575:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.459624][ T29] audit: type=1326 audit(1718676200.575:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.484551][ T29] audit: type=1326 audit(1718676200.575:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.508556][ T29] audit: type=1326 audit(1718676200.575:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.532594][ T29] audit: type=1326 audit(1718676200.575:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.556977][ T29] audit: type=1326 audit(1718676200.575:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.581124][ T29] audit: type=1326 audit(1718676200.575:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.606134][ T29] audit: type=1326 audit(1718676200.575:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.630514][ T29] audit: type=1326 audit(1718676200.575:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff83930cf29 code=0x7ffc0000 [ 229.660536][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.719715][T12470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.793550][T12470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.872208][T12470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.913304][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 229.958297][T12470] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.975545][T12505] loop1: detected capacity change from 0 to 256 [ 229.979432][T12470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.000868][T12505] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.016354][T12470] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.038073][T12470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.241347][T12504] loop4: detected capacity change from 0 to 256 [ 230.281316][T12504] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 230.289355][T12504] FAT-fs (loop4): Filesystem has been set read-only [ 230.414993][T12526] cgroup: subsys name conflicts with all [ 230.433509][T12531] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.479630][T12539] loop1: detected capacity change from 0 to 256 [ 230.488890][T12539] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.501672][T12531] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.560687][T12531] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.610829][T12531] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.765479][T12555] SELinux: Context is not valid (left unmapped). [ 230.805322][T12559] cgroup: subsys name conflicts with all [ 230.838759][T12566] loop0: detected capacity change from 0 to 256 [ 231.089857][T12591] cgroup: subsys name conflicts with all [ 231.176238][T12601] loop1: detected capacity change from 0 to 256 [ 231.518447][T12605] loop0: detected capacity change from 0 to 256 [ 231.543124][T12602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 231.551146][T12602] FAT-fs (loop0): Filesystem has been set read-only [ 231.562781][T12622] cgroup: subsys name conflicts with all [ 231.656087][T12544] syz-executor.3 (12544) used greatest stack depth: 8208 bytes left [ 231.833633][T12648] cgroup: subsys name conflicts with all [ 231.955710][T12658] random: crng reseeded on system resumption [ 232.268065][T12682] syzkaller0: entered promiscuous mode [ 232.273739][T12682] syzkaller0: entered allmulticast mode [ 232.974678][T12657] syz-executor.1 (12657) used greatest stack depth: 7344 bytes left [ 233.090552][T12724] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.100512][T12724] tipc: Enabling of bearer rejected, failed to enable media [ 233.116793][ T8] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 233.124274][ T8] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 233.134934][ T8] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.000484][T12781] loop4: detected capacity change from 0 to 256 [ 234.823959][T12846] syzkaller0: entered promiscuous mode [ 234.829621][T12846] syzkaller0: entered allmulticast mode [ 235.331580][T12531] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.349307][T12531] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.370087][T12531] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.383296][T12531] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.462252][T12876] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 8192 (only 8 groups) [ 235.852208][T12894] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.996165][T12894] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.022063][T12910] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 8192 (only 8 groups) [ 236.073646][T12894] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.165012][T12894] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.251825][T12894] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.292949][T12894] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.321936][T12894] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.335561][T12925] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.354792][T12894] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.375384][T12925] tipc: Enabling of bearer rejected, failed to enable media [ 236.400921][ T3181] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 236.408532][ T3181] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 236.446570][ T3181] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 236.466633][T12934] loop3: detected capacity change from 0 to 256 [ 236.513898][T12934] FAT-fs (loop3): codepage cp1251 not found [ 236.724769][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.734764][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 236.734780][ T29] audit: type=1326 audit(1718676207.899:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x0 [ 236.792823][T12962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.839005][T12968] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.849317][T12968] tipc: Enabling of bearer rejected, failed to enable media [ 236.862063][T12962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.867772][T12975] loop4: detected capacity change from 0 to 256 [ 236.884836][ T3181] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 236.892306][T12975] FAT-fs (loop4): codepage cp1251 not found [ 236.898925][ T3181] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 236.924761][ T3181] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 236.936625][T12962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.996170][T12962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.149974][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.443440][T13010] loop4: detected capacity change from 0 to 256 [ 237.455206][T13012] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.460971][T13010] FAT-fs (loop4): codepage cp1251 not found [ 237.467659][T13012] tipc: Enabling of bearer rejected, failed to enable media [ 237.484555][ T3178] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 237.492180][ T3178] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 237.500164][ T3178] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 237.567781][T13017] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 237.576080][T13017] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.594016][T13017] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 237.602710][T13017] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 237.610949][T13017] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.656365][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.815120][T13038] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 8192 (only 8 groups) [ 238.004936][T13052] random: crng reseeded on system resumption [ 238.074709][T13054] syzkaller0: entered promiscuous mode [ 238.080389][T13054] syzkaller0: entered allmulticast mode [ 238.245562][ T29] audit: type=1326 audit(1718676209.410:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9232d6af29 code=0x0 [ 238.680044][T13075] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 8192 (only 8 groups) [ 238.991570][T13088] random: crng reseeded on system resumption [ 239.172220][T13091] syzkaller0: entered promiscuous mode [ 239.178012][T13091] syzkaller0: entered allmulticast mode [ 239.618438][ T29] audit: type=1326 audit(1718676210.780:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13120 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a689df29 code=0x0 [ 239.671036][T13123] random: crng reseeded on system resumption [ 239.809295][T13127] loop3: detected capacity change from 0 to 256 [ 239.844961][T13127] FAT-fs (loop3): codepage cp1251 not found [ 239.959830][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.033765][T13140] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 240.042089][T13140] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.051899][T13140] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 240.060178][T13140] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 240.068471][T13140] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.319276][T13156] loop1: detected capacity change from 0 to 256 [ 240.337323][T13156] FAT-fs (loop1): codepage cp1251 not found [ 240.432622][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.477842][T13170] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 240.486123][T13170] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.500124][T13170] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 240.508634][T13170] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 240.517082][T13170] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.653054][T13187] loop1: detected capacity change from 0 to 1024 [ 240.671124][T13187] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (49848!=20869) [ 240.680922][T13187] EXT4-fs (loop1): group descriptors corrupted! [ 240.845577][T13205] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 240.853877][T13205] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.863794][T13205] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.014659][T13229] loop3: detected capacity change from 0 to 1024 [ 241.022564][T13229] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (49848!=20869) [ 241.032319][T13229] EXT4-fs (loop3): group descriptors corrupted! [ 241.165175][T13239] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.174907][T13239] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.479829][T13264] loop4: detected capacity change from 0 to 1024 [ 241.487855][T13264] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (49848!=20869) [ 241.498787][T13264] EXT4-fs (loop4): group descriptors corrupted! [ 241.519176][T13266] cgroup: release_agent respecified [ 241.538011][T12962] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.551154][T12962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.567185][T12962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.579778][T12962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.750594][T13304] cgroup: release_agent respecified [ 241.841410][ T29] audit: type=1400 audit(1718676212.991:8024): avc: denied { mounton } for pid=13309 comm="syz-executor.0" path="/root/syzkaller-testdir3027676386/syzkaller.iGy7SI/259/file0" dev="ramfs" ino=49366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 241.925473][T13323] loop4: detected capacity change from 0 to 1024 [ 241.943006][T13323] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (49848!=20869) [ 241.952713][T13323] EXT4-fs (loop4): group descriptors corrupted! [ 242.102693][T13349] cgroup: release_agent respecified [ 242.465222][T13390] cgroup: release_agent respecified [ 242.661670][ T29] audit: type=1400 audit(1718676213.822:8025): avc: denied { remount } for pid=13412 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 242.721078][T13426] cgroup: release_agent respecified [ 243.188384][ T29] audit: type=1400 audit(1718676214.342:8026): avc: denied { mount } for pid=13486 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.213952][T13489] validate_nla: 5 callbacks suppressed [ 243.213969][T13489] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 243.225857][ T29] audit: type=1400 audit(1718676214.372:8027): avc: denied { remount } for pid=13486 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.248312][ T29] audit: type=1400 audit(1718676214.372:8028): avc: denied { search } for pid=13486 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 243.276243][ T29] audit: type=1400 audit(1718676214.412:8029): avc: denied { unmount } for pid=12067 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.420959][T13518] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 243.602807][T13543] No such timeout policy "syz0" [ 243.719783][T13552] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 243.824362][ T29] audit: type=1400 audit(1718676214.962:8030): avc: denied { setattr } for pid=13557 comm="syz-executor.1" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 243.923669][T13570] No such timeout policy "syz0" [ 243.960258][T13576] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 244.096146][T13596] No such timeout policy "syz0" [ 244.168838][T13603] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 244.348171][T13622] No such timeout policy "syz0" [ 244.360725][ T29] audit: type=1326 audit(1718676215.523:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff83930a6a7 code=0x7ffc0000 [ 244.385382][ T29] audit: type=1326 audit(1718676215.523:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8392d0379 code=0x7ffc0000 [ 244.409402][ T29] audit: type=1326 audit(1718676215.523:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff83930a6a7 code=0x7ffc0000 [ 244.612514][T13654] No such timeout policy "syz0" [ 245.383622][T13719] __nla_validate_parse: 15 callbacks suppressed [ 245.383640][T13719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.662019][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.856215][T13770] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.945799][T13780] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.489168][T13823] loop2: detected capacity change from 0 to 512 [ 246.510900][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.524431][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.531969][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.539274][T13823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.547067][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.566998][T13823] ext4 filesystem being mounted at /root/syzkaller-testdir3035868183/syzkaller.G9fPqJ/87/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.615897][T13823] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 246.631367][T13821] infiniband syz2: set active [ 246.633423][T13823] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 246.636467][T13821] infiniband syz2: added hsr0 [ 246.636524][ T24] hsr0 speed is unknown, defaulting to 1000 [ 246.648920][T13823] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 246.674179][T13823] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 246.687310][T13821] RDS/IB: syz2: added [ 246.699539][T13821] smc: adding ib device syz2 with port count 1 [ 246.705941][T13821] smc: ib device syz2 port 1 has pnetid [ 246.712121][ T24] hsr0 speed is unknown, defaulting to 1000 [ 246.718463][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.753719][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.789461][T13823] loop2: detected capacity change from 512 to 2 [ 246.789470][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.822256][T13837] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz-executor.2: Failed to commit dquot type 0 [ 246.829201][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.853915][T13837] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 246.881307][T13837] EXT4-fs error (device loop2): ext4_ext_truncate:4432: inode #19: comm syz-executor.2: mark_inode_dirty error [ 246.895332][T13821] hsr0 speed is unknown, defaulting to 1000 [ 246.895390][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.904059][T13837] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 246.930539][T13837] EXT4-fs error (device loop2): ext4_truncate:4162: inode #19: comm syz-executor.2: mark_inode_dirty error [ 246.980545][T12067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 246.997776][T13821] hsr0 speed is unknown, defaulting to 1000 [ 247.010682][T12067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.023497][ T36] __quota_error: 226 callbacks suppressed [ 247.023516][ T36] Quota error (device loop2): remove_tree: Can't read quota data block 2 [ 247.070377][T13821] hsr0 speed is unknown, defaulting to 1000 [ 247.079088][T13828] bio_check_eod: 16 callbacks suppressed [ 247.079105][T13828] kmmpd-loop2: attempt to access beyond end of device [ 247.079105][T13828] loop2: rw=14337, sector=48, nr_sectors = 4 limit=2 [ 247.098288][T13828] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 247.145665][T13821] hsr0 speed is unknown, defaulting to 1000 [ 247.200935][T13821] hsr0 speed is unknown, defaulting to 1000 [ 247.796406][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.809019][T13898] rdma_rxe: rxe_newlink: failed to add hsr0 [ 247.923009][T13917] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.968779][ T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.026506][ T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.102449][ T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.183514][ T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.241938][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.252084][T13945] rdma_rxe: rxe_newlink: failed to add hsr0 [ 249.258656][T13933] hsr0 speed is unknown, defaulting to 1000 [ 249.278854][T13966] loop1: detected capacity change from 0 to 512 [ 249.303159][ T28] bridge_slave_1: left allmulticast mode [ 249.308919][ T28] bridge_slave_1: left promiscuous mode [ 249.314664][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.330091][ T28] bridge_slave_0: left allmulticast mode [ 249.335973][ T28] bridge_slave_0: left promiscuous mode [ 249.341924][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.355120][T13966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.373993][T13966] ext4 filesystem being mounted at /root/syzkaller-testdir297868507/syzkaller.2S21pd/147/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.402067][T13966] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 249.417372][T13966] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 249.417582][T13966] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 249.417691][T13966] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 249.488061][T13966] loop1: detected capacity change from 512 to 2 [ 249.496643][T13981] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 249.504862][T13981] EXT4-fs error (device loop1): ext4_write_dquot:6840: comm syz-executor.1: Failed to commit dquot type 0 [ 249.520883][T13981] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Out of memory [ 249.531005][T13981] EXT4-fs error (device loop1): ext4_ext_truncate:4432: inode #19: comm syz-executor.1: mark_inode_dirty error [ 249.546680][T13981] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Out of memory [ 249.556108][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.565115][T13981] EXT4-fs error (device loop1): ext4_truncate:4162: inode #19: comm syz-executor.1: mark_inode_dirty error [ 249.580977][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.592777][ T28] bond0 (unregistering): Released all slaves [ 249.614131][T12352] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Out of memory [ 249.634684][T12352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.647900][ T36] Quota error (device loop1): remove_tree: Can't read quota data block 2 [ 249.663588][T13969] kmmpd-loop1: attempt to access beyond end of device [ 249.663588][T13969] loop1: rw=14337, sector=48, nr_sectors = 4 limit=2 [ 249.676998][T13969] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 249.756183][T13933] chnl_net:caif_netlink_parms(): no params data found [ 249.776887][ T28] hsr_slave_0: left promiscuous mode [ 249.784135][ T28] hsr_slave_1: left promiscuous mode [ 249.811861][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.819575][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.830203][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.837710][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.848398][ T28] veth1_macvtap: left promiscuous mode [ 249.854055][ T28] veth0_macvtap: left promiscuous mode [ 249.859809][ T28] veth1_vlan: left promiscuous mode [ 249.865180][ T28] veth0_vlan: left promiscuous mode [ 249.999461][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.009427][T14004] rdma_rxe: rxe_newlink: failed to add hsr0 [ 250.021045][ T28] team0 (unregistering): Port device team_slave_1 removed [ 250.033679][ T28] team0 (unregistering): Port device team_slave_0 removed [ 250.097885][T14009] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.135324][T14009] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 250.145559][T14009] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 250.162815][T14009] bond1: (slave vcan1): making interface the new active one [ 250.165066][T14018] loop3: detected capacity change from 0 to 512 [ 250.171550][T14009] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 250.211325][T14018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.229820][T14018] ext4 filesystem being mounted at /root/syzkaller-testdir2976165068/syzkaller.uZYQeJ/316/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.251941][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.256014][T14018] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 250.259543][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.285563][T14018] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 250.306326][T13933] bridge_slave_0: entered allmulticast mode [ 250.307819][T14018] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 250.316295][T13933] bridge_slave_0: entered promiscuous mode [ 250.327515][T14018] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 250.355478][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.362925][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.379967][T13933] bridge_slave_1: entered allmulticast mode [ 250.393466][T13933] bridge_slave_1: entered promiscuous mode [ 250.397473][T14034] loop3: detected capacity change from 512 to 2 [ 250.423631][T14018] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 250.431882][T14018] EXT4-fs error (device loop3): ext4_write_dquot:6840: comm syz-executor.3: Failed to commit dquot type 0 [ 250.447614][T14018] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 250.456639][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.466978][T14018] EXT4-fs error (device loop3): ext4_ext_truncate:4432: inode #19: comm syz-executor.3: mark_inode_dirty error [ 250.480936][T14018] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 250.492505][T14018] EXT4-fs error (device loop3): ext4_truncate:4162: inode #19: comm syz-executor.3: mark_inode_dirty error [ 250.493305][T14002] hsr0 speed is unknown, defaulting to 1000 [ 250.517687][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.538227][T10083] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 250.560115][T10083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.579124][ T50] Quota error (device loop3): remove_tree: Can't read quota data block 2 [ 250.595299][T14023] kmmpd-loop3: attempt to access beyond end of device [ 250.595299][T14023] loop3: rw=14337, sector=48, nr_sectors = 4 limit=2 [ 250.608781][T14023] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 250.630835][T13933] team0: Port device team_slave_0 added [ 250.662265][T13933] team0: Port device team_slave_1 added [ 250.712245][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.719333][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.745468][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.762522][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.772307][T14047] rdma_rxe: rxe_newlink: failed to add hsr0 [ 250.773546][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.785480][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.811458][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.865044][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.888052][T13933] hsr_slave_0: entered promiscuous mode [ 250.894573][T13933] hsr_slave_1: entered promiscuous mode [ 250.901119][T13933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.908787][T13933] Cannot create hsr debugfs directory [ 250.914465][T14002] chnl_net:caif_netlink_parms(): no params data found [ 250.923615][T14060] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.943760][T14060] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 250.954124][T14060] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 250.965614][T14060] bond2: (slave vcan2): making interface the new active one [ 250.973819][T14060] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 251.003693][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.074744][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.156785][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.203641][T14002] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.210845][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.220879][T14002] bridge_slave_0: entered allmulticast mode [ 251.227593][T14002] bridge_slave_0: entered promiscuous mode [ 251.251849][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.259307][T14002] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.267350][T14002] bridge_slave_1: entered allmulticast mode [ 251.284733][T14002] bridge_slave_1: entered promiscuous mode [ 251.325538][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.340752][T14002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.352928][T14075] hsr0 speed is unknown, defaulting to 1000 [ 251.376521][T14002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.386066][ T28] bridge_slave_1: left allmulticast mode [ 251.391777][ T28] bridge_slave_1: left promiscuous mode [ 251.397458][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.399767][T14089] rdma_rxe: rxe_newlink: failed to add hsr0 [ 251.422621][ T28] bridge_slave_0: left allmulticast mode [ 251.428531][ T28] bridge_slave_0: left promiscuous mode [ 251.434306][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.592094][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.603064][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.613605][ T28] bond0 (unregistering): Released all slaves [ 251.650783][ T28] tipc: Left network mode [ 251.658829][T14002] team0: Port device team_slave_0 added [ 251.670279][T14002] team0: Port device team_slave_1 added [ 251.697814][T14109] loop4: detected capacity change from 0 to 256 [ 251.701737][T14002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.711263][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.737573][T14002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.749146][T14002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.756320][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.782274][T14002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.801239][ T29] audit: type=1400 audit(1718676222.966:8259): avc: denied { read } for pid=14108 comm="syz-executor.4" path="socket:[51180]" dev="sockfs" ino=51180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.844349][T14002] hsr_slave_0: entered promiscuous mode [ 251.851275][T14002] hsr_slave_1: entered promiscuous mode [ 251.852546][ T29] audit: type=1400 audit(1718676223.016:8260): avc: denied { setopt } for pid=14108 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.878731][T14002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.886348][T14002] Cannot create hsr debugfs directory [ 251.901941][ T28] hsr_slave_0: left promiscuous mode [ 251.908417][ T28] hsr_slave_1: left promiscuous mode [ 251.914406][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.922148][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.932445][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.940023][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.950166][ T28] veth1_macvtap: left promiscuous mode [ 251.955694][ T28] veth0_macvtap: left promiscuous mode [ 251.961264][ T28] veth1_vlan: left promiscuous mode [ 251.966838][ T28] veth0_vlan: left promiscuous mode [ 252.074903][ T28] team0 (unregistering): Port device team_slave_1 removed [ 252.086671][ T28] team0 (unregistering): Port device team_slave_0 removed [ 252.165619][T14118] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.192095][T14118] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 252.202297][T14118] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 252.214120][T14118] bond1: (slave vcan1): making interface the new active one [ 252.222401][T14118] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 252.240077][T14075] chnl_net:caif_netlink_parms(): no params data found [ 252.249669][T13933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.265536][T13933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.286981][T13933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.306198][T13933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.374244][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.381550][T14075] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.392419][T14075] bridge_slave_0: entered allmulticast mode [ 252.399628][T14075] bridge_slave_0: entered promiscuous mode [ 252.413743][T14075] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.420950][T14075] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.428566][T14075] bridge_slave_1: entered allmulticast mode [ 252.435549][T14075] bridge_slave_1: entered promiscuous mode [ 252.457134][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.469140][T14129] syz2: rxe_newlink: already configured on hsr0 [ 252.482961][T14075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.516858][T14075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.549815][T14075] team0: Port device team_slave_0 added [ 252.577372][T14075] team0: Port device team_slave_1 added [ 252.608294][T14075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.615305][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.641361][T14075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.658259][T14075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.665381][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.691400][T14075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.706096][T14146] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.722837][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.731932][T14148] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 252.742373][T14148] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 252.753651][T14148] bond2: (slave vcan2): making interface the new active one [ 252.762283][T14148] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 252.781192][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.791970][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.805403][T14153] loop4: detected capacity change from 0 to 128 [ 252.818314][ T29] audit: type=1400 audit(1718676223.987:8261): avc: denied { remount } for pid=14152 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 252.849116][T14075] hsr_slave_0: entered promiscuous mode [ 252.857434][T14075] hsr_slave_1: entered promiscuous mode [ 252.863659][T14075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.871581][T14075] Cannot create hsr debugfs directory [ 252.891330][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.898536][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.910602][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.917871][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.010627][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.060169][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.079156][T14002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.088661][T14002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.116478][T14002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.123244][ T29] audit: type=1400 audit(1718676224.287:8262): avc: denied { bind } for pid=14165 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.160746][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.172105][T14002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.234510][ T36] bridge_slave_1: left allmulticast mode [ 253.240394][ T36] bridge_slave_1: left promiscuous mode [ 253.246213][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.254128][ T36] bridge_slave_0: left allmulticast mode [ 253.259940][ T36] bridge_slave_0: left promiscuous mode [ 253.265589][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.369361][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.380907][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.392071][ T36] bond0 (unregistering): Released all slaves [ 253.423499][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.442141][T14002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.468428][T14002] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.479965][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.487106][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.500879][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.508191][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.543359][ T36] hsr_slave_0: left promiscuous mode [ 253.550632][ T36] hsr_slave_1: left promiscuous mode [ 253.560444][ T36] veth1_macvtap: left promiscuous mode [ 253.566275][ T36] veth0_macvtap: left promiscuous mode [ 253.571958][ T36] veth1_vlan: left promiscuous mode [ 253.577493][ T36] veth0_vlan: left promiscuous mode [ 253.679054][ T36] team0 (unregistering): Port device team_slave_1 removed [ 253.690420][ T36] team0 (unregistering): Port device team_slave_0 removed [ 253.808413][T13933] veth0_vlan: entered promiscuous mode [ 253.824102][T13933] veth1_vlan: entered promiscuous mode [ 253.854017][T13933] veth0_macvtap: entered promiscuous mode [ 253.865605][T13933] veth1_macvtap: entered promiscuous mode [ 253.883470][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.894088][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.904080][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.914737][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.924729][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.935255][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.945212][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.956217][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.966198][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.976800][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.988368][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.997097][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.007609][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.017470][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.027952][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.037883][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.048474][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.058575][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.069123][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.079346][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.089890][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.110356][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.124541][T13933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.133426][T13933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.142270][T13933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.151063][T13933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.161994][T14194] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 254.182572][T14002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.193931][T14196] bond3: (slave vcan3): The slave device specified does not support setting the MAC address [ 254.204233][T14196] bond3: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 254.218100][T14196] bond3: (slave vcan3): making interface the new active one [ 254.222220][T14198] loop4: detected capacity change from 0 to 128 [ 254.226673][T14196] bond3: (slave vcan3): Enslaving as an active interface with an up link [ 254.278599][T14075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.313560][T14075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.331412][T14075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.360189][T14075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.444532][T14002] veth0_vlan: entered promiscuous mode [ 254.473284][T14002] veth1_vlan: entered promiscuous mode [ 254.519807][T14075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.531081][T14002] veth0_macvtap: entered promiscuous mode [ 254.544764][T14002] veth1_macvtap: entered promiscuous mode [ 254.566507][T14075] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.596547][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.603982][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.614339][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.621481][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.635002][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.645661][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.655598][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.666151][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.676463][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.687442][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.697351][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.707984][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.717822][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.728332][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.738226][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.748755][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.761146][T14002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.779386][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.789951][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.799863][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.810373][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.820451][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.831077][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.841198][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.851710][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.862050][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.872982][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.882857][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.894011][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.907189][T14002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.919250][T14002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.928157][T14002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.937084][T14002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.945893][T14002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.072143][T14075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.124836][T14075] veth0_vlan: entered promiscuous mode [ 255.137578][T14075] veth1_vlan: entered promiscuous mode [ 255.173106][T14075] veth0_macvtap: entered promiscuous mode [ 255.193510][T14075] veth1_macvtap: entered promiscuous mode [ 255.202059][T14262] loop1: detected capacity change from 0 to 256 [ 255.214120][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.224789][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.234671][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.245146][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.255487][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.266268][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.276377][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.286925][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.296790][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.307495][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.317347][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.328829][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.338696][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.349231][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.362988][T14075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.371816][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.382404][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.392380][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.402926][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.412772][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.423367][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.433306][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.444100][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.454090][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.465303][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.475349][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.485793][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.495753][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.506586][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.522717][T14075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.547003][T14075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.556490][T14075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.565423][T14075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.574282][T14075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.593855][ T29] audit: type=1400 audit(1718676226.758:8263): avc: denied { ioctl } for pid=14267 comm="syz-executor.2" path="socket:[52963]" dev="sockfs" ino=52963 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.742560][T14288] loop1: detected capacity change from 0 to 128 [ 256.000112][T14310] loop4: detected capacity change from 0 to 256 [ 258.868366][ T931] bridge_slave_1: left allmulticast mode [ 258.874107][ T931] bridge_slave_1: left promiscuous mode [ 258.879876][ T931] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.887860][ T931] bridge_slave_0: left allmulticast mode [ 258.893656][ T931] bridge_slave_0: left promiscuous mode [ 258.899372][ T931] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.907782][ T931] bridge_slave_1: left allmulticast mode [ 258.913556][ T931] bridge_slave_1: left promiscuous mode [ 258.919203][ T931] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.927187][ T931] bridge_slave_0: left allmulticast mode [ 258.932824][ T931] bridge_slave_0: left promiscuous mode [ 258.938516][ T931] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.245995][ T931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.257078][ T931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.268234][ T931] bond0 (unregistering): Released all slaves [ 259.277867][ T931] bond1 (unregistering): Released all slaves [ 259.287815][ T931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.298461][ T931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.309294][ T931] bond0 (unregistering): Released all slaves [ 259.319253][ T931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.330733][ T931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.342613][ T931] bond0 (unregistering): Released all slaves [ 259.352457][ T931] bond1 (unregistering): Released all slaves [ 259.534014][ T931] hsr_slave_0: left promiscuous mode [ 259.539863][ T931] hsr_slave_1: left promiscuous mode [ 259.546598][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.554262][ T931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.561771][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.569312][ T931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.578789][ T931] hsr_slave_0: left promiscuous mode [ 259.584504][ T931] hsr_slave_1: left promiscuous mode [ 259.590164][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.597761][ T931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.605563][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.613038][ T931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.622161][ T931] hsr_slave_0: left promiscuous mode [ 259.628049][ T931] hsr_slave_1: left promiscuous mode [ 259.633937][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.641372][ T931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.648878][ T931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.656927][ T931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.668913][ T931] team0: left promiscuous mode [ 259.674008][ T931] team_slave_0: left promiscuous mode [ 259.679408][ T931] team_slave_1: left promiscuous mode [ 259.684996][ T931] veth1_macvtap: left promiscuous mode [ 259.690544][ T931] veth0_macvtap: left promiscuous mode [ 259.696173][ T931] veth1_vlan: left promiscuous mode [ 259.701467][ T931] veth0_vlan: left promiscuous mode [ 259.707835][ T931] veth1_macvtap: left promiscuous mode [ 259.713499][ T931] veth0_macvtap: left promiscuous mode [ 259.719034][ T931] veth1_vlan: left promiscuous mode [ 259.724269][ T931] veth0_vlan: left promiscuous mode [ 259.730311][ T931] veth1_macvtap: left promiscuous mode [ 259.736054][ T931] veth0_macvtap: left promiscuous mode [ 259.741657][ T931] veth1_vlan: left promiscuous mode [ 259.746961][ T931] veth0_vlan: left promiscuous mode [ 259.965194][ T931] team0 (unregistering): Port device team_slave_1 removed [ 259.976405][ T931] team0 (unregistering): Port device team_slave_0 removed [ 260.057379][ T931] team0 (unregistering): Port device team_slave_1 removed [ 260.068122][ T931] team0 (unregistering): Port device team_slave_0 removed [ 260.152766][ T931] team0 (unregistering): Port device team_slave_1 removed [ 260.771997][ T931] IPVS: stop unused estimator thread 0... [ 260.778843][ T931] IPVS: stop unused estimator thread 0... [ 333.697428][ T0] ================================================================== [ 333.705733][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 333.713896][ T0] [ 333.716211][ T0] write to 0xffff888237d205e4 of 1 bytes by task 0 on cpu 1: [ 333.723574][ T0] __tmigr_cpu_activate+0x55/0x1f0 [ 333.728684][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 333.733543][ T0] timer_clear_idle+0x28/0x100 [ 333.738300][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 333.744195][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 333.749227][ T0] do_idle+0x1ee/0x230 [ 333.753304][ T0] cpu_startup_entry+0x25/0x30 [ 333.758184][ T0] start_secondary+0x94/0xa0 [ 333.763578][ T0] common_startup_64+0x12c/0x137 [ 333.768652][ T0] [ 333.770984][ T0] read to 0xffff888237d205e4 of 1 bytes by task 0 on cpu 0: [ 333.778521][ T0] tmigr_update_events+0x41d/0x5d0 [ 333.783641][ T0] __tmigr_cpu_deactivate+0x283/0x470 [ 333.789022][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 333.794142][ T0] __get_next_timer_interrupt+0x137/0x530 [ 333.799864][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 333.805424][ T0] tick_nohz_idle_stop_tick+0x15b/0x640 [ 333.810984][ T0] do_idle+0x178/0x230 [ 333.815064][ T0] cpu_startup_entry+0x25/0x30 [ 333.820193][ T0] rest_init+0xef/0xf0 [ 333.824276][ T0] start_kernel+0x581/0x5e0 [ 333.828869][ T0] x86_64_start_reservations+0x2a/0x30 [ 333.834339][ T0] x86_64_start_kernel+0x94/0xa0 [ 333.839309][ T0] common_startup_64+0x12c/0x137 [ 333.844279][ T0] [ 333.846615][ T0] value changed: 0x00 -> 0x01 [ 333.851279][ T0] [ 333.853607][ T0] Reported by Kernel Concurrency Sanitizer on: [ 333.859862][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc4-syzkaller-00007-g6226e74900d7 #0 [ 333.869738][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 333.879882][ T0] ==================================================================