last executing test programs: 27.378016657s ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f00000008c0)="1c", 0x1}], 0x1) 27.262496394s ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x20000008}, 0x48) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$sock_int(r6, 0x1, 0x7, 0x0, &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) 27.137592713s ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpgrp(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x29) r5 = getpgrp(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r5, r1, 0x7, r2, &(0x7f0000000000)={r3, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d}, {0x6}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 27.076284953s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x9c) 27.047008597s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="305865001c00030d000000000000000007000000", @ANYRES32, @ANYBLOB="200000000a0002000180c200000000000600050000000000950b146aff6eee3e29bec882066f69e5fce1f08a7a647561cf3dcdf21c95bcac3e0360363f5d11f62f3cf2448d90d3663d23e0093671e7107ccd10c93de17d6f823d9af7bd427a6c5f510da1567add21360c6e8fdf0e3228350fe583488c55c20d375372f7fa1e6e992d7402c48fbb4a85481cd14d670a4f6b99721a47944c310b824d483b683777069ef6a75bf205d0a45aa7c4aa2eb4826e4a3769842431"], 0x30}}, 0x0) 27.02856621s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r1, &(0x7f00000000c0)=""/29, 0x1d) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 5.059654819s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) 3.54985287s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f0000003180)) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000002c0)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}, @printk={@u}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0xa, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x110, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x3ff, 0xff, 0x1, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3, 0x2}, {0x0, 0x4, 0x4}, {0x0, 0x3}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 3.497595537s ago: executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x21, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x7}}]}}}]}, 0x78}}, 0x0) 3.468099612s ago: executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x94}]}) 3.433751847s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1c}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@local, r2}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000380)={0xa, 0x0, 0xa000000, @remote}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 3.419438839s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x28}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3}}]}}}]}, 0x58}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @local}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4e, {0x2, 0x4e20, @local}, 'veth1_virt_wifi\x00'}) sendmmsg$inet(r0, &(0x7f0000000d80), 0x0, 0x0) 3.392268553s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x48000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x3, 0x0}, 0x0) 2.345696253s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) 2.330744695s ago: executing program 2: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000003c0)=0x70, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f00000000c0)}, 0x20) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r5, 0x6, 0x9, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1a000) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="56a2f8fac12fe62412557d0b93fc068856edc93245b17f26836f3a849ac0bc787d12f69f827ada300c49140da769dbceb28e7084b0ce5189570095c98f76d297fe789cbf1cd1153469e8b01ab14fedbe", 0x50}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$eJzs289rHFUcAPDv7CataVMTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTbPpJlvdzwcmeW/mLe99d+btvjdvJ4CeNZr+SSIGI+L3iBiqZusLjFb/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvzTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmR0s4NPlssdrq67DtSkk74uNoS2FKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNRm/Y2LJBvHP4Xr2wpsi9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96Tsejfm+YnN6njh1d++6LVsdrxX7ql9edjwawd1/v21r9mdnpp+k5irnXjk4iRvmbxJ2srAUlEHI6IkW3WMf/0N0dbHbt9/JvowDpT+euIp6rnfyUa4s8lm69PTtwTpbnjE/lVsdEvv159s1X9dxR/B6Tnf1/T638t/uGkdr12sf06rv7xecs5zXav/z3J23X7PpxeWro0GbEneb3a6Nr9Uw3lptbLp/GPHWve/w/G+jtxJCLSi/jhiHgkIh7N2v5YRDweEcc2if+nl594r27H2GAb8e+sNP7Zts7/emJPNO5pniie//G7ukqHo4340/N/spIay/Zs5fNvK+3a3tUMAAAA/z2FiBiMpDC+li4Uxserv+E/FPsKpYXFpWfOLnxwcbb6jMBw9BfyO11DNfdDJ7NpfZ6fasifyO4bf1kcqOTHZxZKs90OHnrc/hb9P/VnsdutA3ac57Wgd+n/0Lv0f+hd+j/0rib9f6Ab7QB2X7Pv/4+70A5g9zX0f8t+0EPM/6F36f/Qu/R/6EmLA3H7h+QlJDYkonBXNENihxLd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8DAAD//ygv5wk=") (async) r6 = gettid() (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x408c5333, &(0x7f0000000500)) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0x80045300, 0x0) (async, rerun: 32) tkill(r6, 0x7) 2.303305849s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1b, 0x100) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x45, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2}, 0x48) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r2}, 0x18) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00070c000000000000000007000000", @ANYRES32=r3, @ANYBLOB="9af93ea60a0002"], 0x30}}, 0x0) 2.270113974s ago: executing program 2: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mremap(&(0x7f0000593000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000e3d000/0x4000)=nil) 2.254635907s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000040), 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x1f, 0x3, 0x5, 0x0, 0x1, 0xa50, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x6a1ff4a14dbf629a, @perf_bp={&(0x7f0000000240), 0x6}, 0x2, 0x9424, 0x1, 0x5, 0x4, 0x3, 0x8, 0x0, 0x7, 0x0, 0x4}, r3, 0x5, r1, 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000010000), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000100c0)={0x0, 0x0, &(0x7f0000010080)={&(0x7f0000010040)={0x24, r6, 0xe11, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x5434, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 1.022050495s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) flistxattr(r1, &(0x7f00000000c0)=""/146, 0x92) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x500}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4203, r3, 0x0, &(0x7f0000000000)) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x3, 0x6, 0x8, r3}) 1.002132788s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x100, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x8000, 0x20, 0x1, 0x8, {{0x15, 0x4, 0x3, 0x3, 0x54, 0x64, 0x0, 0x6, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0xf, [{@remote, 0x39c}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x8001}, {@local, 0x8}, {@remote, 0x86f8}, {@multicast1, 0x8}, {@multicast1, 0x7}, {@private=0xa010100, 0x1}]}, @end]}}}}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00001e4000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/dccp', 0x80000, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r7, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) alarm(0x7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000012000000080006000300000018000180140002006e657464657673696d30000000000000080007"], 0x3c}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0xe, r3, 0x21, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x4}, {0x4, 0x7}, {0xffff, 0x8}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1ff}}}]}, 0x44}}, 0x0) 962.814734ms ago: executing program 3: io_uring_setup(0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x0, 0x5}, 0x10) 944.265047ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80) (async) r1 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$TIOCSETD(r6, 0x5409, &(0x7f00000000c0)) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x784, &(0x7f00000007c0)="$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") (async) capset(0x0, &(0x7f0000000140)={0x40008}) (async) r7 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ppoll(&(0x7f0000000080)=[{r8}, {}], 0x2, 0x0, 0x0, 0x0) (async) splice(0xffffffffffffffff, &(0x7f0000000380), r1, &(0x7f0000000180)=0x7, 0x5, 0x5) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) (async) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f00000003c0)=r0, 0x4) (async) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x80, &(0x7f0000001900)=ANY=[], 0xfd, 0x22e, &(0x7f0000000c00)="$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") (async) openat$cgroup_ro(r4, &(0x7f0000000400)='devices.list\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0xf000) 930.021119ms ago: executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x34000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000300)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040), 0x4) listen(r1, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001900010000000000000000000a4c0000", @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaaa80000"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000240)=0x8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) 93.168556ms ago: executing program 4: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000dc0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @link_id}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0xffffffff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) timerfd_create(0x6, 0x80800) 81.703798ms ago: executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000000000000000000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078000009f700050200"/32], 0x4e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="0000000014000100fc02000000000000000000000000000008000f0000000000"], 0x38}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x4) setns(r6, 0x2000000) ftruncate(0xffffffffffffffff, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") 77.907419ms ago: executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mremap(&(0x7f0000593000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000e3d000/0x4000)=nil) 56.713342ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x6}, @jmp={0x6, 0x0, 0x6}]}, &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r2}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) get_mempolicy(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, r5, &(0x7f00000003c0)) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x11, 0x0, 0x0, 0x0, 0x0, 0x111, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) r12 = open(&(0x7f0000000140)='./file0\x00', 0x1c9442, 0x0) ftruncate(r12, 0x200002) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 28.351836ms ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x5000000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x0) 13.099469ms ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIONCLEX(r1, 0x5450) 0s ago: executing program 4: unshare(0x60400) (async, rerun: 32) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async, rerun: 64) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/4096) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): 6.757492][ T29] audit: type=1400 audit(1717133988.669:9729): avc: denied { mounton } for pid=4302 comm="syz-executor.0" path="/root/syzkaller-testdir4062420031/syzkaller.Do9ioI/26/file0/file0" dev="loop0" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 46.819026][ T29] audit: type=1400 audit(1717133988.729:9730): avc: denied { listen } for pid=4305 comm="syz-executor.3" lport=32970 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.863052][ T29] audit: type=1400 audit(1717133988.769:9731): avc: denied { getopt } for pid=4305 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.546709][ T3181] kernel write not supported for file bpf-prog (pid: 3181 comm: kworker/0:3) [ 47.640587][ T29] audit: type=1400 audit(1717133989.549:9732): avc: denied { read } for pid=4330 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.667801][ T4331] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 47.676231][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.708827][ T4331] loop2: detected capacity change from 0 to 512 [ 47.725251][ T4331] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 47.734231][ T4331] EXT4-fs (loop2): inodes count not valid: 32 vs 800 [ 47.796788][ T4331] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 47.810541][ T4331] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.918237][ T3181] kernel write not supported for file bpf-prog (pid: 3181 comm: kworker/0:3) [ 47.918747][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 47.966182][ T4371] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 47.981590][ T4371] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.999790][ T4371] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 48.015849][ T4371] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.029309][ T4371] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.038865][ T4380] usb usb9: usbfs: process 4380 (syz-executor.0) did not claim interface 0 before use [ 48.064767][ T4383] bond0: option ad_select: unable to set because the bond device is up [ 48.146177][ T4388] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.155788][ T4388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.182743][ T4394] lo speed is unknown, defaulting to 1000 [ 48.193646][ T4396] loop0: detected capacity change from 0 to 512 [ 48.195399][ T4394] lo speed is unknown, defaulting to 1000 [ 48.207375][ T4394] lo speed is unknown, defaulting to 1000 [ 48.275920][ C0] hrtimer: interrupt took 109473 ns [ 48.302950][ T4394] infiniband syz0: set active [ 48.310809][ T4394] infiniband syz0: added lo [ 48.316908][ T8] lo speed is unknown, defaulting to 1000 [ 48.333258][ T4394] RDS/IB: syz0: added [ 48.337533][ T4394] smc: adding ib device syz0 with port count 1 [ 48.343761][ T4394] smc: ib device syz0 port 1 has pnetid [ 48.349901][ T3177] lo speed is unknown, defaulting to 1000 [ 48.355675][ T4394] lo speed is unknown, defaulting to 1000 [ 48.442066][ T4394] lo speed is unknown, defaulting to 1000 [ 48.454021][ T4413] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.463571][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.485004][ T3208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.496997][ T4413] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.506943][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.516300][ T4413] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.525853][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.546047][ T4413] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.555611][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.565712][ T4413] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.575335][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.585575][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.594355][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.604943][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.614786][ T3208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.626737][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.635190][ T4413] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 48.672027][ T4394] lo speed is unknown, defaulting to 1000 [ 48.690218][ T3208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.740667][ T4426] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 48.761363][ T3208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.858309][ T4394] lo speed is unknown, defaulting to 1000 [ 48.919783][ T3208] bridge_slave_1: left allmulticast mode [ 48.925506][ T3208] bridge_slave_1: left promiscuous mode [ 48.931280][ T3208] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.952253][ T3208] bridge_slave_0: left allmulticast mode [ 48.958484][ T3208] bridge_slave_0: left promiscuous mode [ 48.964178][ T3208] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.078278][ T3208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.089216][ T3208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.099648][ T3208] bond0 (unregistering): Released all slaves [ 49.111306][ T4446] dummy0: entered promiscuous mode [ 49.118014][ T4446] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.127879][ T4437] bridge0: port 3(team0) entered disabled state [ 49.134398][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.141596][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.152566][ T4394] lo speed is unknown, defaulting to 1000 [ 49.168734][ T4450] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.199336][ T4450] team0: entered promiscuous mode [ 49.204501][ T4450] team_slave_0: entered promiscuous mode [ 49.210499][ T4450] team_slave_1: entered promiscuous mode [ 49.224771][ T4450] bond0: (slave team0): Enslaving as an active interface with an up link [ 49.268958][ T3208] hsr_slave_0: left promiscuous mode [ 49.277613][ T3208] hsr_slave_1: left promiscuous mode [ 49.278457][ T4463] loop0: detected capacity change from 0 to 256 [ 49.289571][ T3208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.297103][ T3208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.307160][ T3208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.314683][ T3208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.325262][ T3208] veth1_macvtap: left promiscuous mode [ 49.329620][ T4466] loop3: detected capacity change from 0 to 128 [ 49.330756][ T3208] veth0_macvtap: left promiscuous mode [ 49.339146][ T4466] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 49.342494][ T3208] veth1_vlan: left promiscuous mode [ 49.356890][ T3208] veth0_vlan: left promiscuous mode [ 49.418101][ T4470] bio_check_eod: 34 callbacks suppressed [ 49.418129][ T4470] syz-executor.3: attempt to access beyond end of device [ 49.418129][ T4470] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 49.423879][ T3208] pim6reg9 (unregistering): left allmulticast mode [ 49.438801][ T4470] syz-executor.3: attempt to access beyond end of device [ 49.438801][ T4470] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 49.488829][ T3208] team0 (unregistering): Port device team_slave_1 removed [ 49.499758][ T3208] team0 (unregistering): Port device team_slave_0 removed [ 49.560572][ T4440] lo speed is unknown, defaulting to 1000 [ 49.653275][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 49.710251][ T4497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 49.720072][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.727339][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.734526][ T4440] bridge_slave_0: entered allmulticast mode [ 49.741034][ T4440] bridge_slave_0: entered promiscuous mode [ 49.749174][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.756370][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.757889][ T4440] bridge_slave_1: entered allmulticast mode [ 49.771604][ T4440] bridge_slave_1: entered promiscuous mode [ 49.808065][ T4503] loop3: detected capacity change from 0 to 512 [ 49.810591][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.815973][ T4503] ext4: Unknown parameter 'fowner<00000000000000000000' [ 49.835742][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.856035][ T4440] team0: Port device team_slave_0 added [ 49.862720][ T4440] team0: Port device team_slave_1 added [ 49.879927][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.887254][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.913433][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.926654][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.933978][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.960120][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.990357][ T4440] hsr_slave_0: entered promiscuous mode [ 49.996998][ T4440] hsr_slave_1: entered promiscuous mode [ 50.004118][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.011847][ T4440] Cannot create hsr debugfs directory [ 50.013606][ T4511] loop3: detected capacity change from 0 to 128 [ 50.025184][ T4511] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 50.044821][ T4511] syz-executor.3: attempt to access beyond end of device [ 50.044821][ T4511] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 50.058704][ T4511] syz-executor.3: attempt to access beyond end of device [ 50.058704][ T4511] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 50.268227][ T4440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.276644][ T4440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.285324][ T4440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.294368][ T4440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.308466][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.315999][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.323591][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.331734][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.368563][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.383287][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.393255][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.407234][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.418038][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.421547][ T4521] loop0: detected capacity change from 0 to 1764 [ 50.425175][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.447994][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.456396][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.482087][ T4440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.492969][ T4440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.546637][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.613781][ T4440] veth0_vlan: entered promiscuous mode [ 50.627423][ T4440] veth1_vlan: entered promiscuous mode [ 50.645716][ T4440] veth0_macvtap: entered promiscuous mode [ 50.653847][ T4440] veth1_macvtap: entered promiscuous mode [ 50.667749][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.678676][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.689139][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.699965][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.710157][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.721041][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.730999][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.741589][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.753413][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.771271][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.781854][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.791721][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.802273][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.812160][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.822792][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.832714][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.843220][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.861258][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.876745][ T4542] team0: left allmulticast mode [ 50.881755][ T4542] team_slave_0: left allmulticast mode [ 50.887451][ T4542] team_slave_1: left allmulticast mode [ 50.892986][ T4542] team0: left promiscuous mode [ 50.898234][ T4542] team_slave_0: left promiscuous mode [ 50.903769][ T4542] team_slave_1: left promiscuous mode [ 50.909376][ T4542] bridge0: port 3(team0) entered disabled state [ 50.917466][ T4542] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.926541][ T4542] bond0: (slave team0): Enslaving as an active interface with an up link [ 50.938824][ T4440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947697][ T4440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.956571][ T4440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.965518][ T4440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.998101][ T4550] loop0: detected capacity change from 0 to 128 [ 51.006738][ T4550] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 51.026003][ T4550] syz-executor.0: attempt to access beyond end of device [ 51.026003][ T4550] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 51.046782][ T4550] syz-executor.0: attempt to access beyond end of device [ 51.046782][ T4550] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 51.084627][ T4553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.128929][ T4553] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.150213][ T4553] bond0: (slave team0): Enslaving as an active interface with an up link [ 51.292901][ T4599] loop0: detected capacity change from 0 to 128 [ 51.301598][ T4599] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 51.345430][ T4599] syz-executor.0: attempt to access beyond end of device [ 51.345430][ T4599] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 51.363949][ T4599] syz-executor.0: attempt to access beyond end of device [ 51.363949][ T4599] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 51.422153][ T4611] syzkaller0: entered promiscuous mode [ 51.427735][ T4611] syzkaller0: entered allmulticast mode [ 51.428540][ T4614] loop3: detected capacity change from 0 to 2048 [ 51.491507][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 51.491522][ T29] audit: type=1326 audit(1717133993.399:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.507829][ T4614] loop3: unable to read partition table [ 51.535386][ T29] audit: type=1326 audit(1717133993.439:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.536432][ T4614] loop3: partition table beyond EOD, [ 51.559499][ T29] audit: type=1326 audit(1717133993.439:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.559526][ T29] audit: type=1326 audit(1717133993.439:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.564922][ T4614] truncated [ 51.589472][ T29] audit: type=1326 audit(1717133993.439:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.589497][ T29] audit: type=1326 audit(1717133993.439:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 51.613709][ T4614] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 51.616868][ T29] audit: type=1326 audit(1717133993.439:9892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3546a8a667 code=0x7ffc0000 [ 51.697658][ T29] audit: type=1326 audit(1717133993.439:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3546a50329 code=0x7ffc0000 [ 51.697681][ T29] audit: type=1326 audit(1717133993.439:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3546a8a667 code=0x7ffc0000 [ 51.697702][ T29] audit: type=1326 audit(1717133993.439:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3546a50329 code=0x7ffc0000 [ 51.878012][ T4664] 9pnet_fd: Insufficient options for proto=fd [ 51.928666][ T4676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 51.935464][ T4676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.943252][ T4676] vhci_hcd vhci_hcd.0: Device attached [ 52.254761][ T3180] usb 2-1: SetAddress Request (2) to port 0 [ 52.261022][ T3180] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 52.937544][ T4723] loop2: detected capacity change from 0 to 4096 [ 52.947198][ T4723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.969936][ T4723] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 82 with max blocks 2 with error 28 [ 52.982527][ T4723] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.982527][ T4723] [ 52.992277][ T4723] EXT4-fs (loop2): Total free blocks count 0 [ 52.998317][ T4723] EXT4-fs (loop2): Free/Dirty block details [ 53.004219][ T4723] EXT4-fs (loop2): free_blocks=0 [ 53.009197][ T4723] EXT4-fs (loop2): dirty_blocks=0 [ 53.014403][ T4723] EXT4-fs (loop2): Block reservation details [ 53.020541][ T4723] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 53.045310][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.188760][ T4732] __nla_validate_parse: 29 callbacks suppressed [ 53.188776][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.276079][ T4677] vhci_hcd: connection reset by peer [ 53.289043][ T2452] vhci_hcd: stop threads [ 53.293515][ T2452] vhci_hcd: release socket [ 53.298060][ T2452] vhci_hcd: disconnect device [ 53.361809][ T4744] loop0: detected capacity change from 0 to 512 [ 53.370851][ T4744] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.380023][ T4744] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 53.388376][ T4744] EXT4-fs (loop0): fragment/cluster size (4096) != block size (1024) [ 53.417489][ T4748] loop2: detected capacity change from 0 to 128 [ 53.427169][ T4748] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.429754][ T4750] loop3: detected capacity change from 0 to 1024 [ 53.442357][ T4748] vhci_hcd: invalid port number 219 [ 53.447857][ T4748] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 53.466766][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 53.480248][ T4752] vxlan0: entered promiscuous mode [ 53.485679][ T4752] vxlan0: entered allmulticast mode [ 53.519609][ T4755] can: request_module (can-proto-0) failed. [ 53.544852][ T4760] 9pnet_fd: Insufficient options for proto=fd [ 53.586744][ T4772] 9pnet_fd: p9_fd_create_unix (4772): problem connecting socket: ./file0: -111 [ 53.755562][ T4816] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 53.766403][ T4817] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 53.894277][ T4837] validate_nla: 44 callbacks suppressed [ 53.894482][ T4837] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 53.918856][ T4837] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 53.934999][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 53.986471][ T4851] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 285212781 (only 8 groups) [ 54.119757][ T4855] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 54.184303][ T4870] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 54.236883][ T4879] loop0: detected capacity change from 0 to 512 [ 54.244402][ T4879] EXT4-fs: test_dummy_encryption option not supported [ 54.287729][ T4879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4879 comm=syz-executor.0 [ 54.301519][ T4885] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 54.322650][ T4879] loop0: detected capacity change from 0 to 512 [ 54.335983][ T4885] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 54.379521][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 54.432057][ T4908] loop2: detected capacity change from 0 to 128 [ 54.442935][ T4908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.447514][ T4904] dvmrp0: entered allmulticast mode [ 54.457045][ T4908] ext4 filesystem being mounted at /root/syzkaller-testdir3393093023/syzkaller.yDWerV/72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.494466][ T4915] loop0: detected capacity change from 0 to 512 [ 54.507131][ T4915] EXT4-fs: Ignoring removed bh option [ 54.513958][ T4915] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.523785][ T3824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.537374][ T4915] EXT4-fs (loop0): 1 truncate cleaned up [ 54.543828][ T4915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.604617][ T4914] loop0: detected capacity change from 512 to 64 [ 54.634297][ T3845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.730102][ T4939] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 54.745970][ T4939] infiniband syz0: set down [ 54.750961][ T24] lo speed is unknown, defaulting to 1000 [ 54.757007][ T24] lo speed is unknown, defaulting to 1000 [ 54.759384][ T4940] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 54.774521][ T4940] infiniband syz0: set active [ 54.781238][ T4940] infiniband syz0: set active [ 54.787467][ T24] lo speed is unknown, defaulting to 1000 [ 54.793266][ T3182] lo speed is unknown, defaulting to 1000 [ 54.799477][ T3182] lo speed is unknown, defaulting to 1000 [ 54.826892][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 54.847017][ T4955] vlan2: entered promiscuous mode [ 54.857951][ T4963] loop3: detected capacity change from 0 to 512 [ 54.865894][ T4963] ext4: Unknown parameter 'fsuuid' [ 54.935174][ T4963] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 55.009929][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 55.192083][ T5006] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 55.272068][ T5008] loop3: detected capacity change from 0 to 512 [ 55.287185][ T5008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.300085][ T5008] ext4 filesystem being mounted at /root/syzkaller-testdir1306406392/syzkaller.kmWna9/151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.304261][ T5014] loop0: detected capacity change from 0 to 512 [ 55.324037][ T5014] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 55.338479][ T5014] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 55.353612][ T5014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.428167][ T3118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.439105][ T3845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.495983][ T5021] vlan0: entered allmulticast mode [ 55.496866][ T5020] loop0: detected capacity change from 0 to 512 [ 55.509685][ T5020] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 55.509857][ T5021] veth0_vlan: entered allmulticast mode [ 55.544991][ T5023] loop2: detected capacity change from 0 to 256 [ 55.564437][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 55.627032][ T5038] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 55.635254][ T5038] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 55.643340][ T5038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 55.651557][ T5038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 55.659861][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.699163][ T5042] loop3: detected capacity change from 0 to 512 [ 55.707465][ T5042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.732678][ T5042] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.750955][ T5042] EXT4-fs (loop3): mount failed [ 55.756788][ T5047] loop2: detected capacity change from 0 to 512 [ 55.766729][ T5047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f842e09d, mo2=0002] [ 55.775199][ T5047] System zones: 1-12 [ 55.779597][ T5047] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 2898879121 (level 0) [ 55.797787][ T5037] tipc: Can't bind to reserved service type 0 [ 55.807768][ T5047] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 84213760 (level 0) [ 55.823130][ T5047] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 7 (level 2) [ 55.870321][ T5047] EXT4-fs (loop2): 1 truncate cleaned up [ 55.881722][ T5047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.926831][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.996201][ T5063] loop0: detected capacity change from 0 to 512 [ 56.005319][ T5063] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 56.018670][ T5063] EXT4-fs (loop0): Remounting filesystem read-only [ 56.025891][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.039574][ T5063] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 56.046875][ T5063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.097756][ T5063] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.126364][ T3221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.167414][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 56.180238][ T3221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.232101][ T5082] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.243110][ T3221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.288027][ T3221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.302201][ T5075] lo speed is unknown, defaulting to 1000 [ 56.358664][ T3221] bridge_slave_1: left allmulticast mode [ 56.364461][ T3221] bridge_slave_1: left promiscuous mode [ 56.370293][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.379365][ T3221] bridge_slave_0: left allmulticast mode [ 56.385262][ T3221] bridge_slave_0: left promiscuous mode [ 56.391286][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.501491][ T3221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.514876][ T3221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.528775][ T3221] bond0 (unregistering): Released all slaves [ 56.533595][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 56.533610][ T29] audit: type=1400 audit(1717133998.439:10751): avc: denied { create } for pid=5093 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.661778][ T3221] hsr_slave_0: left promiscuous mode [ 56.676358][ T3221] hsr_slave_1: left promiscuous mode [ 56.683942][ T3221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.691917][ T3221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.712956][ T3221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.713330][ T29] audit: type=1400 audit(1717133998.619:10752): avc: denied { sqpoll } for pid=5103 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.720467][ T3221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.749335][ T3221] veth1_macvtap: left promiscuous mode [ 56.755159][ T3221] veth0_macvtap: left promiscuous mode [ 56.760878][ T3221] veth1_vlan: left promiscuous mode [ 56.766298][ T3221] veth0_vlan: left promiscuous mode [ 56.947573][ T3221] team0 (unregistering): Port device team_slave_1 removed [ 56.970428][ T3221] team0 (unregistering): Port device team_slave_0 removed [ 57.066318][ T5075] chnl_net:caif_netlink_parms(): no params data found [ 57.157167][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.164381][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.180840][ T5075] bridge_slave_0: entered allmulticast mode [ 57.187959][ T5075] bridge_slave_0: entered promiscuous mode [ 57.200044][ T5123] sctp: [Deprecated]: syz-executor.3 (pid 5123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.200044][ T5123] Use struct sctp_sack_info instead [ 57.217362][ T5125] lo speed is unknown, defaulting to 1000 [ 57.223408][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.230610][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.241169][ T5075] bridge_slave_1: entered allmulticast mode [ 57.252283][ T5075] bridge_slave_1: entered promiscuous mode [ 57.278686][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.314409][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.337085][ T5148] loop3: detected capacity change from 0 to 256 [ 57.351940][ T29] audit: type=1400 audit(1717133999.259:10753): avc: denied { mount } for pid=5147 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.376018][ T3180] usb 2-1: device descriptor read/8, error -110 [ 57.379054][ T29] audit: type=1326 audit(1717133999.289:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.406661][ T29] audit: type=1326 audit(1717133999.289:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.432809][ T29] audit: type=1326 audit(1717133999.289:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.457296][ T29] audit: type=1326 audit(1717133999.319:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.481975][ T29] audit: type=1326 audit(1717133999.319:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.516214][ T29] audit: type=1326 audit(1717133999.419:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 57.540390][ T29] audit: type=1326 audit(1717133999.419:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb161f18667 code=0x7ffc0000 [ 57.566564][ T3180] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.594622][ T3180] usb 2-1: enqueue for inactive port 0 [ 57.600140][ T3180] usb 2-1: enqueue for inactive port 0 [ 57.606413][ T3180] usb 2-1: enqueue for inactive port 0 [ 57.613491][ T5075] team0: Port device team_slave_0 added [ 57.632251][ T5155] lo speed is unknown, defaulting to 1000 [ 57.639848][ T5075] team0: Port device team_slave_1 added [ 57.684172][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.691444][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.717714][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.733273][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.740406][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.766661][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.792000][ T5166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.812087][ T5166] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 57.818801][ T5166] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.826537][ T5166] vhci_hcd vhci_hcd.0: Device attached [ 57.828920][ T5075] hsr_slave_0: entered promiscuous mode [ 57.843605][ T5075] hsr_slave_1: entered promiscuous mode [ 57.851613][ T5166] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 57.858225][ T5166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.865731][ T5166] vhci_hcd vhci_hcd.0: Device attached [ 57.882504][ T5166] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 57.889159][ T5166] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.896863][ T5166] vhci_hcd vhci_hcd.0: Device attached [ 57.920757][ T5171] vhci_hcd: connection closed [ 57.920843][ T5168] vhci_hcd: connection closed [ 57.920904][ T5175] vhci_hcd: connection closed [ 57.935293][ T3208] vhci_hcd: stop threads [ 57.944740][ T3208] vhci_hcd: release socket [ 57.949388][ T3208] vhci_hcd: disconnect device [ 57.974193][ T3208] vhci_hcd: stop threads [ 57.978535][ T3208] vhci_hcd: release socket [ 57.982958][ T3208] vhci_hcd: disconnect device [ 58.003969][ T3208] vhci_hcd: stop threads [ 58.008360][ T3208] vhci_hcd: release socket [ 58.012796][ T3208] vhci_hcd: disconnect device [ 58.024688][ T3183] vhci_hcd: vhci_device speed not set [ 58.116609][ T5183] ref_ctr increment failed for inode: 0x7a5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888118955f80 [ 58.204779][ T5197] loop2: detected capacity change from 0 to 512 [ 58.281327][ T5075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.294321][ T5075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.313985][ T5075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.336237][ T5075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.488383][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.572259][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.656415][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.663986][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.696145][ T3180] usb usb2-port1: attempt power cycle [ 58.779889][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.787048][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.909080][ T5075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.919612][ T5075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.049379][ T5209] lo speed is unknown, defaulting to 1000 [ 59.150089][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.251403][ T5075] veth0_vlan: entered promiscuous mode [ 59.277489][ T5075] veth1_vlan: entered promiscuous mode [ 59.328392][ T5075] veth0_macvtap: entered promiscuous mode [ 59.356068][ T5075] veth1_macvtap: entered promiscuous mode [ 59.367374][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.378106][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.388022][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.398482][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.408348][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.418907][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.428849][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.439388][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.458078][ T3183] kernel write not supported for file bpf-prog (pid: 3183 comm: kworker/0:4) [ 59.473043][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.489036][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.499522][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.509646][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.518325][ T5261] loop0: detected capacity change from 0 to 512 [ 59.520093][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.530595][ T5261] EXT4-fs (loop0): invalid first ino: 1 [ 59.536493][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.552559][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.562557][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.573061][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.584978][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.598256][ T5075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.607160][ T5075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.616230][ T5075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.625040][ T5075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.643037][ T5264] loop3: detected capacity change from 0 to 1024 [ 59.662786][ T5264] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 59.735141][ T5269] bond0: option min_links: invalid value (18446744073709486081) [ 59.742970][ T5269] bond0: option min_links: allowed values 0 - 2147483647 [ 59.926788][ T5291] ------------[ cut here ]------------ [ 59.932273][ T5291] WARNING: CPU: 0 PID: 5291 at include/linux/skbuff.h:2738 skb_ensure_writable+0x17d/0x1d0 [ 59.942405][ T5291] Modules linked in: [ 59.946376][ T5291] CPU: 0 PID: 5291 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 59.957032][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 59.967297][ T5291] RIP: 0010:skb_ensure_writable+0x17d/0x1d0 [ 59.973220][ T5291] Code: 00 00 e8 06 f6 fe ff 41 89 c7 44 89 f8 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 ee e8 4a fd e9 68 ff ff ff e8 e4 e8 4a fd 90 <0f> 0b 90 e9 aa fe ff ff 44 89 ff 44 89 f6 e8 90 ea 4a fd 45 39 f7 [ 59.992913][ T5291] RSP: 0018:ffffc900011cba98 EFLAGS: 00010287 [ 59.999038][ T5291] RAX: ffffffff83e3e78c RBX: ffff8881079c6b00 RCX: 0000000000040000 [ 60.007029][ T5291] RDX: ffffc90001bbd000 RSI: 0000000000000143 RDI: 0000000000000144 [ 60.015080][ T5291] RBP: 00000000eb5d3131 R08: ffffffff83e3e631 R09: 0000000000000000 [ 60.023119][ T5291] R10: 0001ffffffffffff R11: ffffffff83eb6cd0 R12: ffffc900011cbb80 [ 60.031116][ T5291] R13: 00000000eb5d3131 R14: 00000000eb5d3131 R15: 0000000000000000 [ 60.039134][ T5291] FS: 00007faa5c1d96c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 60.048105][ T5291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.054700][ T5291] CR2: 0000001b30928000 CR3: 0000000117856000 CR4: 00000000003506f0 [ 60.062687][ T5291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.070897][ T5291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.078906][ T5291] Call Trace: [ 60.082206][ T5291] [ 60.085182][ T5291] ? __warn+0x13c/0x350 [ 60.089350][ T5291] ? report_bug+0x315/0x420 [ 60.093838][ T5291] ? skb_ensure_writable+0x17d/0x1d0 [ 60.099184][ T5291] ? handle_bug+0x3e/0x70 [ 60.103517][ T5291] ? exc_invalid_op+0x1a/0x50 [ 60.108224][ T5291] ? asm_exc_invalid_op+0x1a/0x20 [ 60.113253][ T5291] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 60.118820][ T5291] ? skb_ensure_writable+0x21/0x1d0 [ 60.124086][ T5291] ? skb_ensure_writable+0x17c/0x1d0 [ 60.129495][ T5291] ? skb_ensure_writable+0x17d/0x1d0 [ 60.134811][ T5291] ? skb_ensure_writable+0x17c/0x1d0 [ 60.140244][ T5291] bpf_skb_pull_data+0x52/0xf0 [ 60.145025][ T5291] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 60.150680][ T5291] ___bpf_prog_run+0x9ab/0x46c0 [ 60.155629][ T5291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.161874][ T5291] ? arch_stack_walk+0x16d/0x1b0 [ 60.166875][ T5291] __bpf_prog_run32+0x74/0xa0 [ 60.171625][ T5291] bpf_test_run+0x17d/0x430 [ 60.176178][ T5291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.182240][ T5291] ? should_fail_ex+0x31/0x230 [ 60.187019][ T5291] ? bpf_test_run+0xf1/0x430 [ 60.191598][ T5291] bpf_prog_test_run_skb+0x73c/0x9b0 [ 60.197097][ T5291] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 60.202923][ T5291] bpf_prog_test_run+0x26d/0x3e0 [ 60.207935][ T5291] __sys_bpf+0x400/0x7a0 [ 60.212173][ T5291] __x64_sys_bpf+0x43/0x50 [ 60.216615][ T5291] x64_sys_call+0x2655/0x2d70 [ 60.221305][ T5291] do_syscall_64+0xc9/0x1c0 [ 60.225917][ T5291] ? clear_bhb_loop+0x55/0xb0 [ 60.230649][ T5291] ? clear_bhb_loop+0x55/0xb0 [ 60.235541][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.241564][ T5291] RIP: 0033:0x7faa5ce5eee9 [ 60.246058][ T5291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.265774][ T5291] RSP: 002b:00007faa5c1d90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.274198][ T5291] RAX: ffffffffffffffda RBX: 00007faa5cf95fa0 RCX: 00007faa5ce5eee9 [ 60.282502][ T5291] RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 000000000000000a [ 60.290565][ T5291] RBP: 00007faa5ceab47f R08: 0000000000000000 R09: 0000000000000000 [ 60.298587][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.306677][ T5291] R13: 000000000000000b R14: 00007faa5cf95fa0 R15: 00007ffe7ec2f438 [ 60.314686][ T5291] [ 60.317710][ T5291] ---[ end trace 0000000000000000 ]--- [ 60.394495][ T5308] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 60.502885][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 60.592854][ T5334] validate_nla: 1 callbacks suppressed [ 60.592869][ T5334] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 60.653102][ T5334] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 60.704816][ T3180] usb usb2-port1: unable to enumerate USB device [ 60.730342][ T5355] __nla_validate_parse: 3 callbacks suppressed [ 60.730359][ T5355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 60.863590][ T5370] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 60.889772][ T5370] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 60.938505][ T5378] loop0: detected capacity change from 0 to 8192 [ 60.947107][ T5378] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.177345][ T5403] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.429485][ T5419] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 61.456573][ T5425] loop2: detected capacity change from 0 to 128 [ 61.468757][ T5419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.469059][ T5425] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 61.504521][ T5419] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 61.521127][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.537890][ T5419] bond0: (slave team0): Enslaving as an active interface with an up link [ 61.575956][ T5425] syz-executor.2: attempt to access beyond end of device [ 61.575956][ T5425] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 61.600747][ T5425] syz-executor.2: attempt to access beyond end of device [ 61.600747][ T5425] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 61.664145][ T29] kauditd_printk_skb: 2772 callbacks suppressed [ 61.664159][ T29] audit: type=1400 audit(1717134515.563:13533): avc: denied { write } for pid=5436 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.697450][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.699923][ T5440] macvlan2: entered allmulticast mode [ 61.699940][ T5440] bond0: entered allmulticast mode [ 61.699990][ T5440] bond_slave_0: entered allmulticast mode [ 61.700004][ T5440] bond_slave_1: entered allmulticast mode [ 61.700016][ T5440] dummy0: entered allmulticast mode [ 61.700029][ T5440] team0: entered allmulticast mode [ 61.700042][ T5440] team_slave_0: entered allmulticast mode [ 61.700054][ T5440] team_slave_1: entered allmulticast mode [ 61.701078][ T5440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.751549][ T5443] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 61.815825][ T5456] loop3: detected capacity change from 0 to 512 [ 61.826226][ T5458] loop2: detected capacity change from 0 to 1024 [ 61.837138][ T5458] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.848512][ T5458] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 61.859125][ T5458] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.861117][ T5456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.870292][ T5458] journal_load_superblock: Cannot read journal superblock [ 61.889247][ T5458] EXT4-fs (loop2): Could not load journal inode [ 61.893220][ T5461] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 61.905439][ T5456] ext4 filesystem being mounted at /root/syzkaller-testdir1306406392/syzkaller.kmWna9/176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.947113][ T5465] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 61.987844][ T3118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.989342][ T5465] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 62.038903][ T5475] loop4: detected capacity change from 0 to 512 [ 62.047324][ T5475] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.059684][ T5475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.066344][ T5475] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 62.081946][ T5475] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 62.085873][ T29] audit: type=1400 audit(1717134515.993:13534): avc: denied { map } for pid=5470 comm="syz-executor.2" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.095041][ T5475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.136701][ T5475] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 62.151397][ T5475] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 62.166030][ T5475] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 62.183427][ T5475] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 62.203113][ T29] audit: type=1400 audit(1717134516.103:13535): avc: denied { write } for pid=5473 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.246880][ T5075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.266868][ T5483] bond0: entered promiscuous mode [ 62.271974][ T5483] bond_slave_0: entered promiscuous mode [ 62.278048][ T5483] bond_slave_1: entered promiscuous mode [ 62.283435][ T29] audit: type=1400 audit(1717134516.183:13536): avc: denied { getopt } for pid=5488 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.283947][ T5483] dummy0: entered promiscuous mode [ 62.308087][ T29] audit: type=1400 audit(1717134516.213:13537): avc: denied { setopt } for pid=5488 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.308896][ T5483] team0: entered promiscuous mode [ 62.333848][ T5483] team_slave_0: entered promiscuous mode [ 62.339565][ T5483] team_slave_1: entered promiscuous mode [ 62.457667][ T5505] vcan0: Master is either lo or non-ether device [ 62.481322][ T29] audit: type=1400 audit(1717134516.383:13538): avc: denied { create } for pid=5506 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 62.506592][ T29] audit: type=1400 audit(1717134516.413:13539): avc: denied { create } for pid=5506 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 62.527451][ T29] audit: type=1400 audit(1717134516.413:13540): avc: denied { setopt } for pid=5506 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 62.548169][ T29] audit: type=1400 audit(1717134516.413:13541): avc: denied { create } for pid=5506 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 62.569451][ T29] audit: type=1400 audit(1717134516.413:13542): avc: denied { bind } for pid=5506 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 62.629758][ T5526] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 62.639735][ T5524] IPVS: stopping backup sync thread 5526 ... [ 62.661056][ T5529] loop2: detected capacity change from 0 to 256 [ 62.670792][ T5529] FAT-fs (loop2): Unrecognized mount option "00000000000000000000464" or missing value [ 62.816561][ T5541] vxcan1: MTU too low for tipc bearer [ 62.822170][ T5541] tipc: Enabling of bearer rejected, failed to enable media [ 62.831204][ T5543] loop4: detected capacity change from 0 to 128 [ 62.841435][ T5543] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 62.854398][ T5545] team_slave_0: left promiscuous mode [ 62.861338][ T5543] syz-executor.4: attempt to access beyond end of device [ 62.861338][ T5543] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 62.869410][ T5545] team0: Port device team_slave_0 removed [ 62.875300][ T5543] syz-executor.4: attempt to access beyond end of device [ 62.875300][ T5543] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 62.886406][ T5545] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 62.967287][ T5547] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 62.991534][ T5549] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 63.020582][ T5555] xt_TCPMSS: Only works on TCP SYN packets [ 63.053937][ T5561] loop3: detected capacity change from 0 to 2048 [ 63.070902][ T5561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.088468][ T5566] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 63.101626][ T3118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.163217][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.223158][ T5583] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.419681][ T5607] loop2: detected capacity change from 0 to 128 [ 63.428954][ T5607] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 63.447226][ T5607] syz-executor.2: attempt to access beyond end of device [ 63.447226][ T5607] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 63.461958][ T5607] syz-executor.2: attempt to access beyond end of device [ 63.461958][ T5607] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 63.570799][ T5615] SELinux: Context Ž is not valid (left unmapped). [ 64.087946][ T5631] loop4: detected capacity change from 0 to 512 [ 64.108538][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.121775][ T5631] ext4 filesystem being mounted at /root/syzkaller-testdir1877287128/syzkaller.JVAaQf/27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.189455][ T5641] loop2: detected capacity change from 0 to 128 [ 64.197596][ T5641] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 64.214017][ T5641] syz-executor.2: attempt to access beyond end of device [ 64.214017][ T5641] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 64.227873][ T5641] syz-executor.2: attempt to access beyond end of device [ 64.227873][ T5641] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 64.299995][ T5647] syzkaller1: entered promiscuous mode [ 64.305694][ T5647] syzkaller1: entered allmulticast mode [ 64.330327][ T5075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.374458][ T5657] loop4: detected capacity change from 0 to 512 [ 64.381772][ T5657] EXT4-fs: Ignoring removed oldalloc option [ 64.389447][ T5657] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 64.402641][ T5657] EXT4-fs (loop4): Remounting filesystem read-only [ 64.409232][ T5657] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.422303][ T5657] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 64.432523][ T5657] EXT4-fs (loop4): 1 orphan inode deleted [ 64.438624][ T5657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.450776][ T5657] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 64.458608][ T5657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.551204][ T5660] loop4: detected capacity change from 0 to 1024 [ 64.558913][ T5660] EXT4-fs: Ignoring removed i_version option [ 64.565426][ T5660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.576108][ T5660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.590362][ T5660] bond0: Unable to set down delay as MII monitoring is disabled [ 64.603176][ T5075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.828566][ T5681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.854255][ T5683] loop4: detected capacity change from 0 to 128 [ 64.862203][ T5683] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 64.879828][ T5683] syz-executor.4: attempt to access beyond end of device [ 64.879828][ T5683] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 64.893448][ T5683] syz-executor.4: attempt to access beyond end of device [ 64.893448][ T5683] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 65.846618][ T5731] loop2: detected capacity change from 0 to 256 [ 65.997377][ T5753] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.007973][ T5753] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 66.097748][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.113413][ T5775] loop4: detected capacity change from 0 to 128 [ 66.121416][ T5775] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 66.310895][ T5807] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.408053][ T5816] loop4: detected capacity change from 0 to 128 [ 66.417477][ T5816] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 66.572955][ T5829] loop4: detected capacity change from 0 to 8192 [ 66.677497][ T5837] bridge0: entered allmulticast mode [ 66.683012][ T5837] bridge0: left allmulticast mode [ 66.711602][ T5843] loop3: detected capacity change from 0 to 128 [ 66.719094][ T5843] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 66.736437][ T5843] bio_check_eod: 4 callbacks suppressed [ 66.736452][ T5843] syz-executor.3: attempt to access beyond end of device [ 66.736452][ T5843] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 66.755669][ T5843] syz-executor.3: attempt to access beyond end of device [ 66.755669][ T5843] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 66.851440][ T5850] loop2: detected capacity change from 0 to 512 [ 66.859191][ T5850] EXT4-fs (loop2): #clusters per group too big: 2498174976 [ 66.909923][ T5850] syz-executor.2[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.909995][ T5850] syz-executor.2[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.923141][ T5850] syz-executor.2[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.935087][ T5850] syz-executor.2[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.962944][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 66.962958][ T29] audit: type=1400 audit(1717134520.863:13606): avc: denied { mount } for pid=5858 comm="syz-executor.3" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.979625][ T5859] devpts: called with bogus options [ 66.981665][ T29] audit: type=1400 audit(1717134520.883:13607): avc: denied { remount } for pid=5858 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.030224][ T5859] validate_nla: 1 callbacks suppressed [ 67.030239][ T5859] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 67.044047][ T5859] hsr0: entered promiscuous mode [ 67.049664][ T5859] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 67.090906][ T5866] loop2: detected capacity change from 0 to 2048 [ 67.106944][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.131466][ T3221] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set [ 67.147232][ T3221] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 117 [ 67.159667][ T3221] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.159667][ T3221] [ 67.171372][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.225479][ T5871] loop2: detected capacity change from 0 to 512 [ 67.237318][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.249949][ T5871] ext4 filesystem being mounted at /root/syzkaller-testdir3393093023/syzkaller.yDWerV/133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.504962][ T5885] can: request_module (can-proto-0) failed. [ 67.545583][ T29] audit: type=1400 audit(1717134521.453:13608): avc: denied { connect } for pid=5889 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.631326][ T5894] loop4: detected capacity change from 0 to 512 [ 67.649141][ T5894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.664503][ T5894] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 83886080 (level 1) [ 67.680236][ T5894] EXT4-fs (loop4): Remounting filesystem read-only [ 67.689976][ T5894] EXT4-fs (loop4): 1 orphan inode deleted [ 67.695862][ T5894] EXT4-fs (loop4): 1 truncate cleaned up [ 67.702652][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.720215][ T5894] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.727432][ T5894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.839149][ T29] audit: type=1400 audit(1717134521.743:13609): avc: denied { map } for pid=5905 comm="syz-executor.4" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 67.953022][ T29] audit: type=1400 audit(1717134521.853:13610): avc: denied { unmount } for pid=3118 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.012155][ T29] audit: type=1400 audit(1717134521.913:13611): avc: denied { bind } for pid=5917 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.050906][ T5922] loop4: detected capacity change from 0 to 256 [ 68.099848][ T5921] veth0_vlan: left promiscuous mode [ 68.110015][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.152100][ T5923] loop3: detected capacity change from 0 to 512 [ 68.160659][ T5923] EXT4-fs (loop3): unsupported inode size: 0 [ 68.166984][ T5923] EXT4-fs (loop3): blocksize: 2048 [ 68.182287][ T29] audit: type=1400 audit(1717134522.083:13612): avc: denied { write } for pid=5926 comm="syz-executor.4" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 68.214297][ T29] audit: type=1400 audit(1717134522.083:13613): avc: denied { connect } for pid=5927 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.277692][ T29] audit: type=1400 audit(1717134522.183:13614): avc: denied { listen } for pid=5934 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.298493][ T29] audit: type=1400 audit(1717134522.183:13615): avc: denied { accept } for pid=5934 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.329272][ T5936] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 68.847337][ T5955] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 68.887543][ T5958] loop3: detected capacity change from 0 to 2048 [ 68.914914][ T5958] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 69.164525][ T5988] 9pnet_fd: Insufficient options for proto=fd [ 69.321599][ T6014] loop4: detected capacity change from 0 to 256 [ 69.348665][ T6021] loop2: detected capacity change from 0 to 512 [ 69.372120][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.385067][ T6021] ext4 filesystem being mounted at /root/syzkaller-testdir3393093023/syzkaller.yDWerV/140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.403668][ T6020] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1 [ 69.424794][ T6021] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1 [ 69.452386][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.469850][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.584337][ T6063] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 69.834360][ T6090] loop2: detected capacity change from 0 to 512 [ 69.843253][ T6090] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 69.843253][ T6090] [ 69.854215][ T6090] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 69.864266][ T6092] Illegal XDP return value 4294967274 on prog (id 303) dev N/A, expect packet loss! [ 69.877338][ T6092] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 69.885790][ T6092] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 69.894185][ T6092] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.895369][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.925108][ T6090] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 69.945047][ T6090] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 69.978778][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.035404][ T6107] loop2: detected capacity change from 0 to 128 [ 70.064953][ T6107] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 70.127408][ T6107] syz-executor.2: attempt to access beyond end of device [ 70.127408][ T6107] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 70.156955][ T6107] syz-executor.2: attempt to access beyond end of device [ 70.156955][ T6107] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 70.217818][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.282263][ T6136] loop2: detected capacity change from 0 to 512 [ 70.292943][ T6136] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 70.292943][ T6136] [ 70.303732][ T6136] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 70.319228][ T6136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.364895][ T6136] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 70.399488][ T6136] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 70.498555][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.532871][ T6160] loop3: detected capacity change from 0 to 128 [ 70.541403][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.553733][ T6160] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 70.577167][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.604472][ T6160] syz-executor.3: attempt to access beyond end of device [ 70.604472][ T6160] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 70.647295][ T6160] syz-executor.3: attempt to access beyond end of device [ 70.647295][ T6160] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 70.689908][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.709856][ T6167] loop3: detected capacity change from 0 to 512 [ 70.739365][ T6171] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.852879][ T6196] loop2: detected capacity change from 0 to 512 [ 70.866758][ T6196] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 70.866758][ T6196] [ 70.877663][ T6196] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 70.888292][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.904477][ T6196] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 70.917238][ T6196] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 70.930456][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.948938][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.985916][ T6208] loop2: detected capacity change from 0 to 512 [ 70.994482][ T6208] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.001401][ T6208] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: bad e_name length [ 71.016001][ T6208] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 71.034316][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.074014][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.077876][ T6216] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.205336][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.215717][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.263856][ T6232] loop4: detected capacity change from 0 to 512 [ 71.272041][ T6232] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 71.272041][ T6232] [ 71.282908][ T6232] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 71.292224][ T6232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.309831][ T6232] EXT4-fs error (device loop4): ext4_lookup:1858: inode #2: comm syz-executor.4: deleted inode referenced: 15 [ 71.322828][ T6232] EXT4-fs error (device loop4): ext4_lookup:1858: inode #2: comm syz-executor.4: deleted inode referenced: 15 [ 71.335911][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.348139][ T5075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.571885][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 71.599169][ T6243] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 71.791505][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 71.800903][ T6275] loop3: detected capacity change from 0 to 512 [ 71.816146][ T6275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.829874][ T6275] ext4 filesystem being mounted at /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.848082][ T6275] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 71.862016][ T6275] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 71.874609][ T6275] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 71.887141][ T6275] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 71.911602][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 71.937903][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 71.965471][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 71.991595][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.012681][ T6286] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.019082][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 72.051341][ T6286] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 72.061490][ T3118] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir1306406392/syzkaller.kmWna9/221/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 72.165756][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.177764][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 72.177778][ T29] audit: type=1326 audit(1717134526.083:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.213016][ T6299] loop4: detected capacity change from 0 to 256 [ 72.222175][ T29] audit: type=1400 audit(1717134526.113:13640): avc: denied { append } for pid=6298 comm="syz-executor.4" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.246010][ T29] audit: type=1326 audit(1717134526.113:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.270907][ T29] audit: type=1326 audit(1717134526.113:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.295108][ T29] audit: type=1326 audit(1717134526.113:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.299457][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.319103][ T29] audit: type=1326 audit(1717134526.113:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.353003][ T29] audit: type=1326 audit(1717134526.113:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.377468][ T29] audit: type=1326 audit(1717134526.113:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.402259][ T29] audit: type=1326 audit(1717134526.113:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.426886][ T29] audit: type=1326 audit(1717134526.113:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb161f1aee9 code=0x7ffc0000 [ 72.468344][ T6299] cgroup: Name too long [ 72.483579][ T3183] kernel write not supported for file bpf-prog (pid: 3183 comm: kworker/0:4) [ 72.516862][ T6307] loop2: detected capacity change from 0 to 512 [ 72.620866][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 72.783008][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.811844][ T3177] kernel write not supported for file bpf-prog (pid: 3177 comm: kworker/1:3) [ 72.823412][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.885678][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 73.101449][ T6375] loop2: detected capacity change from 0 to 256 [ 73.111298][ T6361] lo speed is unknown, defaulting to 1000 [ 73.216119][ T5411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.235400][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 73.262720][ T5411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.321991][ T5411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.343283][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.350476][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.360493][ T6361] bridge_slave_0: entered allmulticast mode [ 73.367426][ T6361] bridge_slave_0: entered promiscuous mode [ 73.374342][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.381433][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.388640][ T6361] bridge_slave_1: entered allmulticast mode [ 73.395021][ T6361] bridge_slave_1: entered promiscuous mode [ 73.405334][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 73.434115][ T5411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.474356][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.494452][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.528880][ T5411] bridge_slave_1: left allmulticast mode [ 73.534646][ T5411] bridge_slave_1: left promiscuous mode [ 73.540312][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.569897][ T5411] bridge_slave_0: left allmulticast mode [ 73.575678][ T5411] bridge_slave_0: left promiscuous mode [ 73.581463][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.648272][ T6407] sctp: [Deprecated]: syz-executor.1 (pid 6407) Use of int in maxseg socket option. [ 73.648272][ T6407] Use struct sctp_assoc_value instead [ 73.665740][ T6407] sctp: [Deprecated]: syz-executor.1 (pid 6407) Use of int in maxseg socket option. [ 73.665740][ T6407] Use struct sctp_assoc_value instead [ 73.777994][ T5411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.788162][ T5411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.799052][ T5411] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 73.807947][ T5411] bond0 (unregistering): (slave team0): Releasing backup interface [ 73.817758][ T5411] bond0 (unregistering): Released all slaves [ 73.831462][ T6361] team0: Port device team_slave_0 added [ 73.838385][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.849306][ T6361] team0: Port device team_slave_1 added [ 73.856253][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.894384][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.901400][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.927805][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.947524][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.954518][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.980626][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.027271][ T6361] hsr_slave_0: entered promiscuous mode [ 74.033449][ T6361] hsr_slave_1: entered promiscuous mode [ 74.040185][ T6361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.048749][ T6361] Cannot create hsr debugfs directory [ 74.057074][ T5411] hsr_slave_0: left promiscuous mode [ 74.063978][ T5411] hsr_slave_1: left promiscuous mode [ 74.070740][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.078238][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.087003][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.094410][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.103809][ T5411] veth1_macvtap: left promiscuous mode [ 74.109390][ T5411] veth0_macvtap: left promiscuous mode [ 74.114962][ T5411] veth1_vlan: left promiscuous mode [ 74.120257][ T5411] veth0_vlan: left promiscuous mode [ 74.285492][ T5411] team0 (unregistering): Port device team_slave_1 removed [ 74.296121][ T5411] team0 (unregistering): Port device team_slave_0 removed [ 74.346956][ T6438] Process accounting resumed [ 74.520232][ T6459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.532366][ T6468] lo speed is unknown, defaulting to 1000 [ 74.660320][ T6361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.676512][ T6361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.687098][ T6361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.698464][ T6477] loop2: detected capacity change from 0 to 512 [ 74.709472][ T6361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.716473][ T6477] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.725357][ T6477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.748742][ T6477] EXT4-fs (loop2): 1 truncate cleaned up [ 74.754802][ T6477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.781771][ T3824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.807555][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.826527][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.836694][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.843888][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.874503][ T6361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.885091][ T6361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.905361][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.916053][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.923141][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.991630][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.079785][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.157390][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.212928][ T6361] veth0_vlan: entered promiscuous mode [ 75.250351][ T6361] veth1_vlan: entered promiscuous mode [ 75.266369][ T6361] veth0_macvtap: entered promiscuous mode [ 75.277817][ T6361] veth1_macvtap: entered promiscuous mode [ 75.290178][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.300639][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.310483][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.321203][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.331088][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.341993][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.352699][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.363170][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.375606][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.386240][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.397059][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407771][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.418299][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.428386][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.439053][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.449316][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.459883][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.471721][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.485822][ T6361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.495339][ T6361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.504657][ T6361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.513450][ T6361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.580307][ T6538] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 75.603822][ T6539] loop4: detected capacity change from 0 to 512 [ 75.732870][ T6551] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 75.958633][ T6568] mmap: syz-executor.2 (6568): VmData 29126656 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 76.003441][ T6574] loop4: detected capacity change from 0 to 512 [ 76.012252][ T6574] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.167336][ T3118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.294918][ T6582] lo speed is unknown, defaulting to 1000 [ 76.364148][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 76.396727][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.403826][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.411328][ T6582] bridge_slave_0: entered allmulticast mode [ 76.417869][ T6582] bridge_slave_0: entered promiscuous mode [ 76.425209][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.432394][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.439568][ T6582] bridge_slave_1: entered allmulticast mode [ 76.446256][ T6582] bridge_slave_1: entered promiscuous mode [ 76.463446][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.474012][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.493079][ T6582] team0: Port device team_slave_0 added [ 76.499754][ T6582] team0: Port device team_slave_1 added [ 76.514198][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.521367][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.547690][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.560100][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.567204][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.593825][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.621652][ T6582] hsr_slave_0: entered promiscuous mode [ 76.627771][ T6582] hsr_slave_1: entered promiscuous mode [ 76.686313][ T6582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.749966][ T6582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.798363][ T6582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.829703][ T6361] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 76.849089][ T6582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.910599][ T6582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.921683][ T6582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.930533][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.930783][ T6582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.952632][ T6582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.995983][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.015106][ T6615] __nla_validate_parse: 1 callbacks suppressed [ 77.015169][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.031594][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.056939][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.064388][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.073187][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.080336][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.147971][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.218780][ T6582] veth0_vlan: entered promiscuous mode [ 77.228556][ T6582] veth1_vlan: entered promiscuous mode [ 77.245648][ T6582] veth0_macvtap: entered promiscuous mode [ 77.253237][ T6582] veth1_macvtap: entered promiscuous mode [ 77.266629][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.277354][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.287395][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.297961][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.307932][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.318380][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.328377][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.338914][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.348982][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.359572][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.371606][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.382659][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.393407][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.403263][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.413710][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.423646][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.434207][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.444318][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.454915][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.464929][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.475583][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.487634][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.499734][ T6582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508664][ T6582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.517517][ T6582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.526707][ T6582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.717140][ T6641] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 77.777724][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 77.828509][ T6654] loop3: detected capacity change from 0 to 512 [ 77.839540][ T6654] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.872848][ T6582] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 77.883134][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.890585][ T6661] Cannot find add_set index 0 as target [ 77.904190][ T6659] Cannot find add_set index 0 as target [ 77.949302][ T6680] loop3: detected capacity change from 0 to 512 [ 78.015816][ T6692] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.025031][ T6695] loop3: detected capacity change from 0 to 512 [ 78.038494][ T6695] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 78.038494][ T6695] [ 78.049252][ T6695] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 78.058746][ T6695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.059308][ T6691] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.089082][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.132306][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.206934][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.217511][ T6722] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 78.253467][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.301918][ T6738] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.308442][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.343624][ T6744] ALSA: seq fatal error: cannot create timer (-22) [ 78.351832][ T6745] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.378354][ T6757] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 78.393014][ T6757] netlink: zone id is out of range [ 78.443513][ T6770] loop3: detected capacity change from 0 to 512 [ 78.452206][ T6770] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 78.452206][ T6770] [ 78.463046][ T6770] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 78.474391][ T6770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.487380][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63499 sclass=netlink_route_socket pid=6773 comm=syz-executor.1 [ 78.505633][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.597439][ T6777] loop3: detected capacity change from 0 to 4096 [ 78.672181][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 78.672195][ T29] audit: type=1326 audit(1717134532.450:13779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb161f1aee9 code=0x0 [ 78.723136][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.732476][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.745719][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 78.756061][ T6792] wireguard0: entered promiscuous mode [ 78.761747][ T6792] wireguard0: entered allmulticast mode [ 78.781806][ T6796] loop3: detected capacity change from 0 to 256 [ 78.789246][ T6796] FAT-fs (loop3): Unrecognized mount option "shortname=Ô“n95" or missing value [ 79.170788][ T6799] loop3: detected capacity change from 0 to 256 [ 79.318018][ T6816] loop3: detected capacity change from 0 to 128 [ 79.440273][ T29] audit: type=1400 audit(1717134533.220:13780): avc: denied { setopt } for pid=6823 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.461323][ T29] audit: type=1400 audit(1717134533.220:13781): avc: denied { read } for pid=6823 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.482589][ T29] audit: type=1326 audit(1717134533.250:13782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6848901ee9 code=0x0 [ 79.561221][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 79.659323][ T29] audit: type=1400 audit(1717134533.440:13783): avc: denied { write } for pid=6849 comm="syz-executor.3" name="file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 79.845116][ T6854] loop3: detected capacity change from 0 to 8192 [ 79.853299][ T6854] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.978720][ T29] audit: type=1326 audit(1717134533.760:13784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6848901ee9 code=0x0 [ 80.438149][ T6863] lo speed is unknown, defaulting to 1000 [ 80.576327][ T6618] veth0_vlan: left promiscuous mode [ 80.831372][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 80.871050][ T6873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.977243][ T29] audit: type=1400 audit(1717134534.760:13785): avc: denied { setattr } for pid=6893 comm="syz-executor.2" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 81.014755][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 81.103944][ T6913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63499 sclass=netlink_route_socket pid=6913 comm=syz-executor.2 [ 81.273091][ T6931] loop3: detected capacity change from 0 to 512 [ 81.281559][ T6931] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 81.281559][ T6931] [ 81.292636][ T6931] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 81.298324][ T6934] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 81.302318][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.309919][ T6934] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 81.338359][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.375548][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 81.402536][ T6947] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 81.413427][ T6951] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 81.443833][ T29] audit: type=1326 audit(1717134535.220:13786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6848901ee9 code=0x7ffc0000 [ 81.468420][ T29] audit: type=1326 audit(1717134535.240:13787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6848901ee9 code=0x7ffc0000 [ 81.492598][ T29] audit: type=1326 audit(1717134535.240:13788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6848901ee9 code=0x7ffc0000 [ 81.547796][ T6963] loop3: detected capacity change from 0 to 512 [ 81.556366][ T6963] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 81.556366][ T6963] [ 81.567142][ T6963] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 81.576995][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.597023][ T6968] 9pnet_fd: Insufficient options for proto=fd [ 81.603867][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.629910][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 81.737695][ T6995] loop3: detected capacity change from 0 to 512 [ 81.746502][ T6995] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 81.746502][ T6995] [ 81.757310][ T6995] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 81.766710][ T6995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.789317][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.047710][ T7033] loop3: detected capacity change from 0 to 512 [ 82.055984][ T7033] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 82.055984][ T7033] [ 82.066844][ T7033] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 82.076107][ T7033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.094739][ T6582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.273988][ T7057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63499 sclass=netlink_route_socket pid=7057 comm=syz-executor.3 [ 82.469798][ T7078] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.743833][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 82.877630][ T7108] tracefs: Unknown parameter 'u' [ 82.918865][ T7110] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.155001][ T5411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.203112][ T7128] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.228578][ T5411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.304191][ T5411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.350837][ T5411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.397546][ T7130] lo speed is unknown, defaulting to 1000 [ 83.428332][ T5411] bridge_slave_1: left allmulticast mode [ 83.434180][ T5411] bridge_slave_1: left promiscuous mode [ 83.440017][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.470136][ T5411] bridge_slave_0: left allmulticast mode [ 83.475857][ T5411] bridge_slave_0: left promiscuous mode [ 83.481517][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.687201][ T5411] bond0 (unregistering): left allmulticast mode [ 83.693565][ T5411] bond_slave_0: left allmulticast mode [ 83.699058][ T5411] bond_slave_1: left allmulticast mode [ 83.703968][ T7164] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.704581][ T5411] dummy0: left allmulticast mode [ 83.704595][ T5411] team0: left allmulticast mode [ 83.704607][ T5411] team_slave_0: left allmulticast mode [ 83.727350][ T5411] team_slave_1: left allmulticast mode [ 83.736735][ T5411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.745776][ T5411] bond_slave_0: left promiscuous mode [ 83.752407][ T5411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.761224][ T5411] bond_slave_1: left promiscuous mode [ 83.769164][ T5411] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 83.778643][ T5411] dummy0: left promiscuous mode [ 83.784579][ T5411] bond0 (unregistering): (slave team0): Releasing backup interface [ 83.800004][ T5411] team0: left promiscuous mode [ 83.804845][ T5411] team_slave_0: left promiscuous mode [ 83.810484][ T5411] team_slave_1: left promiscuous mode [ 83.816806][ T5411] bond0 (unregistering): Released all slaves [ 83.879852][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 83.913600][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.920787][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.928388][ T7130] bridge_slave_0: entered allmulticast mode [ 83.936803][ T7130] bridge_slave_0: entered promiscuous mode [ 83.938416][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 83.938428][ T29] audit: type=1326 audit(1717134537.720:13861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 83.943861][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.948704][ T29] audit: type=1326 audit(1717134537.720:13862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.004438][ T29] audit: type=1326 audit(1717134537.730:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.004736][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.028820][ T29] audit: type=1326 audit(1717134537.730:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.037168][ T7130] bridge_slave_1: entered allmulticast mode [ 84.059768][ T29] audit: type=1326 audit(1717134537.730:13865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.090126][ T29] audit: type=1326 audit(1717134537.730:13866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.096469][ T7130] bridge_slave_1: entered promiscuous mode [ 84.114366][ T29] audit: type=1326 audit(1717134537.730:13867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.144187][ T29] audit: type=1326 audit(1717134537.730:13868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.168555][ T29] audit: type=1326 audit(1717134537.730:13869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.193290][ T29] audit: type=1326 audit(1717134537.730:13870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3546a8cee9 code=0x7ffc0000 [ 84.256874][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.273037][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.320374][ T5411] hsr_slave_0: left promiscuous mode [ 84.326936][ T5411] hsr_slave_1: left promiscuous mode [ 84.332929][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.340444][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.347990][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.355513][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.364828][ T5411] veth1_macvtap: left promiscuous mode [ 84.370627][ T5411] veth0_macvtap: left promiscuous mode [ 84.376216][ T5411] veth1_vlan: left promiscuous mode [ 84.381511][ T5411] veth0_vlan: left promiscuous mode [ 84.456233][ T5411] team0 (unregistering): Port device team_slave_1 removed [ 84.467409][ T5411] team0 (unregistering): Port device team_slave_0 removed [ 84.502063][ T7130] team0: Port device team_slave_0 added [ 84.508789][ T7130] team0: Port device team_slave_1 added [ 84.528137][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.535243][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.561179][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.573857][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.582089][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.608531][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.657295][ T7205] __nla_validate_parse: 8 callbacks suppressed [ 84.657310][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.680506][ T7130] hsr_slave_0: entered promiscuous mode [ 84.703184][ T7130] hsr_slave_1: entered promiscuous mode [ 84.711991][ T7215] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.721529][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.730697][ T7130] Cannot create hsr debugfs directory [ 84.824892][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.854416][ T7231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.949335][ T7231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.022326][ T7231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.094345][ T7231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.126906][ T7130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.136473][ T7130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.149374][ T7130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.158993][ T7130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.183175][ T7231] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.195984][ T7231] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209671][ T7231] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.220997][ T7231] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.230973][ T7232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.263827][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.277842][ T7232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.291888][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.304982][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.312243][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.316923][ T7259] loop3: detected capacity change from 0 to 128 [ 85.325427][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.328929][ T7259] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 85.332768][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.349075][ T7259] syz-executor.3: attempt to access beyond end of device [ 85.349075][ T7259] loop3: rw=0, sector=144, nr_sectors = 1 limit=128 [ 85.377599][ T7232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.392246][ T7130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.402659][ T7130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.436801][ T7232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.470690][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.548564][ T7130] veth0_vlan: entered promiscuous mode [ 85.557540][ T7130] veth1_vlan: entered promiscuous mode [ 85.576221][ T7130] veth0_macvtap: entered promiscuous mode [ 85.584927][ T7130] veth1_macvtap: entered promiscuous mode [ 85.597764][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.608310][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.618392][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.628963][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.639048][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.649644][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.659663][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.670386][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.680342][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.690848][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.701809][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.712152][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.722692][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.732702][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.743309][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.753126][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.763600][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.773538][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.784074][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.794091][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.804597][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.815397][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.832117][ T7130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.841153][ T7130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850248][ T7130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.859223][ T7130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.939658][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.949966][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.065634][ T7301] pim6reg1: entered promiscuous mode [ 86.071037][ T7301] pim6reg1: entered allmulticast mode [ 86.146107][ T7259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.174020][ T5411] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.737801][ T7309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.745235][ T7309] IPv6: NLM_F_CREATE should be set when creating new route [ 86.837797][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.848431][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.038530][ T7339] 9pnet: Could not find request transport: tcpI [ 87.055580][ T7339] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 87.176403][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.130290][ T7354] kexec: Could not allocate control_code_buffer [ 88.168386][ T7387] loop3: detected capacity change from 0 to 1024 [ 88.175159][ T7387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.182054][ T7387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.192749][ T7387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.201081][ T7387] System zones: 0-1, 3-36 [ 88.208230][ T7387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.222098][ T7387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.241600][ T7405] ================================================================== [ 88.249707][ T7405] BUG: KCSAN: data-race in __d_instantiate / step_into [ 88.256574][ T7405] [ 88.258884][ T7405] write to 0xffff888106d98630 of 8 bytes by task 7404 on cpu 0: [ 88.266599][ T7405] __d_instantiate+0x1f9/0x3c0 [ 88.271436][ T7405] d_instantiate_new+0x5c/0xf0 [ 88.276211][ T7405] ext4_mkdir+0x5e6/0x740 [ 88.280630][ T7405] vfs_mkdir+0x1f4/0x320 [ 88.284881][ T7405] do_mkdirat+0x12f/0x2a0 [ 88.289221][ T7405] __x64_sys_mkdir+0x44/0x50 [ 88.293902][ T7405] x64_sys_call+0x10d4/0x2d70 [ 88.298600][ T7405] do_syscall_64+0xc9/0x1c0 [ 88.303087][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.309001][ T7405] [ 88.311321][ T7405] read to 0xffff888106d98630 of 8 bytes by task 7405 on cpu 1: [ 88.318849][ T7405] step_into+0x123/0x810 [ 88.323080][ T7405] walk_component+0x169/0x230 [ 88.327752][ T7405] path_lookupat+0x10a/0x2b0 [ 88.332354][ T7405] filename_lookup+0x127/0x300 [ 88.337122][ T7405] user_path_at_empty+0x42/0x120 [ 88.342083][ T7405] __se_sys_mount+0x24b/0x2d0 [ 88.346746][ T7405] __x64_sys_mount+0x67/0x80 [ 88.351350][ T7405] x64_sys_call+0x25c9/0x2d70 [ 88.356033][ T7405] do_syscall_64+0xc9/0x1c0 [ 88.360545][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.366464][ T7405] [ 88.368775][ T7405] value changed: 0x0000000000000000 -> 0xffff888106e2ea38 [ 88.375876][ T7405] 2024/05/31 05:49:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 88.378184][ T7405] Reported by Kernel Concurrency Sanitizer on: [ 88.384316][ T7405] CPU: 1 PID: 7405 Comm: syz-executor.4 Tainted: G W 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 88.396191][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.406332][ T7405] ==================================================================