last executing test programs: 25.103109208s ago: executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) unshare(0x20000400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000240), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103000000000000000024"], 0x14}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x1f, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_pidfd_open(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r4, &(0x7f00000003c0)={r6, r4, 0x8}) 24.927219295s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1}, 0x0) close(r1) 24.849268967s ago: executing program 2: move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 22.274464133s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "95892f"}, 0xe) 21.845321799s ago: executing program 2: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x32, &(0x7f00000000c0)={0x32, 0x0, 0x80}, 0x0) 21.801743866s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r2 = getpgid(r1) ptrace$peeksig(0x4, r2, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff59}, 0x0) 18.468611959s ago: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18.450157752s ago: executing program 1: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) 18.406024378s ago: executing program 1: fsopen(0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x20a40}, 0x18) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f0000001800)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0eef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, r2, 0x2e, 0x0, 0x0, @prog_id}, 0x20) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000080)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x5, &(0x7f0000001380)=ANY=[@ANYRESDEC], &(0x7f0000001280)='GPL\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r6, 0x0, 0xd5, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x2, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da9", 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=ANY=[@ANYBLOB="300000004ad40e31d2cc000100000000000008002dfd71273a2c87bf8749a0b448e1a86e21e8a6d77652f36682bc5a07571b6547d4f728f2ec264497d31ecc04f6ef95d8c6356d9f500b0972eacbc357ece36c3a00edb4c259874512a5777f825dc7b7e4375df08955", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001"], 0x30}}, 0x0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x48000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) 13.704161292s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="be", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.65060199s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) epoll_create(0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 13.611890706s ago: executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 13.569426003s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 13.530767579s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xe7f1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) 12.591373793s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000940)={[{@init_itable}]}, 0x1, 0x548, &(0x7f0000000b40)="$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") sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ptrace$getenv(0xf, r1, 0x0, &(0x7f0000000000)) 12.280762261s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) 12.230178208s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x84a}, 0x28) 12.174852787s ago: executing program 1: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x11, r1, 0x0, &(0x7f0000000000)) 5.892306393s ago: executing program 4: mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000006c0)={0x8, [], 0x3, "4ad80a766d1a7c"}) 5.815633935s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4c4000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={{0x14}, [], {0x14}}, 0xc4c3d8}}, 0x0) 4.896623107s ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x8, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 4.87586219s ago: executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0x10, 0x2, 0x0) pipe(&(0x7f0000000100)) socket$inet6(0xa, 0x805, 0x0) socket(0xa, 0x2, 0x0) epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1]) 4.844123385s ago: executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x1c9442, 0x0) ftruncate(r7, 0x200002) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r9, r8, 0x0, 0x80001d00c0d0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x14}}, 0x0) 4.768825076s ago: executing program 4: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1001) 104.468464ms ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 79.041668ms ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 63.796111ms ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/40, 0x28) 46.267463ms ago: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff000000", 0x42}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 20.086717ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x405, 0x9fd, 0x6, 0x115}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000006b40)=[{&(0x7f0000006b80)=""/142, 0x8e}], 0x1, 0x0, 0x0) 0s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000180), 0x7, 0x50d, &(0x7f00000010c0)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0xd, r1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 02: inode #2: comm syz-executor.4: mark_inode_dirty error [ 300.034281][ T29] audit: type=1400 audit(1717010197.932:16882): avc: denied { create } for pid=16409 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 300.066975][ T29] audit: type=1400 audit(1717010197.932:16883): avc: denied { bind } for pid=16409 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 300.066978][T16396] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir2332806657/syzkaller.llHfN4/19/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 300.113722][ T29] audit: type=1400 audit(1717010197.962:16884): avc: denied { create } for pid=16394 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 300.141964][T16175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.199052][T16414] loop1: detected capacity change from 0 to 8192 [ 300.307324][T16419] dummy0: entered promiscuous mode [ 300.369397][T16419] dummy0: left promiscuous mode [ 301.116660][T16442] loop4: detected capacity change from 0 to 8192 [ 301.236629][T16462] loop4: detected capacity change from 0 to 128 [ 301.445839][ T29] audit: type=1400 audit(1717010199.332:16885): avc: denied { ioctl } for pid=16483 comm="syz-executor.4" path="socket:[64286]" dev="sockfs" ino=64286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.198255][T16490] loop4: detected capacity change from 0 to 8192 [ 302.267752][T16501] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.414735][T16516] loop1: detected capacity change from 0 to 256 [ 302.448030][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.462753][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.469830][T16516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.857417][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.103488][T16527] loop1: detected capacity change from 0 to 8192 [ 303.480889][T16543] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 303.684631][T16551] loop4: detected capacity change from 0 to 512 [ 303.703643][T16551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.742272][T16551] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 303.774530][T16551] EXT4-fs (loop4): Remounting filesystem read-only [ 303.781151][T16551] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 303.812233][T16559] loop1: detected capacity change from 0 to 512 [ 303.814408][T16551] EXT4-fs (loop4): 1 orphan inode deleted [ 303.832017][T16559] EXT4-fs: Mount option(s) incompatible with ext2 [ 303.838921][T16551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.862220][T16551] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 303.876765][T16551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.004753][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.452946][T16583] atomic_op ffff88811201f128 conn xmit_atomic 0000000000000000 [ 304.511349][T10746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.644343][T10746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.777809][T10746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.965934][T10746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.232369][T10746] bridge_slave_1: left allmulticast mode [ 305.238139][T10746] bridge_slave_1: left promiscuous mode [ 305.243870][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.275615][T10746] bridge_slave_0: left allmulticast mode [ 305.281314][T10746] bridge_slave_0: left promiscuous mode [ 305.287182][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.330375][T16615] atomic_op ffff888102905528 conn xmit_atomic 0000000000000000 [ 305.397499][T16617] loop4: detected capacity change from 0 to 512 [ 305.444589][T16617] EXT4-fs: Mount option(s) incompatible with ext2 [ 305.445776][T10746] bridge0 (unregistering): left allmulticast mode [ 305.495990][T10746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.512252][T10746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.525780][T10746] bond0 (unregistering): Released all slaves [ 305.539528][T10746] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 305.550388][T10746] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 305.566673][T10746] bond1 (unregistering): Released all slaves [ 305.595570][T16632] loop4: detected capacity change from 0 to 512 [ 305.645384][T16632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 305.684697][T16632] EXT4-fs (loop4): 1 truncate cleaned up [ 305.690727][T16632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.715702][T10746] hsr_slave_0: left promiscuous mode [ 305.732325][T10746] hsr_slave_1: left promiscuous mode [ 305.738384][T10746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.745973][T10746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.783046][T10746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.790588][T10746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.822720][T16175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.832454][T10746] veth1_macvtap: left promiscuous mode [ 305.837983][T10746] veth0_macvtap: left promiscuous mode [ 305.843507][T10746] veth1_vlan: left promiscuous mode [ 305.848786][T10746] veth0_vlan: left promiscuous mode [ 305.979339][T16649] loop4: detected capacity change from 0 to 512 [ 306.068464][T10746] team0 (unregistering): Port device team_slave_1 removed [ 306.088917][T10746] team0 (unregistering): Port device team_slave_0 removed [ 306.101223][ T29] audit: type=1326 audit(1717010203.992:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16652 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09dc48fee9 code=0x0 [ 306.277003][T16618] chnl_net:caif_netlink_parms(): no params data found [ 306.330213][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.337410][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.346936][T16618] bridge_slave_0: entered allmulticast mode [ 306.353586][T16618] bridge_slave_0: entered promiscuous mode [ 306.360836][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.367946][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.375092][T16618] bridge_slave_1: entered allmulticast mode [ 306.381596][T16618] bridge_slave_1: entered promiscuous mode [ 306.400122][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.410970][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.437730][T16618] team0: Port device team_slave_0 added [ 306.444699][T16618] team0: Port device team_slave_1 added [ 306.479815][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.486821][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.512744][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.526268][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.533276][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.559587][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.591343][T16618] hsr_slave_0: entered promiscuous mode [ 306.599677][T16618] hsr_slave_1: entered promiscuous mode [ 306.605649][T16618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.615495][T16618] Cannot create hsr debugfs directory [ 306.860535][T16618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.869594][T16618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.880648][T16618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.889679][T16618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.949008][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.971426][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.988029][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.995188][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.013893][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.023231][T16669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.025356][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.039577][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.081158][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.090528][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.113594][T16669] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 47840 - 0 [ 307.122634][T16669] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 47840 - 0 [ 307.131486][T16669] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 47840 - 0 [ 307.140403][T16669] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 47840 - 0 [ 307.152394][T16669] geneve2: entered allmulticast mode [ 307.191660][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.312389][T16618] veth0_vlan: entered promiscuous mode [ 307.336083][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.336377][T16618] veth1_vlan: entered promiscuous mode [ 307.362472][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.385446][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.405884][T16618] veth0_macvtap: entered promiscuous mode [ 307.422819][T16693] loop4: detected capacity change from 0 to 2048 [ 307.434543][ T29] audit: type=1400 audit(1717010205.332:16887): avc: denied { watch watch_reads } for pid=16694 comm="syz-executor.3" path="/root/syzkaller-testdir1994960549/syzkaller.NtlMsw/72/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 307.435634][T16618] veth1_macvtap: entered promiscuous mode [ 307.470719][ T29] audit: type=1400 audit(1717010205.362:16888): avc: denied { mount } for pid=16694 comm="syz-executor.3" name="/" dev="hugetlbfs" ino=65203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 307.496236][T16695] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.507819][T16693] loop4: p1 < > p4 [ 307.512249][T16693] loop4: p4 size 8388608 extends beyond EOD, truncated [ 307.520413][T16695] wg0 speed is unknown, defaulting to 1000 [ 307.528434][T16695] wg0 speed is unknown, defaulting to 1000 [ 307.534549][T16695] wg0 speed is unknown, defaulting to 1000 [ 307.544767][T16695] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 307.554039][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.564577][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.574462][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.584945][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.594820][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.605901][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.616106][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.626539][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.636408][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.646851][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.656750][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.667241][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.677117][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.687618][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.697426][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.707857][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.722198][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.730056][T16695] wg0 speed is unknown, defaulting to 1000 [ 307.730854][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.746525][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.756350][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.766780][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.776594][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.787018][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.796859][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.807280][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.817119][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.827619][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.837454][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.847941][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.857757][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.868262][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.878087][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.888524][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.901352][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.927664][T16695] wg0 speed is unknown, defaulting to 1000 [ 307.933481][T16618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.942309][T16618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.951014][T16618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.959728][T16618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.974071][ T29] audit: type=1400 audit(1717010205.862:16889): avc: denied { remount } for pid=16697 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 307.996474][ T29] audit: type=1400 audit(1717010205.872:16890): avc: denied { unmount } for pid=16175 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 308.000092][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.027431][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.049350][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.056570][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.088794][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.104406][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.113853][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.137845][T16695] wg0 speed is unknown, defaulting to 1000 [ 308.459825][T16719] loop2: detected capacity change from 0 to 128 [ 308.561229][T16719] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 308.729997][T16719] syz-executor.2: attempt to access beyond end of device [ 308.729997][T16719] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 308.852962][T16719] syz-executor.2: attempt to access beyond end of device [ 308.852962][T16719] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 309.135587][T16723] wg0 speed is unknown, defaulting to 1000 [ 309.258538][T16729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 309.267372][ T29] audit: type=1400 audit(1717010207.162:16891): avc: denied { ioctl } for pid=16728 comm="syz-executor.3" path="socket:[65298]" dev="sockfs" ino=65298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 309.343248][ T29] audit: type=1400 audit(1717010207.242:16892): avc: denied { create } for pid=16732 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.364158][T16733] atomic_op ffff888106dab128 conn xmit_atomic 0000000000000000 [ 309.379552][ T29] audit: type=1400 audit(1717010207.262:16893): avc: denied { bind } for pid=16732 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.399489][ T29] audit: type=1400 audit(1717010207.262:16894): avc: denied { write } for pid=16732 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.503698][T16747] loop4: detected capacity change from 0 to 512 [ 309.556247][T16747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.569289][T16747] ext4 filesystem being mounted at /root/syzkaller-testdir2332806657/syzkaller.llHfN4/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.588951][ T29] audit: type=1400 audit(1717010207.482:16895): avc: denied { setattr } for pid=16744 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 309.659904][T16747] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #20: comm syz-executor.4: corrupted inode contents [ 309.675321][T16747] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #20: comm syz-executor.4: mark_inode_dirty error [ 309.696258][T16747] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #20: comm syz-executor.4: corrupted inode contents [ 309.711345][T16747] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #20: comm syz-executor.4: mark_inode_dirty error [ 309.730690][T16747] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #20: comm syz-executor.4: mark inode dirty (error -117) [ 309.751975][T16747] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 309.776452][T16175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.798572][T16758] wg0 speed is unknown, defaulting to 1000 [ 309.871754][T16764] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 310.077072][T16780] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 310.124098][T16784] loop4: detected capacity change from 0 to 512 [ 310.146781][T16784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.159841][T16784] ext4 filesystem being mounted at /root/syzkaller-testdir2332806657/syzkaller.llHfN4/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.205774][T16788] wg0 speed is unknown, defaulting to 1000 [ 310.246818][T16784] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #20: comm syz-executor.4: corrupted inode contents [ 310.260549][T16784] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #20: comm syz-executor.4: mark_inode_dirty error [ 310.275825][T16784] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #20: comm syz-executor.4: corrupted inode contents [ 310.290721][T16784] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #20: comm syz-executor.4: mark_inode_dirty error [ 310.306520][T16784] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #20: comm syz-executor.4: mark inode dirty (error -117) [ 310.319749][T16784] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 310.353455][T16175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.696775][T16808] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 310.884533][T16816] wireguard0: entered promiscuous mode [ 310.890049][T16816] wireguard0: entered allmulticast mode [ 311.735545][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 311.735561][ T29] audit: type=1400 audit(1717010209.632:16906): avc: denied { bind } for pid=16832 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.997940][T16839] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 312.211307][T16853] wireguard0: entered promiscuous mode [ 312.216976][T16853] wireguard0: entered allmulticast mode [ 312.873883][ T29] audit: type=1326 audit(1717010210.772:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 312.898303][ T29] audit: type=1326 audit(1717010210.772:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 312.955053][ T29] audit: type=1326 audit(1717010210.772:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 312.979286][ T29] audit: type=1326 audit(1717010210.832:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 313.003416][ T29] audit: type=1326 audit(1717010210.832:16911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 313.030159][ T29] audit: type=1326 audit(1717010210.892:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 313.054344][ T29] audit: type=1326 audit(1717010210.892:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 313.078441][ T29] audit: type=1326 audit(1717010210.892:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c05ee9 code=0x7ffc0000 [ 313.111526][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.120917][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.130282][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.391770][ T29] audit: type=1400 audit(1717010211.282:16915): avc: denied { create } for pid=16912 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 313.458030][T16920] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 38861 - 0 [ 313.467120][T16920] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 38861 - 0 [ 313.475958][T16920] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 38861 - 0 [ 313.484781][T16920] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 38861 - 0 [ 313.499164][T16920] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 43745 - 0 [ 313.508090][T16920] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 43745 - 0 [ 313.517002][T16920] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 43745 - 0 [ 313.525918][T16920] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 43745 - 0 [ 313.538185][T16920] geneve2: entered promiscuous mode [ 313.543580][T16920] geneve2: entered allmulticast mode [ 313.556415][T16920] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 43745 - 0 [ 313.565552][T16920] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 43745 - 0 [ 313.574561][T16920] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 43745 - 0 [ 313.583582][T16920] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 43745 - 0 [ 313.597822][T16920] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 38861 - 0 [ 313.606966][T16920] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 38861 - 0 [ 313.616007][T16920] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 38861 - 0 [ 313.625061][T16920] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 38861 - 0 [ 313.665538][T16929] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 313.695035][T16931] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 313.744442][T16938] nftables ruleset with unbound chain [ 313.845863][T16946] wireguard0: entered promiscuous mode [ 313.851358][T16946] wireguard0: entered allmulticast mode [ 313.942018][T16945] loop4: detected capacity change from 0 to 8192 [ 313.981501][T16945] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.004250][T16945] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 314.011476][T16945] FAT-fs (loop4): Filesystem has been set read-only [ 314.035126][T16945] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 314.055301][T16945] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 314.072207][T16945] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 314.088300][T16945] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 314.103166][T16945] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 314.118104][T16945] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 314.132930][T16945] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 314.147898][T16945] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 314.162980][T16945] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 314.177997][T16945] FAT-fs (loop4): error, clusters badly computed (11 != 10) [ 314.193087][T16945] FAT-fs (loop4): error, clusters badly computed (12 != 11) [ 314.208077][T16945] FAT-fs (loop4): error, clusters badly computed (13 != 12) [ 314.223202][T16945] FAT-fs (loop4): error, clusters badly computed (14 != 13) [ 314.238090][T16945] FAT-fs (loop4): error, clusters badly computed (15 != 14) [ 314.253663][T16945] FAT-fs (loop4): error, clusters badly computed (16 != 15) [ 314.409411][T16959] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48270 - 0 [ 314.418293][T16959] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48270 - 0 [ 314.427149][T16959] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48270 - 0 [ 314.436028][T16959] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48270 - 0 [ 314.484492][T16959] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 58554 - 0 [ 314.493312][T16959] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 58554 - 0 [ 314.502125][T16959] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 58554 - 0 [ 314.510982][T16959] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 58554 - 0 [ 314.553871][T16959] geneve2: entered promiscuous mode [ 314.559119][T16959] geneve2: entered allmulticast mode [ 314.575808][T16959] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 58554 - 0 [ 314.584903][T16959] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 58554 - 0 [ 314.593989][T16959] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 58554 - 0 [ 314.602985][T16959] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 58554 - 0 [ 314.614413][T16959] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 48270 - 0 [ 314.623415][T16959] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 48270 - 0 [ 314.632472][T16959] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 48270 - 0 [ 314.641541][T16959] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 48270 - 0 [ 314.793589][T16963] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 314.824469][T16963] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 314.899276][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.011162][T16982] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 315.064209][T16981] loop2: detected capacity change from 0 to 8192 [ 315.083643][T16981] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.100142][T16981] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 315.107344][T16981] FAT-fs (loop2): Filesystem has been set read-only [ 315.116830][T16981] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 315.124663][T16981] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 315.132045][T16981] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 315.141490][T16981] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 315.148881][T16981] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 315.157789][T16981] FAT-fs (loop2): error, clusters badly computed (7 != 6) [ 315.166450][T16981] FAT-fs (loop2): error, clusters badly computed (8 != 7) [ 315.175724][T16981] FAT-fs (loop2): error, clusters badly computed (9 != 8) [ 315.183000][T16981] FAT-fs (loop2): error, clusters badly computed (10 != 9) [ 315.199260][T16981] FAT-fs (loop2): error, clusters badly computed (11 != 10) [ 315.206810][T16981] FAT-fs (loop2): error, clusters badly computed (12 != 11) [ 315.214432][T16981] FAT-fs (loop2): error, clusters badly computed (13 != 12) [ 315.222270][T16981] FAT-fs (loop2): error, clusters badly computed (14 != 13) [ 315.230594][T16981] FAT-fs (loop2): error, clusters badly computed (15 != 14) [ 315.238362][T16981] FAT-fs (loop2): error, clusters badly computed (16 != 15) [ 315.370555][T16992] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 315.405295][T16992] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 315.841333][T17024] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 315.880591][T17024] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 316.690387][T17063] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.794330][T17071] loop4: detected capacity change from 0 to 8192 [ 316.804806][T17071] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.820877][T17071] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 316.828026][T17071] FAT-fs (loop4): Filesystem has been set read-only [ 316.835805][T17071] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 316.844605][T17071] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 316.852045][T17071] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 316.861085][T17071] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 316.868328][T17071] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 316.875529][T17071] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 316.885684][T17071] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 316.893440][T17071] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 316.905395][T17071] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 316.912805][T17071] FAT-fs (loop4): error, clusters badly computed (11 != 10) [ 316.923572][T17071] FAT-fs (loop4): error, clusters badly computed (12 != 11) [ 316.932543][T17071] FAT-fs (loop4): error, clusters badly computed (13 != 12) [ 316.947556][T17071] FAT-fs (loop4): error, clusters badly computed (14 != 13) [ 316.954980][T17071] FAT-fs (loop4): error, clusters badly computed (15 != 14) [ 316.965300][T17071] FAT-fs (loop4): error, clusters badly computed (16 != 15) [ 317.027789][T17083] loop2: detected capacity change from 0 to 512 [ 317.056662][T17083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.075081][T17083] ext4 filesystem being mounted at /root/syzkaller-testdir3506767491/syzkaller.i4ZAC8/30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.101566][T16618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.316858][T17096] loop2: detected capacity change from 0 to 128 [ 317.324652][T17096] FAT-fs (loop2): Directory bread(block 11554) failed [ 317.334107][T17096] FAT-fs (loop2): Directory bread(block 11555) failed [ 317.344215][T17096] FAT-fs (loop2): Directory bread(block 11556) failed [ 317.354267][T17096] FAT-fs (loop2): Directory bread(block 11557) failed [ 317.363475][T17096] FAT-fs (loop2): Directory bread(block 11558) failed [ 317.373669][T17096] FAT-fs (loop2): Directory bread(block 11559) failed [ 317.380967][T17096] FAT-fs (loop2): Directory bread(block 11560) failed [ 317.388539][T17096] FAT-fs (loop2): Directory bread(block 11561) failed [ 317.399745][T17096] FAT-fs (loop2): Directory bread(block 11562) failed [ 317.406880][T17096] FAT-fs (loop2): Directory bread(block 11563) failed [ 317.492930][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 317.492943][ T29] audit: type=1326 audit(1717010215.228:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.548597][ T29] audit: type=1326 audit(1717010215.228:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.572843][ T29] audit: type=1326 audit(1717010215.265:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55ac224c67 code=0x7ffc0000 [ 317.596947][ T29] audit: type=1326 audit(1717010215.265:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.621152][ T29] audit: type=1326 audit(1717010215.265:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.645307][ T29] audit: type=1326 audit(1717010215.265:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.669397][ T29] audit: type=1326 audit(1717010215.265:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.693502][ T29] audit: type=1326 audit(1717010215.265:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.717583][ T29] audit: type=1326 audit(1717010215.265:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.741808][ T29] audit: type=1326 audit(1717010215.265:17037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac222ee9 code=0x7ffc0000 [ 317.897627][T17119] SELinux: Context system_ is not valid (left unmapped). [ 317.910844][T17117] loop4: detected capacity change from 0 to 8192 [ 317.919334][T17117] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.946500][T17117] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 317.953728][T17117] FAT-fs (loop4): Filesystem has been set read-only [ 317.961374][T17117] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 317.975068][T17117] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 317.982360][T17117] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 317.992729][T17117] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 318.000170][T17117] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 318.007532][T17117] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 318.014921][T17117] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 318.034794][T17117] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 318.045916][T17117] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 318.053259][T17117] FAT-fs (loop4): error, clusters badly computed (11 != 10) [ 318.060672][T17117] FAT-fs (loop4): error, clusters badly computed (12 != 11) [ 318.071259][T17117] FAT-fs (loop4): error, clusters badly computed (13 != 12) [ 318.078753][T17117] FAT-fs (loop4): error, clusters badly computed (14 != 13) [ 318.094347][T17117] FAT-fs (loop4): error, clusters badly computed (15 != 14) [ 318.101893][T17117] FAT-fs (loop4): error, clusters badly computed (16 != 15) [ 318.776712][T17148] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 318.800951][T17148] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.045993][T17178] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 319.061799][T17178] loop2: detected capacity change from 0 to 256 [ 319.076519][T17178] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.143699][T17181] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 319.434943][T17205] loop2: detected capacity change from 0 to 2048 [ 319.460427][T17205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.476455][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.497521][T17205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 319.515373][T17205] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 319.527620][T17205] EXT4-fs (loop2): This should not happen!! Data will be lost [ 319.527620][T17205] [ 319.537330][T17205] EXT4-fs (loop2): Total free blocks count 0 [ 319.543305][T17205] EXT4-fs (loop2): Free/Dirty block details [ 319.549340][T17205] EXT4-fs (loop2): free_blocks=2415919104 [ 319.555174][T17205] EXT4-fs (loop2): dirty_blocks=16 [ 319.560346][T17205] EXT4-fs (loop2): Block reservation details [ 319.566343][T17205] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 319.574432][T17214] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 319.952704][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.072396][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.112726][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.167364][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.202565][T17235] wg0 speed is unknown, defaulting to 1000 [ 320.227147][ T41] bridge_slave_1: left allmulticast mode [ 320.232861][ T41] bridge_slave_1: left promiscuous mode [ 320.238496][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.248296][ T41] bridge_slave_0: left allmulticast mode [ 320.253993][ T41] bridge_slave_0: left promiscuous mode [ 320.259719][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.361648][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.374071][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.384603][ T41] bond0 (unregistering): Released all slaves [ 320.445873][T17235] chnl_net:caif_netlink_parms(): no params data found [ 320.487391][ T41] hsr_slave_0: left promiscuous mode [ 320.493599][ T41] hsr_slave_1: left promiscuous mode [ 320.501265][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.508649][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.516484][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.523948][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.535995][ T41] veth1_macvtap: left promiscuous mode [ 320.541497][ T41] veth0_macvtap: left promiscuous mode [ 320.547045][ T41] veth1_vlan: left promiscuous mode [ 320.552290][ T41] veth0_vlan: left promiscuous mode [ 320.656617][ T41] team0 (unregistering): Port device team_slave_1 removed [ 320.669073][ T41] team0 (unregistering): Port device team_slave_0 removed [ 320.741666][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.748897][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.758091][T17235] bridge_slave_0: entered allmulticast mode [ 320.766608][T17235] bridge_slave_0: entered promiscuous mode [ 320.777163][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.784285][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.791418][T17235] bridge_slave_1: entered allmulticast mode [ 320.800474][T17235] bridge_slave_1: entered promiscuous mode [ 320.837624][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.857770][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.882747][T17235] team0: Port device team_slave_0 added [ 320.891081][T17258] dummy0: entered promiscuous mode [ 320.897656][T17258] dummy0: left promiscuous mode [ 320.925568][T17235] team0: Port device team_slave_1 added [ 320.942451][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.949453][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.975430][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.986594][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.993553][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.019492][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.065052][T17235] hsr_slave_0: entered promiscuous mode [ 321.072311][T17235] hsr_slave_1: entered promiscuous mode [ 321.084693][T17235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.099894][T17235] Cannot create hsr debugfs directory [ 321.197170][T17266] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 321.204628][T17266] vhci_hcd: invalid port number 219 [ 321.209839][T17266] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 321.416176][T17235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.425636][T17235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.434159][T17235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.443050][T17235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.486533][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.503988][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.515224][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.522325][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.537634][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.544768][ T6297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.629619][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.709520][T17235] veth0_vlan: entered promiscuous mode [ 321.718419][T17235] veth1_vlan: entered promiscuous mode [ 321.737114][T17235] veth0_macvtap: entered promiscuous mode [ 321.744779][T17235] veth1_macvtap: entered promiscuous mode [ 321.756488][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.767015][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.776813][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.787289][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.797140][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.807563][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.817400][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.828008][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.837861][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.848363][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.858181][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.868617][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.878499][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.888933][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.898766][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.909243][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.921978][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.932907][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.943526][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.953420][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.963981][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.973840][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.984402][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.994236][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.004687][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.014616][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.025033][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.034872][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.045321][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.055138][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.065586][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.075400][T17235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.085810][T17235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.099232][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.109603][T17235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.118408][T17235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.127138][T17235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.135867][T17235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.272021][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.401921][T17309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.463692][T17316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.567528][T17324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.667343][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.825056][T17349] IPVS: persistence engine module ip_vs_pe_ not found [ 322.826972][T17347] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.005330][T17366] loop2: detected capacity change from 0 to 1024 [ 323.014102][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 323.024756][T17366] ext4: Unknown parameter 'appraise_type' [ 323.788323][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 324.059774][T17449] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.201397][T17454] pim6reg1: entered promiscuous mode [ 324.206737][T17454] pim6reg1: entered allmulticast mode [ 324.348007][T17466] loop2: detected capacity change from 0 to 1764 [ 324.355895][T17466] ISOFS: unable to read i-node block [ 324.361223][T17466] isofs_fill_super: get root inode failed [ 327.663135][T17517] loop2: detected capacity change from 0 to 2048 [ 327.726770][T17517] Alternate GPT is invalid, using primary GPT. [ 327.733010][T17517] loop2: p1 p2 p3 [ 329.716449][T17527] loop2: detected capacity change from 0 to 512 [ 329.724884][T17527] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.732105][T17527] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 329.742909][T17527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 329.750841][T17527] System zones: 1-12 [ 329.755623][T17527] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 329.771407][T17527] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 329.785642][T17527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.809254][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.902480][T17533] ebtables: ebtables: counters copy to user failed while replacing table [ 331.198008][T17555] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.478159][T17561] 9pnet_fd: Insufficient options for proto=fd [ 331.714410][T10746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.781778][T10746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.849982][T10746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.905605][T17565] wg0 speed is unknown, defaulting to 1000 [ 331.915408][T10746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.995241][T10746] bridge_slave_1: left allmulticast mode [ 332.000902][T10746] bridge_slave_1: left promiscuous mode [ 332.006588][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.017742][T10746] bridge_slave_0: left allmulticast mode [ 332.023501][T10746] bridge_slave_0: left promiscuous mode [ 332.029184][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.107808][T10746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.118469][T10746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.128512][T10746] bond0 (unregistering): Released all slaves [ 332.140196][T17565] chnl_net:caif_netlink_parms(): no params data found [ 332.199199][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.206352][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.213921][T17565] bridge_slave_0: entered allmulticast mode [ 332.220770][T17565] bridge_slave_0: entered promiscuous mode [ 332.227901][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.235012][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.242156][T17565] bridge_slave_1: entered allmulticast mode [ 332.248737][T17565] bridge_slave_1: entered promiscuous mode [ 332.271508][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.286882][T10746] hsr_slave_0: left promiscuous mode [ 332.302465][T10746] hsr_slave_1: left promiscuous mode [ 332.308119][T10746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.315546][T10746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.331193][T10746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.338606][T10746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.351695][T10746] veth1_macvtap: left promiscuous mode [ 332.357201][T10746] veth0_macvtap: left promiscuous mode [ 332.362810][T10746] veth1_vlan: left promiscuous mode [ 332.368113][T10746] veth0_vlan: left promiscuous mode [ 332.472286][T10746] team0 (unregistering): Port device team_slave_1 removed [ 332.483674][T10746] team0 (unregistering): Port device team_slave_0 removed [ 332.524981][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.548750][T17565] team0: Port device team_slave_0 added [ 332.555516][T17565] team0: Port device team_slave_1 added [ 332.577539][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.584558][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.610689][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.622057][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.629013][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.654962][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.684044][T17565] hsr_slave_0: entered promiscuous mode [ 332.692868][T17565] hsr_slave_1: entered promiscuous mode [ 332.698872][T17565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.706437][T17565] Cannot create hsr debugfs directory [ 333.007304][T17565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.017376][T17565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.038853][T17565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.058744][T17565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.124870][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.147986][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.160782][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.167900][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.193878][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.201071][ T6312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.271716][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.359705][T17565] veth0_vlan: entered promiscuous mode [ 333.367941][T17565] veth1_vlan: entered promiscuous mode [ 333.393465][T17565] veth0_macvtap: entered promiscuous mode [ 333.406045][T17565] veth1_macvtap: entered promiscuous mode [ 333.417384][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.427948][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.437806][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.448389][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.458252][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.468753][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.478613][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.489072][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.498953][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.509441][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.519325][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.529817][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.539635][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.550074][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.559924][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.570475][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.582788][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.591208][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.601717][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.611640][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.622169][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.632060][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.642503][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.652320][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.662736][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.672564][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.683008][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.692845][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.703321][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.713137][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.723645][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.733523][T17565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.743940][T17565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.756490][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.808047][T17565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.816914][T17565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.825647][T17565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.834331][T17565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.977045][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 333.977066][ T29] audit: type=1400 audit(1717010230.439:17337): avc: denied { setattr } for pid=17637 comm="syz-executor.1" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 334.019190][T17626] wg0 speed is unknown, defaulting to 1000 [ 334.130128][T17626] chnl_net:caif_netlink_parms(): no params data found [ 334.130831][ T29] audit: type=1400 audit(1717010230.587:17338): avc: denied { ioctl } for pid=17648 comm="syz-executor.1" path="socket:[70454]" dev="sockfs" ino=70454 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.227415][ T29] audit: type=1400 audit(1717010230.679:17339): avc: denied { module_load } for pid=17653 comm="syz-executor.1" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=70458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 334.254325][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.261472][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.268695][T17626] bridge_slave_0: entered allmulticast mode [ 334.277466][T17626] bridge_slave_0: entered promiscuous mode [ 334.284696][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.291786][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.301574][T17626] bridge_slave_1: entered allmulticast mode [ 334.308402][T17626] bridge_slave_1: entered promiscuous mode [ 334.330837][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.343973][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.384499][T17626] team0: Port device team_slave_0 added [ 334.391382][T17626] team0: Port device team_slave_1 added [ 334.413379][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.420337][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.446434][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.464570][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.471570][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.497488][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.531166][T17626] hsr_slave_0: entered promiscuous mode [ 334.537334][T17626] hsr_slave_1: entered promiscuous mode [ 334.543486][T17626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.551040][T17626] Cannot create hsr debugfs directory [ 334.623278][T17626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.674937][T17626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.731757][T17626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.800035][T17626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.893904][T17626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.905876][T17626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.914705][T17626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.925047][T17626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.988684][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.005566][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.018240][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.025388][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.058151][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.065367][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.132720][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.225190][T17626] veth0_vlan: entered promiscuous mode [ 335.235959][T17626] veth1_vlan: entered promiscuous mode [ 335.260543][T17626] veth0_macvtap: entered promiscuous mode [ 335.269272][T17626] veth1_macvtap: entered promiscuous mode [ 335.284979][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.295555][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.305592][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.316138][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.326013][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.336454][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.346284][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.356736][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.366584][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.377325][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.387295][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.397721][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.407572][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.418085][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.427882][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.438321][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.448274][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.458761][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.471545][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.483815][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.494268][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.504080][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.514632][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.524576][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.535069][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.544974][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.555462][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.565328][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.575758][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.585574][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.595999][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.605830][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.616265][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.626078][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.636536][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.646351][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.656815][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.670761][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.683461][T17626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.692348][T17626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.701065][T17626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.709832][T17626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.219532][T17713] loop0: detected capacity change from 0 to 1024 [ 336.227470][T17713] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 336.237581][T17713] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 337.434670][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.464226][ T29] audit: type=1400 audit(1717010233.660:17340): avc: denied { watch } for pid=17739 comm="syz-executor.1" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=70796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 338.199366][T17764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 338.256047][T17768] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 338.337742][T17775] loop2: detected capacity change from 0 to 2048 [ 338.358264][T17775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.373358][T17775] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.398453][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.633689][T17798] loop2: detected capacity change from 0 to 2048 [ 338.649560][T17798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.680284][T17798] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.719187][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.742137][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.839716][T17809] loop2: detected capacity change from 0 to 2048 [ 338.866896][T17809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.881792][T17809] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.906376][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.275510][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.303242][T17822] loop0: detected capacity change from 0 to 512 [ 339.311275][T17822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 339.322444][T17822] EXT4-fs (loop0): 1 truncate cleaned up [ 339.328698][T17822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.344531][T17822] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: overlapping e_value [ 339.358968][T17822] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.0: unable to update i_inline_off [ 339.372825][T17822] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: overlapping e_value [ 339.394969][T17626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.486684][T17829] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.761644][T17854] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.834627][T17856] loop0: detected capacity change from 0 to 2048 [ 339.843224][T17862] loop1: detected capacity change from 0 to 2048 [ 339.861495][T17856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.889228][T17862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.929086][T17626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.950628][T17565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.003723][T17874] SELinux: Context :yz1b߱ULo笁k-@;Qik;M- is not valid (left unmapped). [ 340.014349][ T29] audit: type=1400 audit(1717010236.023:17341): avc: denied { relabelto } for pid=17873 comm="syz-executor.2" name="file0" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=3A797A31621ADFB1BD55D74C6FE7AC81106BCE2DF540BB9D3BE8F6FF5104AA69926B1B3BDD4DA2E12D0ED8DE [ 340.060723][T17878] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.195838][T17896] loop2: detected capacity change from 0 to 2048 [ 340.198331][T17894] loop1: detected capacity change from 0 to 2048 [ 340.219394][T17896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.220773][T17894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.257927][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.275113][T17565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.376635][T17910] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.450694][ T29] audit: type=1326 audit(1717010236.420:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.484851][ T29] audit: type=1326 audit(1717010236.448:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.509085][ T29] audit: type=1326 audit(1717010236.448:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.533182][ T29] audit: type=1326 audit(1717010236.448:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.557426][ T29] audit: type=1326 audit(1717010236.448:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.581612][ T29] audit: type=1326 audit(1717010236.448:17347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59aee9 code=0x7ffc0000 [ 340.605822][ T29] audit: type=1326 audit(1717010236.448:17348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd9a598667 code=0x7ffc0000 [ 340.629953][ T29] audit: type=1326 audit(1717010236.448:17349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd9a55e329 code=0x7ffc0000 [ 340.654070][ T29] audit: type=1326 audit(1717010236.448:17350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd9a598667 code=0x7ffc0000 [ 340.709762][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.987895][T17936] loop1: detected capacity change from 0 to 8192 [ 341.032167][T17936] loop1: p1 p2 p4[EZD] [ 341.036540][T17936] loop1: p1 size 16128 extends beyond EOD, truncated [ 341.043814][T17936] loop1: p2 size 2130728454 extends beyond EOD, truncated [ 341.051385][T17936] loop1: p4 size 65536 extends beyond EOD, truncated [ 342.166003][T17964] loop2: detected capacity change from 0 to 8192 [ 342.233575][T17964] loop2: p1 p2 p4[EZD] [ 342.237844][T17964] loop2: p1 size 16128 extends beyond EOD, truncated [ 342.267990][T17964] loop2: p2 size 2130728454 extends beyond EOD, truncated [ 342.281064][T17964] loop2: p4 size 65536 extends beyond EOD, truncated [ 342.337593][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.437406][T17972] loop2: detected capacity change from 0 to 512 [ 342.464528][T17972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 342.499228][T17972] EXT4-fs (loop2): 1 truncate cleaned up [ 342.512260][T17972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.553392][T17972] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: overlapping e_value [ 342.586688][T17972] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.2: unable to update i_inline_off [ 342.615100][T17972] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: overlapping e_value [ 342.660877][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.989142][T17992] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.009422][ T3133] bridge_slave_1: left allmulticast mode [ 343.015237][ T3133] bridge_slave_1: left promiscuous mode [ 343.020863][ T3133] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.034639][T17992] vhci_hcd: default hub control req: 0000 v0080 i0000 l5 [ 343.057695][ T3133] bridge_slave_0: left allmulticast mode [ 343.063447][ T3133] bridge_slave_0: left promiscuous mode [ 343.069303][ T3133] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.100938][T17995] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.108295][T17995] vhci_hcd: default hub control req: 0000 v0080 i0000 l5 [ 343.239070][T17999] loop2: detected capacity change from 0 to 2048 [ 343.255683][ T3133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.274680][ T3133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.285083][ T3133] bond0 (unregistering): Released all slaves [ 343.297963][T17999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.342410][T17235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.388111][ T3133] hsr_slave_0: left promiscuous mode [ 343.393873][ T3133] hsr_slave_1: left promiscuous mode [ 343.399626][ T3133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.407134][ T3133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.419262][ T3133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.426893][ T3133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.435867][T18007] loop1: detected capacity change from 0 to 764 [ 343.445275][ T3133] veth1_macvtap: left promiscuous mode [ 343.450859][ T3133] veth0_macvtap: left promiscuous mode [ 343.456395][ T3133] veth1_vlan: left promiscuous mode [ 343.461656][ T3133] veth0_vlan: left promiscuous mode [ 343.516490][T18009] loop2: detected capacity change from 0 to 8192 [ 343.554884][T18009] loop2: p1 p2 p4[EZD] [ 343.559996][T18009] loop2: p1 size 16128 extends beyond EOD, truncated [ 343.575145][T18009] loop2: p2 size 2130728454 extends beyond EOD, truncated [ 343.592191][T18009] loop2: p4 size 65536 extends beyond EOD, truncated [ 343.618417][T18015] loop1: detected capacity change from 0 to 256 [ 343.653949][ T3133] team0 (unregistering): Port device team_slave_1 removed [ 343.673590][ T3133] team0 (unregistering): Port device team_slave_0 removed [ 343.684704][ T970] kernel write not supported for file bpf-prog (pid: 970 comm: kworker/0:2) [ 343.735612][T18015] vlan2: entered promiscuous mode [ 343.740692][T18015] macvtap0: entered promiscuous mode [ 343.746156][T18015] vlan2: entered allmulticast mode [ 343.751310][T18015] macvtap0: entered allmulticast mode [ 343.756733][T18015] veth0_macvtap: entered allmulticast mode [ 343.764987][T18015] team0: Device vlan2 is up. Set it down before adding it as a team port [ 343.775912][T18015] macvtap0: left allmulticast mode [ 343.781093][T18015] veth0_macvtap: left allmulticast mode [ 343.786734][T18015] macvtap0: left promiscuous mode [ 344.070537][T18038] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.474294][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.532446][T18055] loop1: detected capacity change from 0 to 512 [ 344.550194][T18055] EXT4-fs: Ignoring removed oldalloc option [ 344.556234][T18055] EXT4-fs: Ignoring removed i_version option [ 344.588558][T18055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 344.620871][T18055] EXT4-fs (loop1): too many log groups per flexible block group [ 344.628656][T18055] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 344.648926][T18055] EXT4-fs (loop1): mount failed [ 345.118223][T18073] loop1: detected capacity change from 0 to 512 [ 345.151985][T18073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.179779][T18073] ext4 filesystem being mounted at /root/syzkaller-testdir4097817229/syzkaller.O8KIUG/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.203195][T18073] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor.1: path /root/syzkaller-testdir4097817229/syzkaller.O8KIUG/63/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 345.295151][T17565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.432743][T18082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 345.528163][ T6125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.702917][ T6125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.844299][ T6125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.945464][ T6125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.968192][T18089] wg0 speed is unknown, defaulting to 1000 [ 346.049120][ T6125] bridge_slave_1: left allmulticast mode [ 346.054882][ T6125] bridge_slave_1: left promiscuous mode [ 346.060564][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.080935][ T6125] bridge_slave_0: left allmulticast mode [ 346.086698][ T6125] bridge_slave_0: left promiscuous mode [ 346.092408][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.254734][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.269302][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.288930][ T6125] bond0 (unregistering): Released all slaves [ 346.340885][T18089] chnl_net:caif_netlink_parms(): no params data found [ 346.391133][ T6125] hsr_slave_0: left promiscuous mode [ 346.403134][ T6125] hsr_slave_1: left promiscuous mode [ 346.411542][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.418979][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.440061][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.447625][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.472258][ T6125] veth1_macvtap: left promiscuous mode [ 346.477749][ T6125] veth0_macvtap: left promiscuous mode [ 346.483514][ T6125] veth1_vlan: left promiscuous mode [ 346.488783][ T6125] veth0_vlan: left promiscuous mode [ 346.633758][ T6125] team0 (unregistering): Port device team_slave_1 removed [ 346.645285][ T6125] team0 (unregistering): Port device team_slave_0 removed [ 346.703927][T18111] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.716835][T18111] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 346.787509][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 346.787522][ T29] audit: type=1400 audit(1717010242.272:17370): avc: denied { setattr } for pid=18120 comm="syz-executor.1" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 346.829776][T18089] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.836922][T18089] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.865899][T18089] bridge_slave_0: entered allmulticast mode [ 346.878063][T18089] bridge_slave_0: entered promiscuous mode [ 346.911985][T18089] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.919176][T18089] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.962819][T18089] bridge_slave_1: entered allmulticast mode [ 346.970920][T18131] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.972116][T18089] bridge_slave_1: entered promiscuous mode [ 347.012500][T18089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.025845][T18089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.051913][T18139] loop1: detected capacity change from 0 to 512 [ 347.063917][T18089] team0: Port device team_slave_0 added [ 347.090960][T18089] team0: Port device team_slave_1 added [ 347.099674][T18139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.112431][T18139] ext4 filesystem being mounted at /root/syzkaller-testdir4097817229/syzkaller.O8KIUG/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.137283][T18139] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor.1: path /root/syzkaller-testdir4097817229/syzkaller.O8KIUG/75/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 347.183505][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.198431][T17565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.208055][T18145] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 347.224710][T18089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.231801][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.257813][T18089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.273441][T18089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.280395][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.306373][T18089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.363066][T18150] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.413659][T18089] hsr_slave_0: entered promiscuous mode [ 347.419689][T18089] hsr_slave_1: entered promiscuous mode [ 347.427029][T18089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.435514][T18089] Cannot create hsr debugfs directory [ 347.576451][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.600366][T18160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 347.700270][T18168] loop0: detected capacity change from 0 to 256 [ 347.743562][T18089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.756400][T18089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.766486][T18089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.784473][T18089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.831059][T18089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.844846][T18089] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.856944][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.864092][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.890760][T18089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.901179][T18089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.908313][T18172] loop0: detected capacity change from 0 to 256 [ 347.915593][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.925043][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.000572][T18089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.146853][T18089] veth0_vlan: entered promiscuous mode [ 348.158484][T18089] veth1_vlan: entered promiscuous mode [ 348.176317][T18089] veth0_macvtap: entered promiscuous mode [ 348.195074][T18194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.212910][T18089] veth1_macvtap: entered promiscuous mode [ 348.223331][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.234058][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.243911][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.254382][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.264199][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.274648][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.284501][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.294979][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.304850][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.315332][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.325345][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.335785][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.345627][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.356130][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.366133][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.376582][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.388707][T18089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.397205][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.407686][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.417561][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.428178][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.438138][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.448631][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.458449][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.468871][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.478783][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.489239][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.499067][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.509499][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.519308][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.529734][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.539633][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.551300][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.563181][T18089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.582776][T18194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.606442][T18196] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.621199][T18089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.629997][T18089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.638779][T18089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.647591][T18089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.682301][T18194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.777681][T18194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.875343][T18194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.886992][T18194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.896966][T18210] loop1: detected capacity change from 0 to 256 [ 348.909346][T18194] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.923860][T18194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.997244][T18218] TCP: out of memory -- consider tuning tcp_mem [ 349.004510][T18218] ------------[ cut here ]------------ [ 349.009991][T18218] WARNING: CPU: 1 PID: 18218 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x440/0x450 [ 349.019604][T18218] Modules linked in: [ 349.023531][T18218] CPU: 1 PID: 18218 Comm: syz-executor.1 Tainted: G W 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 349.031777][T18220] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 349.035527][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 349.055173][T18218] RIP: 0010:inet_sock_destruct+0x440/0x450 [ 349.061046][T18218] Code: 0f 0b 90 e9 ab fe ff ff e8 dd 58 f6 fc 90 0f 0b 90 e9 c5 fe ff ff e8 cf 58 f6 fc 90 0f 0b 90 e9 df fe ff ff e8 c1 58 f6 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 349.080721][T18218] RSP: 0018:ffffc90001397cf0 EFLAGS: 00010283 [ 349.086800][T18218] RAX: ffffffff843877af RBX: 0000000080000000 RCX: 0000000000040000 [ 349.094800][T18218] RDX: ffffc900022ad000 RSI: 0000000000000fc0 RDI: 0000000000000fc1 [ 349.102801][T18218] RBP: ffff8881076840c0 R08: ffffffff843876e0 R09: 0000000000000000 [ 349.110777][T18218] R10: 0001ffffffffffff R11: 0001888107684220 R12: ffff888107684000 [ 349.118767][T18218] R13: ffff8881076843a8 R14: ffff8881076840e8 R15: ffff8881076840d2 [ 349.126781][T18218] FS: 00007fed173f26c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 349.135743][T18218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.142411][T18218] CR2: 0000001b2d825000 CR3: 0000000115f7a000 CR4: 00000000003506f0 [ 349.150408][T18218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.158490][T18218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.166476][T18218] Call Trace: [ 349.169783][T18218] [ 349.172715][T18218] ? __warn+0x13c/0x350 [ 349.176893][T18218] ? report_bug+0x315/0x420 [ 349.181460][T18218] ? inet_sock_destruct+0x440/0x450 [ 349.186673][T18218] ? handle_bug+0x3e/0x70 [ 349.191098][T18218] ? exc_invalid_op+0x1a/0x50 [ 349.195824][T18218] ? asm_exc_invalid_op+0x1a/0x20 [ 349.200923][T18218] ? inet_sock_destruct+0x370/0x450 [ 349.206131][T18218] ? inet_sock_destruct+0x43f/0x450 [ 349.211363][T18218] ? inet_sock_destruct+0x440/0x450 [ 349.216573][T18218] ? __pfx_inet_sock_destruct+0x10/0x10 [ 349.222159][T18218] __sk_destruct+0x3d/0x440 [ 349.226832][T18218] __sk_free+0x284/0x2d0 [ 349.231300][T18218] sk_free+0x39/0x70 [ 349.235248][T18218] tcp_close+0x8b/0xc0 [ 349.239343][T18218] inet_release+0xce/0xf0 [ 349.244017][T18218] sock_close+0x68/0x150 [ 349.248270][T18218] ? __pfx_sock_close+0x10/0x10 [ 349.253231][T18218] __fput+0x2c2/0x660 [ 349.257315][T18218] ____fput+0x15/0x20 [ 349.261304][T18218] task_work_run+0x13a/0x1a0 [ 349.265929][T18218] syscall_exit_to_user_mode+0xbe/0x130 [ 349.271522][T18218] do_syscall_64+0xd6/0x1c0 [ 349.276129][T18218] ? clear_bhb_loop+0x55/0xb0 [ 349.280868][T18218] ? clear_bhb_loop+0x55/0xb0 [ 349.285586][T18218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.291575][T18218] RIP: 0033:0x7fed18077ee9 [ 349.296026][T18218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 349.315687][T18218] RSP: 002b:00007fed173f20c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 349.324159][T18218] RAX: 0000000000000000 RBX: 00007fed181aefa0 RCX: 00007fed18077ee9 [ 349.332162][T18218] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 349.340163][T18218] RBP: 00007fed180c447f R08: 0000000000000000 R09: 0000000000000000 [ 349.348132][T18218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.356184][T18218] R13: 000000000000000b R14: 00007fed181aefa0 R15: 00007fffa50ef928 [ 349.364254][T18218] [ 349.367275][T18218] ---[ end trace 0000000000000000 ]--- [ 349.432993][T18224] usb usb5: usbfs: process 18224 (syz-executor.1) did not claim interface 0 before use [ 349.558869][T18224] batadv0: entered promiscuous mode [ 349.718005][T18237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.740744][T18241] loop4: detected capacity change from 0 to 512 [ 349.748707][T18241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.755697][T18241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.785924][T18237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.802798][T18241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 349.810763][T18241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 349.821251][T18241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 349.827713][T18241] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 349.837072][T18241] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 349.851643][T18241] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 349.862853][T18241] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 349.889726][T18241] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 349.902368][T18237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.924804][T18241] EXT4-fs (loop4): 1 truncate cleaned up [ 349.934155][T18241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.962493][T18089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.980858][T18237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.050457][T18247] TCP: out of memory -- consider tuning tcp_mem [ 350.096695][T18237] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.108343][T18237] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.122776][T18237] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.136898][T18237] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.231964][T18263] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 350.296001][T18271] TCP: out of memory -- consider tuning tcp_mem [ 350.351001][T18278] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.404370][T18278] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.427566][T18284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.458788][T18278] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.512166][T18278] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.117915][T16029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.380942][ T6125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.391310][ T6125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47840 - 0 [ 352.485772][ T6125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.496147][ T6125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47840 - 0 [ 352.550624][ T6125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.561097][ T6125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47840 - 0 [ 352.600346][T18286] wg0 speed is unknown, defaulting to 1000 [ 352.609150][ T6125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.619455][ T6125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47840 - 0 [ 352.695006][T18286] chnl_net:caif_netlink_parms(): no params data found [ 352.708820][ T6125] bridge_slave_1: left allmulticast mode [ 352.715480][ T6125] bridge_slave_1: left promiscuous mode [ 352.721167][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.728954][ T6125] bridge_slave_0: left allmulticast mode [ 352.734645][ T6125] bridge_slave_0: left promiscuous mode [ 352.740339][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.864061][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.874807][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.887739][ T6125] bond0 (unregistering): Released all slaves [ 352.924126][T18286] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.931314][T18286] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.940526][T18286] bridge_slave_0: entered allmulticast mode [ 352.946942][T18286] bridge_slave_0: entered promiscuous mode [ 352.955471][T18286] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.962563][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.972702][T18286] bridge_slave_1: entered allmulticast mode [ 352.979277][T18286] bridge_slave_1: entered promiscuous mode [ 353.000323][T18286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.011856][ T6125] hsr_slave_0: left promiscuous mode [ 353.019350][ T6125] hsr_slave_1: left promiscuous mode [ 353.025089][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.032511][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.042811][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.050240][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.061553][ T6125] veth1_macvtap: left promiscuous mode [ 353.067161][ T6125] veth0_macvtap: left promiscuous mode [ 353.072691][ T6125] veth1_vlan: left promiscuous mode [ 353.078022][ T6125] veth0_vlan: left promiscuous mode [ 353.165210][ T6125] team0 (unregistering): Port device team_slave_1 removed [ 353.179387][ T6125] team0 (unregistering): Port device team_slave_0 removed [ 353.224898][T18286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.234094][ T6297] wg0 speed is unknown, defaulting to 1000 [ 353.253420][T18286] team0: Port device team_slave_0 added [ 353.260056][T18286] team0: Port device team_slave_1 added [ 353.276432][T18286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.283453][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.309540][T18286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.322677][T18286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.329685][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.355603][T18286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.384963][T18286] hsr_slave_0: entered promiscuous mode [ 353.391038][T18286] hsr_slave_1: entered promiscuous mode [ 353.397130][T18286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.405375][T18286] Cannot create hsr debugfs directory [ 353.721059][T18286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.731659][T18286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.740667][T18286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.749402][T18286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.799002][T18286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.812844][T18286] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.824584][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.831836][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.854812][T18286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.865239][T18286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.880260][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.887401][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.950455][T18286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.010798][T18284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.055737][T18286] veth0_vlan: entered promiscuous mode [ 354.066272][T18286] veth1_vlan: entered promiscuous mode [ 354.082895][T18286] veth0_macvtap: entered promiscuous mode [ 354.092685][T18286] veth1_macvtap: entered promiscuous mode [ 354.105016][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.115501][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.125375][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.135929][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.145781][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.156317][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.166249][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.176810][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.186760][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.197196][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.207011][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.217449][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.227260][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.237689][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.247487][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.257912][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.270348][T18286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.281821][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.292360][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.302304][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.312850][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.322759][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.333222][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.343108][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.353541][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.363459][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.373930][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.383759][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.394302][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.404119][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.414540][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.424354][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.434864][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.447044][T18286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.457074][T18286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.465953][T18286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.474784][T18286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.483485][T18286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.553346][T18284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.639058][T18284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.699736][T18323] loop3: detected capacity change from 0 to 2048 [ 354.730157][T18284] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.742704][T18284] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.753062][T18323] loop3: p1 < > p4 [ 354.760382][T18284] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.769027][T18323] loop3: p4 size 8388608 extends beyond EOD, truncated [ 354.778791][T18284] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.757813][T18348] loop4: detected capacity change from 0 to 2048 [ 355.788532][T18348] loop4: p1 < > p4 [ 355.792905][T18348] loop4: p4 size 8388608 extends beyond EOD, truncated [ 355.954020][T18358] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 356.162476][T18370] loop3: detected capacity change from 0 to 1024 [ 356.270470][T18370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.282755][T18370] ext4 filesystem being mounted at /root/syzkaller-testdir3646563387/syzkaller.NTENW9/16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.333466][T18278] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.374547][T18278] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.408549][T18278] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.436163][T18278] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.621130][T18395] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 357.189567][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.272975][T18401] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.339407][T18401] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.402895][T18401] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.446184][T18401] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.516530][T18401] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.530073][T18401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.541336][T18401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.555094][T18401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.634942][T18407] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.780730][ T29] audit: type=1400 audit(1717010254.261:17371): avc: denied { nlmsg_read } for pid=18430 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 359.846483][T18437] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.856133][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.835431][T18472] team0: Port device syz_tun added [ 361.893128][T18476] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.946002][T18482] loop0: detected capacity change from 0 to 1024 [ 361.964395][T18482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.995555][T17626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.059612][T18487] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 362.067720][T18487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.245932][T18497] loop0: detected capacity change from 0 to 256 [ 363.877856][T18517] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.205383][T18525] loop0: detected capacity change from 0 to 256 [ 364.277164][T18529] loop0: detected capacity change from 0 to 512 [ 364.284772][T18529] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 364.295104][T18529] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: comm syz-executor.0: inode #67108864: comm syz-executor.0: iget: illegal inode # [ 364.309730][T18529] EXT4-fs (loop0): no journal found [ 364.314966][T18529] EXT4-fs (loop0): can't get journal size [ 364.343105][T18529] EXT4-fs (loop0): failed to initialize system zone (-22) [ 364.350422][T18529] EXT4-fs (loop0): mount failed [ 364.515617][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.525082][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.502253][T18548] loop0: detected capacity change from 0 to 128 [ 366.512610][T18548] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.525319][T18548] ext4 filesystem being mounted at /root/syzkaller-testdir2786063775/syzkaller.uTDovX/118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.591777][T17626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.734429][ T29] audit: type=1326 audit(1717010260.676:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.766942][T18558] loop0: detected capacity change from 0 to 256 [ 366.775082][ T29] audit: type=1326 audit(1717010260.704:17373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.799273][ T29] audit: type=1326 audit(1717010260.704:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.823373][ T29] audit: type=1326 audit(1717010260.704:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.847468][ T29] audit: type=1326 audit(1717010260.704:17376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.871618][ T29] audit: type=1326 audit(1717010260.704:17377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dadb33ee9 code=0x7ffc0000 [ 366.895726][ T29] audit: type=1326 audit(1717010260.704:17378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dadb31667 code=0x7ffc0000 [ 366.919874][ T29] audit: type=1326 audit(1717010260.704:17379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9dadaf7329 code=0x7ffc0000 [ 366.943933][ T29] audit: type=1326 audit(1717010260.704:17380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dadb31667 code=0x7ffc0000 [ 366.967946][ T29] audit: type=1326 audit(1717010260.704:17381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18557 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9dadaf7329 code=0x7ffc0000 [ 366.995378][T18558] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.202915][T18576] loop0: detected capacity change from 0 to 128 [ 368.211352][T18576] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.223606][T18576] ext4 filesystem being mounted at /root/syzkaller-testdir2786063775/syzkaller.uTDovX/130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.288604][T17626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.356430][T18581] loop0: detected capacity change from 0 to 512 [ 368.364009][T18581] EXT4-fs: Ignoring removed orlov option [ 368.372458][T18581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 368.380406][T18581] System zones: 1-12 [ 368.384636][T18581] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 368.399794][T18581] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 368.412342][T18581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.448632][T17626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.523168][T18584] loop0: detected capacity change from 0 to 256 [ 368.545513][T18584] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.705275][T18595] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.750856][T18599] loop0: detected capacity change from 0 to 512 [ 368.760506][T18599] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.779407][T18599] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad extended attribute block 19 [ 368.792634][T18599] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 368.807493][T18599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.823443][T18599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 368.838849][T18599] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 0 [ 370.185169][ C0] ================================================================== [ 370.193270][ C0] BUG: KCSAN: data-race in next_expiry_recalc / update_process_times [ 370.201344][ C0] [ 370.203684][ C0] write to 0xffff888237c1de98 of 8 bytes by interrupt on cpu 1: [ 370.211309][ C0] next_expiry_recalc+0x187/0x1e0 [ 370.216353][ C0] __run_timer_base+0x2ee/0x640 [ 370.221213][ C0] timer_expire_remote+0x2f/0x40 [ 370.226163][ C0] tmigr_handle_remote+0x4ee/0x910 [ 370.231276][ C0] run_timer_softirq+0x5f/0x70 [ 370.236043][ C0] handle_softirqs+0xc3/0x280 [ 370.240724][ C0] irq_exit_rcu+0x3e/0x90 [ 370.245066][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 370.250735][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.256737][ C0] __tsan_read2+0x4/0x180 [ 370.261079][ C0] __io_commit_cqring_flush+0x20/0x1c0 [ 370.266545][ C0] __io_cqring_overflow_flush+0x464/0x470 [ 370.272276][ C0] __se_sys_io_uring_enter+0x11c6/0x15a0 [ 370.277908][ C0] __x64_sys_io_uring_enter+0x78/0x90 [ 370.283290][ C0] x64_sys_call+0x25ab/0x2d70 [ 370.287970][ C0] do_syscall_64+0xc9/0x1c0 [ 370.292485][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.298392][ C0] [ 370.300711][ C0] read to 0xffff888237c1de98 of 8 bytes by interrupt on cpu 0: [ 370.308245][ C0] update_process_times+0x8a/0x180 [ 370.313351][ C0] tick_nohz_handler+0x250/0x2d0 [ 370.318295][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 370.323498][ C0] hrtimer_interrupt+0x210/0x7b0 [ 370.328451][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 370.334362][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 370.340002][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.346002][ C0] acpi_safe_halt+0x21/0x30 [ 370.350519][ C0] acpi_idle_do_entry+0x1d/0x30 [ 370.355393][ C0] acpi_idle_enter+0x96/0xb0 [ 370.360004][ C0] cpuidle_enter_state+0xcf/0x270 [ 370.365039][ C0] cpuidle_enter+0x40/0x70 [ 370.369482][ C0] do_idle+0x195/0x230 [ 370.373560][ C0] cpu_startup_entry+0x25/0x30 [ 370.378327][ C0] rest_init+0xef/0xf0 [ 370.382408][ C0] start_kernel+0x581/0x5e0 [ 370.386934][ C0] x86_64_start_reservations+0x2a/0x30 [ 370.392400][ C0] x86_64_start_kernel+0x94/0xa0 [ 370.397360][ C0] common_startup_64+0x12c/0x137 [ 370.402332][ C0] [ 370.404657][ C0] value changed: 0x00000001000019cd -> 0x00000001000019ce [ 370.411930][ C0] [ 370.414252][ C0] Reported by Kernel Concurrency Sanitizer on: [ 370.420419][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 370.431611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 370.441660][ C0] ================================================================== 2024/05/29 19:17:47 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.1.182:53274->10.128.0.163:30030: write: connection reset by peer [ 374.284961][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 374.284977][ T29] audit: type=1400 audit(1717010267.654:17763): avc: denied { write } for pid=3073 comm="syz-fuzzer" path="pipe:[1661]" dev="pipefs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 374.326333][T18286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.329273][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.393899][T18089] team0: Port device syz_tun removed [ 374.437979][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0