last executing test programs: 18.653731835s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000), 0x1) 18.604411463s ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000000207010200000000000000000200000a3c00078008000140000000010800014000000001080002"], 0x50}}, 0x0) 18.462593735s ago: executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}], 0x6}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a"], 0x0) 18.411121753s ago: executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 18.286880242s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 18.119207168s ago: executing program 1: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x18, r1, 0x0, &(0x7f0000000000)) 2.172723624s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = memfd_secret(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$usbfs(0x0, 0x4, 0x0) syz_io_uring_setup(0x145f, &(0x7f0000000280)={0x0, 0x1d81, 0x4, 0x3}, &(0x7f0000000140), &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x8800) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000c80)='./file0\x00', 0x210000, &(0x7f0000000480)={[{@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008004}, 0x2004c880) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000000080)=0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=@newqdisc={0xa8, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x5, 0x9}, {0xe, 0x8}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x0, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0xffffffc8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x634}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004811}, 0x20000000) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f00000000c0)="0b002d15e40000f6b0", 0x9, 0xffffffffffffffff}]) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x20002) 1.956716958s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x8, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x80, 0x116, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="000000000800000000000000000000007b8af8ff0000dd00bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioperm(0x0, 0x0, 0x0) ioperm(0x6, 0x6, 0x10000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) close(r2) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x6609, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 1.462513024s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) 1.417835351s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r0, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d000000000000000800000000000000", 0x24) 1.390243525s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = memfd_secret(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$usbfs(0x0, 0x4, 0x0) syz_io_uring_setup(0x145f, &(0x7f0000000280)={0x0, 0x1d81, 0x4, 0x3}, &(0x7f0000000140), &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x8800) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000c80)='./file0\x00', 0x210000, &(0x7f0000000480)={[{@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008004}, 0x2004c880) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000000080)=0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=@newqdisc={0xa8, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x5, 0x9}, {0xe, 0x8}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x0, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0xffffffc8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x634}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004811}, 0x20000000) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f00000000c0)="0b002d15e40000f6b0", 0x9, 0xffffffffffffffff}]) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x20002) 1.322267275s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) 1.116201368s ago: executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) tkill(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @empty}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x80}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x4c}}, 0x0) 1.012339524s ago: executing program 2: ioperm(0x0, 0x2eae, 0xffffffffffffffff) r0 = gettid() setpgid(r0, 0x0) 979.205408ms ago: executing program 2: unshare(0x20040600) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x5, &(0x7f0000000580), 0x4) 902.49431ms ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001020000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r5, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r2}, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x13b, 0xfffffffffffffff9}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 563.893013ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) socket$inet_sctp(0x2, 0x0, 0x84) socket(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x10) memfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000800)=0x6) sendto$unix(r3, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x118) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x4b48, &(0x7f0000000000)) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x0, 0x9, 0x1, 0x1}, 0x48) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x35b, &(0x7f0000000440)="$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") getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 461.764029ms ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) listen(r0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) 380.679771ms ago: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) 328.814769ms ago: executing program 0: ioperm(0x0, 0x2eae, 0xffffffffffffffff) r0 = gettid() setpgid(r0, 0x0) 323.35883ms ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000380)={0x0, 0x1}) 270.889629ms ago: executing program 0: unshare(0x20040600) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x5, &(0x7f0000000580), 0x4) 259.24611ms ago: executing program 4: syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x23, 0x0) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r7, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) r8 = creat(&(0x7f0000000280)='./file1\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="55a5c3adb008a599a69afb189ab163e4bd9496fd180aa2dc4cf7b3c453185a4be105d2c1a27ddf21d4623c924cf1b054c702bfb4fefcb8db626c5b8f086672c8a187612db3fbcff15e080a31fcb7ed0f0b675f0b7dd593e34f8eeda958aef6d29447323d29c1f06ca393eb31dd65b0bb8b35e1400d48fced29d5dd556e3190b6581ebe59c7fc7ab583ac800ec958c12df551dd5c95b07e13003c7a2b101faf4e9c18bbc0de1734bdb6463b81ca70c0f0051e43d36553045e0c2cfc13282acf0b86b106f91c20db6b03b60f1b8a64eaabaf687b5aca", 0xd5}, {&(0x7f0000001740)="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", 0x1000}], 0x2, &(0x7f0000000300), 0x0, 0x8030}}], 0x1, 0x10) write$eventfd(r8, &(0x7f0000000080), 0xfffffe5e) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder-control\x00', 0x2, 0x0) 188.803021ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000700d000000018000180140002006e657464657673696d300000000000000800080000fcffff080009"], 0x4c}}, 0x0) 187.945141ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000034000100000000000400000004"], 0x30}}, 0x0) 124.648331ms ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 84.943227ms ago: executing program 3: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000280)={0x7}, 0x20) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={0xb}, 0x20) 10.340998ms ago: executing program 0: io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xae, 0x0, &(0x7f00000000c0)) 7.253499ms ago: executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800090088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) 0s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) listen(r0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ing interface: batadv_slave_1 [ 260.231981][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.258122][T14570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.293114][T14570] hsr_slave_0: entered promiscuous mode [ 260.304729][T14570] hsr_slave_1: entered promiscuous mode [ 260.325765][T14672] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.342554][ T40] IPVS: stop unused estimator thread 0... [ 260.438006][ T29] audit: type=1400 audit(2000000161.310:39680): avc: denied { getopt } for pid=14676 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.661410][T14570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.680406][T14570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.697507][T14570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.717130][T14570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.737798][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.744950][T14570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.794778][T14570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.807775][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.831869][T14570] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.843354][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.850497][T10442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.863054][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.870125][T10442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.897358][T14570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.907790][T14570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.970274][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.099100][T14570] veth0_vlan: entered promiscuous mode [ 261.109900][T14570] veth1_vlan: entered promiscuous mode [ 261.140404][T14570] veth0_macvtap: entered promiscuous mode [ 261.152373][T14570] veth1_macvtap: entered promiscuous mode [ 261.176443][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.220317][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.230808][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.240775][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.251323][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.261161][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.271645][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.281491][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.291951][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.302025][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.312450][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.322282][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.332863][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.342673][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.353107][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.369303][T14570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.377976][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.388483][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.398407][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.409000][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.418824][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.429329][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.439204][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.449693][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.459501][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.469975][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.479791][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.490285][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.500136][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.510582][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.545671][T14570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.607772][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.650136][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.691269][T14570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.700102][T14570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.708870][T14570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.717622][T14570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.761351][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.793519][T14719] batman_adv: batadv1: Adding interface: netdevsim0 [ 261.800229][T14719] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.834648][T14719] batman_adv: batadv1: Interface activated: netdevsim0 [ 261.886516][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.954398][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.056181][ T50] bridge_slave_1: left allmulticast mode [ 262.061917][ T50] bridge_slave_1: left promiscuous mode [ 262.067802][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.091268][T14738] loop0: detected capacity change from 0 to 512 [ 262.101258][ T50] bridge_slave_0: left allmulticast mode [ 262.106994][ T50] bridge_slave_0: left promiscuous mode [ 262.112699][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.113406][T14738] EXT4-fs: Ignoring removed i_version option [ 262.142155][T14738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 262.183876][T14738] EXT4-fs (loop0): 1 truncate cleaned up [ 262.190085][T14738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.237118][ T29] audit: type=1326 audit(2000000163.110:39681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2e5d5ea9 code=0x0 [ 262.347237][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.363735][ T3179] kernel write not supported for file bpf-prog (pid: 3179 comm: kworker/0:3) [ 262.383847][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.410448][ T50] bond0 (unregistering): Released all slaves [ 262.507749][ T50] hsr_slave_0: left promiscuous mode [ 262.513550][ T50] hsr_slave_1: left promiscuous mode [ 262.531039][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.538565][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.570360][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.577868][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.606388][ T50] veth1_macvtap: left promiscuous mode [ 262.611882][ T50] veth0_macvtap: left promiscuous mode [ 262.617392][ T50] veth1_vlan: left promiscuous mode [ 262.622789][ T50] veth0_vlan: left promiscuous mode [ 262.653060][T14760] netlink: set zone limit has 8 unknown bytes [ 262.800553][ T50] team0 (unregistering): Port device team_slave_1 removed [ 262.821497][ T50] team0 (unregistering): Port device team_slave_0 removed [ 262.913953][T14716] chnl_net:caif_netlink_parms(): no params data found [ 262.925062][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.936839][T13835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.044476][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.051553][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.084325][T14716] bridge_slave_0: entered allmulticast mode [ 263.102599][T14716] bridge_slave_0: entered promiscuous mode [ 263.128438][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.135604][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.158352][T14716] bridge_slave_1: entered allmulticast mode [ 263.171754][T14716] bridge_slave_1: entered promiscuous mode [ 263.199176][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.227785][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.273249][T14782] loop0: detected capacity change from 0 to 1024 [ 263.280933][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.300636][T14782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.323690][T14782] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 263.323853][T14716] team0: Port device team_slave_0 added [ 263.357861][T14716] team0: Port device team_slave_1 added [ 263.391456][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.398651][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.424837][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.444047][ T29] audit: type=1326 audit(2000000164.300:39682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x0 [ 263.514637][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.521583][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.547522][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.651558][T14716] hsr_slave_0: entered promiscuous mode [ 263.665381][T14716] hsr_slave_1: entered promiscuous mode [ 263.682700][T14716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.700135][T14716] Cannot create hsr debugfs directory [ 263.998747][T14716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.014809][T14716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.033198][T14716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.051313][T14716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.129689][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.156847][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.185161][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.192235][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.218392][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.225502][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.285923][T14716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.376545][T14837] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.505204][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.530889][T14716] veth0_vlan: entered promiscuous mode [ 264.547032][T14716] veth1_vlan: entered promiscuous mode [ 264.573088][T14716] veth0_macvtap: entered promiscuous mode [ 264.584036][T14716] veth1_macvtap: entered promiscuous mode [ 264.597321][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.608060][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.617881][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.628304][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.638200][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.648626][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.658605][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.669097][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.679085][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.689577][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.699425][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.709871][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.719692][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.730109][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.757872][T14716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.786744][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.797231][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.807067][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.817739][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.827706][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.838495][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.848492][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.858924][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.868737][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.879231][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.889041][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.899640][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.909484][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.919938][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.931998][T14716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.941964][T14716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.950734][T14716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.959615][T14716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.968502][T14716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.186673][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.421314][T14856] batman_adv: batadv1: Adding interface: netdevsim0 [ 265.428066][T14856] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.624021][T14856] batman_adv: batadv1: Interface activated: netdevsim0 [ 265.883417][T14875] loop1: detected capacity change from 0 to 512 [ 265.961968][T14875] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.978422][T14877] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 266.023916][T14395] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 266.046423][T14881] loop4: detected capacity change from 0 to 512 [ 266.053722][T14881] EXT4-fs: Ignoring removed i_version option [ 266.059697][ T3180] kernel write not supported for file bpf-prog (pid: 3180 comm: kworker/1:3) [ 266.071647][T14881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.101855][T14886] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.124033][T14881] EXT4-fs (loop4): 1 truncate cleaned up [ 266.130026][T14881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.188078][ T29] audit: type=1326 audit(2000000167.060:39683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x0 [ 266.328236][ T29] audit: type=1400 audit(2000000167.200:39684): avc: denied { getopt } for pid=14897 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 266.667243][T14903] loop0: detected capacity change from 0 to 8192 [ 266.734236][T14903] loop0: p1 p2 p3 p4 [ 266.742745][T14903] loop0: p1 size 108922248 extends beyond EOD, truncated [ 266.757095][T14903] loop0: p2 start 861536256 is beyond EOD, truncated [ 266.763819][T14903] loop0: p3 start 851968 is beyond EOD, truncated [ 266.770252][T14903] loop0: p4 size 65536 extends beyond EOD, truncated [ 266.839470][T14716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.958518][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.074539][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.083920][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.093223][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.183234][ T29] audit: type=1400 audit(2000000168.050:39685): avc: denied { connect } for pid=14926 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.209132][T14927] tipc: Started in network mode [ 267.214033][T14927] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 267.223389][T14927] tipc: Enabled bearer , priority 10 [ 267.262733][T14931] loop1: detected capacity change from 0 to 512 [ 267.284712][T14931] EXT4-fs: Ignoring removed i_version option [ 267.300952][T14931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.325399][T14931] EXT4-fs (loop1): 1 truncate cleaned up [ 267.339210][T14931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.350877][T14930] loop0: detected capacity change from 0 to 8192 [ 267.379152][ T29] audit: type=1326 audit(2000000168.250:39686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x0 [ 267.424751][T14930] loop0: p1 p2 p3 p4 [ 267.428817][T14930] loop0: p1 size 108922248 extends beyond EOD, truncated [ 267.447706][T14930] loop0: p2 start 861536256 is beyond EOD, truncated [ 267.454466][T14930] loop0: p3 start 851968 is beyond EOD, truncated [ 267.460934][T14930] loop0: p4 size 65536 extends beyond EOD, truncated [ 267.590228][T14935] loop0: detected capacity change from 0 to 512 [ 267.612680][T14935] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.655429][T13835] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 267.802322][ T29] audit: type=1326 audit(2000000168.670:39687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x0 [ 268.106702][T14395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.225058][ T3179] tipc: Node number set to 4269801488 [ 268.250487][ T29] audit: type=1326 audit(2000000169.120:39688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x0 [ 268.653732][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.663130][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.672470][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.780084][T14964] loop0: detected capacity change from 0 to 512 [ 268.794422][T14966] tipc: Started in network mode [ 268.799338][T14966] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 268.814888][T14964] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.818112][T14966] tipc: Enabled bearer , priority 10 [ 268.857557][T13835] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 269.037026][T14973] loop0: detected capacity change from 0 to 8192 [ 269.112063][T14973] loop0: p1 p2 p3 p4 [ 269.116113][T14973] loop0: p1 size 108922248 extends beyond EOD, truncated [ 269.134426][T14973] loop0: p2 start 861536256 is beyond EOD, truncated [ 269.141174][T14973] loop0: p3 start 851968 is beyond EOD, truncated [ 269.147632][T14973] loop0: p4 size 65536 extends beyond EOD, truncated [ 269.156307][ T29] audit: type=1326 audit(2000000170.030:39689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.180570][ T29] audit: type=1326 audit(2000000170.030:39690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.274057][ T29] audit: type=1326 audit(2000000170.030:39691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.298256][ T29] audit: type=1326 audit(2000000170.030:39692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.322518][ T29] audit: type=1326 audit(2000000170.030:39693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.346579][ T29] audit: type=1326 audit(2000000170.030:39694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd2c8ef2ea9 code=0x7ffc0000 [ 269.375996][T14980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.494735][T14987] loop1: detected capacity change from 0 to 1024 [ 269.522273][T14987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.591652][T14395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.802197][T15008] serio: Serial port ptm0 [ 269.858552][T15008] loop0: detected capacity change from 0 to 512 [ 269.885544][T15008] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 269.904760][T15008] EXT4-fs (loop0): orphan cleanup on readonly fs [ 269.924387][T15008] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 269.944018][ T3179] tipc: Node number set to 4269801488 [ 269.949516][T15008] ext4_test_bit(bit=14, block=18) = 1 [ 269.955036][T15008] is_bad_inode(inode)=0 [ 269.959235][T15008] NEXT_ORPHAN(inode)=1023 [ 269.963545][T15008] max_ino=32 [ 269.966825][T15008] i_nlink=0 [ 269.984203][T15008] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 270.014143][T15008] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 270.030763][T15008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.065213][T15008] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 270.096622][T15008] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 270.131199][T13835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.233041][T15018] loop0: detected capacity change from 0 to 1024 [ 270.264864][T15018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.323383][T15023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 270.330027][T15023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.337483][T15023] vhci_hcd vhci_hcd.0: Device attached [ 270.348499][T13835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.423455][T15024] vhci_hcd: connection closed [ 270.423662][ T28] vhci_hcd: stop threads [ 270.432619][ T28] vhci_hcd: release socket [ 270.437058][ T28] vhci_hcd: disconnect device [ 270.565615][ T29] audit: type=1400 audit(2000000171.440:39695): avc: denied { write } for pid=15033 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 270.594399][T15034] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 270.775619][T15042] serio: Serial port ptm0 [ 270.817842][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.837076][T15042] loop0: detected capacity change from 0 to 512 [ 270.884265][T15042] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 270.974697][T15042] EXT4-fs (loop0): orphan cleanup on readonly fs [ 270.985703][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.010325][T15042] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 271.033394][T15042] ext4_test_bit(bit=14, block=18) = 1 [ 271.038818][T15042] is_bad_inode(inode)=0 [ 271.042959][T15042] NEXT_ORPHAN(inode)=1023 [ 271.047300][T15042] max_ino=32 [ 271.050489][T15042] i_nlink=0 [ 271.064135][T15042] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 271.082812][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.104845][T15042] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 271.114384][T15042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 271.148080][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.184040][T15042] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 271.220658][T15042] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 271.275896][T13835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.295257][ T28] bridge_slave_1: left allmulticast mode [ 271.300912][ T28] bridge_slave_1: left promiscuous mode [ 271.306645][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.318918][ T28] bridge_slave_0: left allmulticast mode [ 271.324692][ T28] bridge_slave_0: left promiscuous mode [ 271.330373][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.496635][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.516259][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.536699][ T28] bond0 (unregistering): Released all slaves [ 271.595044][ T28] tipc: Disabling bearer [ 271.600271][ T28] tipc: Left network mode [ 271.616839][T15048] chnl_net:caif_netlink_parms(): no params data found [ 271.672370][ T28] hsr_slave_0: left promiscuous mode [ 271.686031][ T28] hsr_slave_1: left promiscuous mode [ 271.697024][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.704469][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.735951][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.743419][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.762435][ T28] veth1_macvtap: left promiscuous mode [ 271.768026][ T28] veth0_macvtap: left promiscuous mode [ 271.773522][ T28] veth1_vlan: left promiscuous mode [ 271.778795][ T28] veth0_vlan: left promiscuous mode [ 271.837195][T15078] loop1: detected capacity change from 0 to 1024 [ 271.857944][T15078] EXT4-fs: Ignoring removed orlov option [ 271.863682][T15078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.895994][T15078] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 271.905778][T15078] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 271.973903][ T28] team0 (unregistering): Port device team_slave_1 removed [ 271.995576][ T28] team0 (unregistering): Port device team_slave_0 removed [ 272.078616][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.085796][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.103210][T15048] bridge_slave_0: entered allmulticast mode [ 272.118242][T15048] bridge_slave_0: entered promiscuous mode [ 272.131550][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.138732][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.162835][T15048] bridge_slave_1: entered allmulticast mode [ 272.174569][T15048] bridge_slave_1: entered promiscuous mode [ 272.211182][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.251838][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.288649][T15048] team0: Port device team_slave_0 added [ 272.299592][T15048] team0: Port device team_slave_1 added [ 272.330818][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.337894][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.364005][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.377875][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.384868][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.410888][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.451658][T15048] hsr_slave_0: entered promiscuous mode [ 272.462188][T15048] hsr_slave_1: entered promiscuous mode [ 272.474505][T15048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.482055][T15048] Cannot create hsr debugfs directory [ 272.797948][T15048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.816765][T15048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.835987][T15048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.854707][T15048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.916756][T15048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.936987][T15048] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.957827][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.964919][ T3184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.002962][T15048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.013492][T15048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.030751][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.037830][ T3184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.162819][T15048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.215666][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 273.215708][ T29] audit: type=1326 audit(2000000174.090:39697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2e5d5ea9 code=0x0 [ 273.439069][T15048] veth0_vlan: entered promiscuous mode [ 273.463756][T15048] veth1_vlan: entered promiscuous mode [ 273.494090][T15048] veth0_macvtap: entered promiscuous mode [ 273.501250][T15048] veth1_macvtap: entered promiscuous mode [ 273.528881][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.539417][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.549280][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.559884][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.569776][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.580578][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.590471][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.600933][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.610774][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.621191][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.631010][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.641546][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.651527][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.662023][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.673846][T15048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.684784][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.695236][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.705444][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.715881][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.725758][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.736221][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.746224][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.756747][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.766637][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.777055][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.786914][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.797397][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.807240][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.817726][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.829499][T15048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.839257][T15048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.848045][T15048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.856773][T15048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.865488][T15048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.948744][T15155] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.148273][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.383958][T15181] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.428100][T15185] loop4: detected capacity change from 0 to 128 [ 274.461287][T15185] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.481053][T15185] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.519654][T15189] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.776441][T15212] loop1: detected capacity change from 0 to 128 [ 274.793499][T15212] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.808230][T15212] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.497926][T15242] loop0: detected capacity change from 0 to 736 [ 275.542750][T15242] rock: directory entry would overflow storage [ 275.548973][T15242] rock: sig=0x5850, size=36, remaining=14 [ 275.811429][T15260] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.129950][T15274] loop1: detected capacity change from 0 to 736 [ 276.188652][T15274] rock: directory entry would overflow storage [ 276.194895][T15274] rock: sig=0x5850, size=36, remaining=14 [ 276.316941][ T29] audit: type=1326 audit(2000000177.190:39698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x0 [ 277.044041][T15296] loop4: detected capacity change from 0 to 256 [ 277.066263][ T29] audit: type=1400 audit(2000000177.940:39699): avc: denied { ioctl } for pid=15295 comm="syz-executor.4" path="socket:[60222]" dev="sockfs" ino=60222 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.118491][ T40] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.143096][T15281] chnl_net:caif_netlink_parms(): no params data found [ 277.170388][ T40] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.249066][ T40] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.321844][T15281] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.329016][T15281] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.357000][T15281] bridge_slave_0: entered allmulticast mode [ 277.368904][T15281] bridge_slave_0: entered promiscuous mode [ 277.385184][ T40] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.404078][T15281] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.411138][T15281] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.440103][T15281] bridge_slave_1: entered allmulticast mode [ 277.453073][T15281] bridge_slave_1: entered promiscuous mode [ 277.491839][T15281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.508751][T15281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.539342][ T40] bridge_slave_1: left allmulticast mode [ 277.545078][ T40] bridge_slave_1: left promiscuous mode [ 277.550783][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.576539][ T40] bridge_slave_0: left allmulticast mode [ 277.582190][ T40] bridge_slave_0: left promiscuous mode [ 277.588023][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.766851][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.785510][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.805954][ T40] bond0 (unregistering): Released all slaves [ 277.834803][T15281] team0: Port device team_slave_0 added [ 277.843201][T15281] team0: Port device team_slave_1 added [ 277.885007][ T40] tipc: Disabling bearer [ 277.890231][ T40] tipc: Left network mode [ 277.890515][T15281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.901546][T15281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.927543][T15281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.958899][T15281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.965948][T15281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.992070][T15281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.032827][ T40] hsr_slave_0: left promiscuous mode [ 278.040425][ T40] hsr_slave_1: left promiscuous mode [ 278.047271][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.054680][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.064402][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.072067][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.098276][ T40] veth1_macvtap: left promiscuous mode [ 278.103763][ T40] veth0_macvtap: left promiscuous mode [ 278.109330][ T40] veth1_vlan: left promiscuous mode [ 278.114941][ T40] veth0_vlan: left promiscuous mode [ 278.270991][ T40] team0 (unregistering): Port device team_slave_1 removed [ 278.285235][ T40] team0 (unregistering): Port device team_slave_0 removed [ 278.359003][T15281] hsr_slave_0: entered promiscuous mode [ 278.367716][T15281] hsr_slave_1: entered promiscuous mode [ 278.382674][T15281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.390392][T15281] Cannot create hsr debugfs directory [ 278.733460][T15281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.759443][T15281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.775812][T15281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.794555][T15281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.870332][T15281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.890222][T15281] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.900436][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.907677][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.925197][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.932320][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.963276][T15281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.007578][T15281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.071941][T15281] veth0_vlan: entered promiscuous mode [ 279.087349][T15281] veth1_vlan: entered promiscuous mode [ 279.087936][T15347] loop1: detected capacity change from 0 to 128 [ 279.118078][T15281] veth0_macvtap: entered promiscuous mode [ 279.128431][T15281] veth1_macvtap: entered promiscuous mode [ 279.131786][T15347] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.141438][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.154111][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.162087][T15347] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.163891][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.163906][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.163918][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.163928][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.163939][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.224379][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.234185][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.244607][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.254449][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.265162][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.274996][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.285417][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.297326][T15281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.307858][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.318507][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.328540][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.339094][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.348928][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.359349][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.369250][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.379679][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.389499][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.400137][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.409992][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.420424][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.430297][T15281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.440737][T15281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.453248][T15281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.463850][T15281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.472765][T15281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.481576][T15281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.490408][T15281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.602925][T15362] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.644012][ T29] audit: type=1326 audit(2000000180.510:39700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 279.668244][ T29] audit: type=1326 audit(2000000180.510:39701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 279.692350][ T29] audit: type=1326 audit(2000000180.510:39702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 279.919216][T15377] hub 6-0:1.0: USB hub found [ 279.925576][T15377] hub 6-0:1.0: 8 ports detected [ 280.221518][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.228698][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.256215][T15415] bridge0: entered promiscuous mode [ 280.269112][T15413] hub 6-0:1.0: USB hub found [ 280.288385][T15413] hub 6-0:1.0: 8 ports detected [ 280.867496][T15478] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.950512][ T29] audit: type=1326 audit(2000000181.820:39703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.006202][ T29] audit: type=1326 audit(2000000181.850:39704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.030323][ T29] audit: type=1326 audit(2000000181.850:39705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.054555][ T29] audit: type=1326 audit(2000000181.850:39706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.093232][ T29] audit: type=1326 audit(2000000181.960:39707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.117410][ T29] audit: type=1326 audit(2000000181.960:39708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 281.141537][ T29] audit: type=1326 audit(2000000181.960:39709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 283.703054][T15561] ip6gretap1: entered promiscuous mode [ 284.032116][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.605315][T15604] ip6gretap1: entered promiscuous mode [ 284.891843][T15619] macvlan2: entered promiscuous mode [ 284.897300][T15619] macvlan2: entered allmulticast mode [ 284.923123][T15619] bridge0: entered allmulticast mode [ 284.935599][T15619] team0: Port device macvlan2 added [ 284.948100][T15620] bridge0: port 3(netdevsim2) entered blocking state [ 284.954838][T15620] bridge0: port 3(netdevsim2) entered disabled state [ 284.984137][T15620] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 284.992049][T15620] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 285.331326][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.562213][T15651] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 286.013129][ T29] kauditd_printk_skb: 3164 callbacks suppressed [ 286.013143][ T29] audit: type=1326 audit(2000000186.870:42874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 286.043743][ T29] audit: type=1326 audit(2000000186.870:42875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 286.067829][ T29] audit: type=1326 audit(2000000186.870:42876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 286.092505][ T29] audit: type=1326 audit(2000000186.870:42877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ae299ea9 code=0x7ffc0000 [ 286.117814][ T29] audit: type=1326 audit(2000000186.940:42878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9ae297627 code=0x7ffc0000 [ 286.141880][ T29] audit: type=1326 audit(2000000186.940:42879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9ae25d309 code=0x7ffc0000 [ 286.165911][ T29] audit: type=1326 audit(2000000186.940:42880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9ae297627 code=0x7ffc0000 [ 286.190186][ T29] audit: type=1326 audit(2000000186.940:42881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9ae25d309 code=0x7ffc0000 [ 286.214386][ T29] audit: type=1326 audit(2000000186.940:42882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9ae297627 code=0x7ffc0000 [ 286.238761][ T29] audit: type=1326 audit(2000000186.940:42883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9ae25d309 code=0x7ffc0000 [ 286.596354][T15698] xt_cluster: node mask cannot exceed total number of nodes [ 286.816416][T15718] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 286.897846][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.965799][T15726] xt_cluster: node mask cannot exceed total number of nodes [ 287.269176][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.294645][T15763] wg2: entered promiscuous mode [ 288.299542][T15763] wg2: entered allmulticast mode [ 288.516303][T15777] syzkaller0: entered promiscuous mode [ 288.521854][T15777] syzkaller0: entered allmulticast mode [ 288.526730][T15782] loop1: detected capacity change from 0 to 512 [ 288.536844][T15782] EXT4-fs: Ignoring removed oldalloc option [ 288.575218][T15782] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 288.583122][T15782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c11c, mo2=0002] [ 288.617275][T15782] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 288.626781][T15782] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 288.695313][T15782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.712782][T15782] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 288.724392][T15782] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 288.734460][T15782] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 288.812976][T14395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.886612][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.899777][T15791] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.049884][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.082808][T15808] loop0: detected capacity change from 0 to 136 [ 289.149037][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.264619][ T40] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 289.270317][T15825] loop4: detected capacity change from 0 to 512 [ 289.280520][ T40] batman_adv: batadv1: Removing interface: netdevsim0 [ 289.288161][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.301234][T15825] EXT4-fs: Ignoring removed oldalloc option [ 289.392515][T15825] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 289.400495][T15825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c11c, mo2=0002] [ 289.421321][ T40] bridge_slave_1: left allmulticast mode [ 289.427066][ T40] bridge_slave_1: left promiscuous mode [ 289.432786][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.478939][ T40] bridge_slave_0: left allmulticast mode [ 289.484680][ T40] bridge_slave_0: left promiscuous mode [ 289.490306][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.502913][T15825] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 289.512446][T15825] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 289.522298][T15825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 289.572693][T15825] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 289.584322][T15825] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 289.594445][T15825] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 289.667652][T15048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.681220][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.696671][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.708611][ T40] bond0 (unregistering): Released all slaves [ 289.800044][T15800] chnl_net:caif_netlink_parms(): no params data found [ 289.841278][ T40] hsr_slave_0: left promiscuous mode [ 289.856527][ T40] hsr_slave_1: left promiscuous mode [ 289.863825][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.871294][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.908456][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.915927][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.955365][ T40] veth1_macvtap: left promiscuous mode [ 289.960896][ T40] veth0_macvtap: left promiscuous mode [ 289.966555][ T40] veth1_vlan: left promiscuous mode [ 289.971781][ T40] veth0_vlan: left promiscuous mode [ 290.025557][T15868] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.099890][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.177633][ T40] team0 (unregistering): Port device team_slave_1 removed [ 290.197109][T15878] loop4: detected capacity change from 0 to 128 [ 290.203704][ T40] team0 (unregistering): Port device team_slave_0 removed [ 290.409850][T15800] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.417130][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.445867][T15800] bridge_slave_0: entered allmulticast mode [ 290.462375][T15800] bridge_slave_0: entered promiscuous mode [ 290.492873][T15800] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.499962][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.531999][T15800] bridge_slave_1: entered allmulticast mode [ 290.545456][T15800] bridge_slave_1: entered promiscuous mode [ 290.585097][T15817] chnl_net:caif_netlink_parms(): no params data found [ 290.631234][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.672817][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.690852][T15817] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.698002][T15817] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.726429][T15817] bridge_slave_0: entered allmulticast mode [ 290.741303][T15817] bridge_slave_0: entered promiscuous mode [ 290.775660][T15817] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.782822][T15817] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.800212][T15817] bridge_slave_1: entered allmulticast mode [ 290.810810][T15817] bridge_slave_1: entered promiscuous mode [ 290.825181][T15800] team0: Port device team_slave_0 added [ 290.844057][T15817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.855927][T15800] team0: Port device team_slave_1 added [ 290.866304][T15906] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.881688][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.888682][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.914572][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.944684][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.951638][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.977809][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.991917][T15817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.033034][T15817] team0: Port device team_slave_0 added [ 291.044330][T15800] hsr_slave_0: entered promiscuous mode [ 291.050414][T15800] hsr_slave_1: entered promiscuous mode [ 291.059228][T15800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.066815][T15800] Cannot create hsr debugfs directory [ 291.073632][T15817] team0: Port device team_slave_1 added [ 291.086087][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.141871][T15817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.148958][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.174932][T15817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.186763][T15817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.193718][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.219641][T15817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.246939][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.318667][T15817] hsr_slave_0: entered promiscuous mode [ 291.344397][T15817] hsr_slave_1: entered promiscuous mode [ 291.350737][T15817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.362467][T15817] Cannot create hsr debugfs directory [ 291.375947][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.463566][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.548015][ T40] bridge_slave_1: left allmulticast mode [ 291.553706][ T40] bridge_slave_1: left promiscuous mode [ 291.559422][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.579666][ T40] bridge_slave_0: left allmulticast mode [ 291.585349][ T40] bridge_slave_0: left promiscuous mode [ 291.591086][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.786721][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.808342][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.829447][ T40] bond0 (unregistering): Released all slaves [ 291.949025][T15800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.971731][T15800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.988657][ T40] hsr_slave_0: left promiscuous mode [ 291.998650][ T40] hsr_slave_1: left promiscuous mode [ 292.024950][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.032379][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.047607][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.055056][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.066341][ T40] veth1_macvtap: left promiscuous mode [ 292.071821][ T40] veth0_macvtap: left promiscuous mode [ 292.077465][ T40] veth1_vlan: left promiscuous mode [ 292.082757][ T40] veth0_vlan: left promiscuous mode [ 292.170392][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.234992][ T40] team0 (unregistering): Port device team_slave_1 removed [ 292.247566][ T40] team0 (unregistering): Port device team_slave_0 removed [ 292.327909][T15800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.339597][T15800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.423497][T15800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.446822][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.472069][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.479202][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.495183][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.502359][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.528417][T15800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.538891][T15800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.575601][T15946] loop1: detected capacity change from 0 to 128 [ 292.593623][T15817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.615823][T15817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.624626][T15817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.640983][T15817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.717452][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.772720][T15817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.791306][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.813133][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.820482][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.849793][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.856982][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.904670][T15800] veth0_vlan: entered promiscuous mode [ 292.931012][T15800] veth1_vlan: entered promiscuous mode [ 292.961292][T15800] veth0_macvtap: entered promiscuous mode [ 292.977008][T15800] veth1_macvtap: entered promiscuous mode [ 293.001380][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.012036][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.021867][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.032292][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.042126][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.052554][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.062498][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.073006][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.082841][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.093284][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.103131][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.113632][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.128394][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.138561][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.149093][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.159012][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.169459][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.179304][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.189731][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.199592][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.210012][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.219904][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.230330][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.240194][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.250693][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.263243][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.271884][T15800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.280774][T15800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.289528][T15800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.298438][T15800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.316950][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.483018][T15817] veth0_vlan: entered promiscuous mode [ 293.505752][T15817] veth1_vlan: entered promiscuous mode [ 293.529092][T15817] veth0_macvtap: entered promiscuous mode [ 293.547779][T15817] veth1_macvtap: entered promiscuous mode [ 293.567796][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.578286][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.588161][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.598586][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.608467][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.618905][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.628835][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.639286][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.649128][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.659543][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.669355][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.679778][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.689580][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.700062][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.711392][T15817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.719929][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.730357][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.740174][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.750597][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.761019][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.771442][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.781261][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.791742][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.801588][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.811987][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.821793][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.832294][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.842443][T15817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.852866][T15817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.891069][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.902688][T15981] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.924686][T15817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.933423][T15817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.942177][T15817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.951001][T15817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.086241][T15998] 9pnet_rdma: rdma_create_trans (15998): problem binding to privport: 13 [ 294.205873][T16002] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 294.336214][T16011] loop0: detected capacity change from 0 to 512 [ 294.383454][T16011] EXT4-fs (loop0): 1 truncate cleaned up [ 294.389943][T16011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.423182][T16011] EXT4-fs error (device loop0): dx_make_map:1327: inode #2: block 255: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 294.485402][T16011] EXT4-fs (loop0): Remounting filesystem read-only [ 294.565418][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.758157][T16029] 9pnet_rdma: rdma_create_trans (16029): problem binding to privport: 13 [ 294.840055][T16044] loop0: detected capacity change from 0 to 512 [ 294.922414][T16044] EXT4-fs (loop0): 1 truncate cleaned up [ 294.988933][T16044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.054555][T16044] EXT4-fs error (device loop0): dx_make_map:1327: inode #2: block 255: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 295.089948][T16059] loop3: detected capacity change from 0 to 2048 [ 295.137071][T16044] EXT4-fs (loop0): Remounting filesystem read-only [ 295.144348][T16059] loop3: p1 < > p3 [ 295.150087][T16059] loop3: p3 size 134217728 extends beyond EOD, truncated [ 295.176525][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.194183][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 295.194197][ T29] audit: type=1400 audit(2000000196.050:43151): avc: denied { map } for pid=16058 comm="syz-executor.3" path="/root/syzkaller-testdir1598542175/syzkaller.scAID5/5/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.228737][ T29] audit: type=1400 audit(2000000196.050:43152): avc: denied { execute } for pid=16058 comm="syz-executor.3" path="/root/syzkaller-testdir1598542175/syzkaller.scAID5/5/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.419645][T16081] loop1: detected capacity change from 0 to 128 [ 295.443357][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.484512][T16083] veth1_to_bridge: entered promiscuous mode [ 295.490535][T16083] macvlan3: entered promiscuous mode [ 295.495893][T16083] macvlan3: entered allmulticast mode [ 295.501326][T16083] veth1_to_bridge: entered allmulticast mode [ 295.532019][T16083] veth1_to_bridge: left promiscuous mode [ 295.583913][T16093] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.681987][T16101] loop2: detected capacity change from 0 to 2048 [ 295.730413][T16101] loop2: p1 < > p3 [ 295.738638][T16101] loop2: p3 size 134217728 extends beyond EOD, truncated [ 295.762239][T16111] loop0: detected capacity change from 0 to 512 [ 295.794724][T16111] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 295.809213][T16113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.824432][T16111] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 295.881136][T16121] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.914568][T16111] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 295.963575][T16111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.975423][T16124] loop1: detected capacity change from 0 to 128 [ 295.989888][T16111] ext2 filesystem being mounted at /root/syzkaller-testdir2684808714/syzkaller.I6YGHN/91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.004727][T16128] openvswitch: netlink: ufid size 62 bytes exceeds the range (1, 16) [ 296.012797][T16128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.042348][T16124] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.054538][ T29] audit: type=1400 audit(2000000196.930:43153): avc: denied { create } for pid=16110 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 296.070826][T16128] SELinux: Context *)&^]* is not valid (left unmapped). [ 296.104191][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.120003][ T29] audit: type=1400 audit(2000000196.930:43154): avc: denied { accept } for pid=16126 comm="syz-executor.3" path="socket:[65294]" dev="sockfs" ino=65294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.144010][ T29] audit: type=1400 audit(2000000196.930:43155): avc: denied { relabelfrom } for pid=16126 comm="syz-executor.3" name="UNIX-STREAM" dev="sockfs" ino=65295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 296.168793][ T29] audit: type=1400 audit(2000000196.960:43156): avc: denied { relabelto } for pid=16126 comm="syz-executor.3" name="UNIX-STREAM" dev="sockfs" ino=65295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="*)&^]*" [ 296.194392][T16134] syzkaller0: entered promiscuous mode [ 296.195558][ T29] audit: type=1400 audit(2000000196.970:43157): avc: denied { unlink } for pid=15281 comm="syz-executor.0" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 296.200855][T16134] syzkaller0: entered allmulticast mode [ 296.202692][ T40] syzkaller0: tun_net_xmit 48 [ 296.246207][T16134] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 296.292576][T16134] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 296.298462][T16134] syzkaller0: Linktype set failed because interface is up [ 296.349815][T16144] syzkaller0: tun_net_xmit 1280 [ 296.413016][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.455318][T16150] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 296.463502][T16150] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.472744][T16150] team0: entered promiscuous mode [ 296.477794][T16150] team_slave_0: entered promiscuous mode [ 296.483538][T16150] team_slave_1: entered promiscuous mode [ 296.516601][T16150] bridge0: port 4(team0) entered blocking state [ 296.522959][T16150] bridge0: port 4(team0) entered disabled state [ 296.530786][T16150] team0: entered allmulticast mode [ 296.536117][T16150] team_slave_0: entered allmulticast mode [ 296.541970][T16150] team_slave_1: entered allmulticast mode [ 296.561989][T16150] team0: left allmulticast mode [ 296.566979][T16150] team_slave_0: left allmulticast mode [ 296.572445][T16150] team_slave_1: left allmulticast mode [ 296.587394][T16155] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.642700][T16164] loop1: detected capacity change from 0 to 128 [ 296.691742][T16164] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.866745][T16180] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 297.009201][ T29] audit: type=1326 audit(2000000197.880:43158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16191 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x0 [ 297.038594][T16192] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 297.047164][T16192] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.056489][T16192] team0: entered promiscuous mode [ 297.061587][T16192] team_slave_0: entered promiscuous mode [ 297.067585][T16192] team_slave_1: entered promiscuous mode [ 297.074415][T16195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16195 comm=syz-executor.3 [ 297.108151][T16192] bridge0: port 3(team0) entered blocking state [ 297.114535][T16192] bridge0: port 3(team0) entered disabled state [ 297.129336][T16192] team0: entered allmulticast mode [ 297.134510][T16192] team_slave_0: entered allmulticast mode [ 297.140223][T16192] team_slave_1: entered allmulticast mode [ 297.169728][T16192] bridge0: port 3(team0) entered blocking state [ 297.176072][T16192] bridge0: port 3(team0) entered forwarding state [ 297.235239][T16201] netlink: 166 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.290241][ T3182] IPVS: starting estimator thread 0... [ 297.384434][T16210] IPVS: using max 2688 ests per chain, 134400 per kthread [ 297.445408][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.495570][T16222] loop1: detected capacity change from 0 to 128 [ 297.511224][T16222] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 297.616601][T16227] bio_check_eod: 42 callbacks suppressed [ 297.616615][T16227] syz-executor.1: attempt to access beyond end of device [ 297.616615][T16227] loop1: rw=34817, sector=97, nr_sectors = 260 limit=128 [ 297.695219][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 297.710738][ T50] kworker/u8:3: attempt to access beyond end of device [ 297.710738][ T50] loop1: rw=1, sector=361, nr_sectors = 680 limit=128 [ 297.966219][T16243] loop3: detected capacity change from 0 to 2048 [ 298.045286][T16243] loop3: p1 < > p3 [ 298.052761][T16243] loop3: p3 size 134217728 extends beyond EOD, truncated [ 298.062218][ T29] audit: type=1400 audit(2000000198.930:43159): avc: denied { ioctl } for pid=16250 comm="syz-executor.0" path="socket:[65531]" dev="sockfs" ino=65531 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 298.132510][T16255] loop0: detected capacity change from 0 to 512 [ 298.159272][T16255] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 298.198455][T16255] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 298.236109][T16255] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 298.273868][T16255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.320602][T16255] ext2 filesystem being mounted at /root/syzkaller-testdir2684808714/syzkaller.I6YGHN/105/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.364083][T16263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16263 comm=syz-executor.4 [ 298.438236][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.511912][T16268] loop0: detected capacity change from 0 to 128 [ 298.743776][T16275] loop0: detected capacity change from 0 to 512 [ 298.772731][T16275] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 298.805694][T16275] EXT4-fs (loop0): Remounting filesystem read-only [ 298.850448][T16275] EXT4-fs (loop0): 1 truncate cleaned up [ 298.859015][T16278] openvswitch: netlink: ufid size 62 bytes exceeds the range (1, 16) [ 298.867181][T16278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.884377][T16275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.922629][T16275] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 298.948912][T16275] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.059250][ T29] audit: type=1326 audit(2000000199.930:43160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16289 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x0 [ 299.075766][T16293] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 299.217470][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.356066][T16313] loop4: detected capacity change from 0 to 512 [ 299.377462][T16313] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 299.421759][T16324] loop1: detected capacity change from 0 to 512 [ 299.435731][T16313] EXT4-fs (loop4): Remounting filesystem read-only [ 299.442482][T16313] EXT4-fs (loop4): 1 truncate cleaned up [ 299.444352][T16323] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 299.448728][T16313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.467663][T16313] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 299.476452][T16324] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 299.508125][T16313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.526176][T16324] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 299.567127][T16324] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 299.657550][T16324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.677330][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.758032][T16324] ext2 filesystem being mounted at /root/syzkaller-testdir3539132619/syzkaller.Ln7tGP/193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.895133][T14395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.944872][T16349] loop3: detected capacity change from 0 to 128 [ 299.971255][T16349] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 300.289111][T16391] tun0: tun_chr_ioctl cmd 1074025677 [ 300.297123][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 300.297172][ T29] audit: type=1400 audit(2000000201.160:43163): avc: denied { create } for pid=16386 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.333533][T16391] tun0: linktype set to 769 [ 300.370087][T16391] syzkaller0: entered promiscuous mode [ 300.375722][T16391] syzkaller0: entered allmulticast mode [ 300.527236][T16405] loop3: detected capacity change from 0 to 512 [ 300.556428][T16405] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 300.634121][T16405] EXT4-fs (loop3): Remounting filesystem read-only [ 300.640796][T16405] EXT4-fs (loop3): 1 truncate cleaned up [ 300.673565][T16405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.727811][T16405] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 300.748589][T16405] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.892286][T16423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.956772][T16425] loop4: detected capacity change from 0 to 512 [ 300.994367][T16425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.030705][T16425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c02c, mo2=0002] [ 301.060923][T16425] System zones: 1-12 [ 301.076125][T16425] EXT4-fs (loop4): 1 truncate cleaned up [ 301.089635][T16427] syzkaller0: entered promiscuous mode [ 301.095219][T16427] syzkaller0: entered allmulticast mode [ 301.095534][T16425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.197882][T15048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.319271][T16444] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.360652][T16446] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.487037][T16459] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.693051][T16474] tun0: tun_chr_ioctl cmd 1074025677 [ 301.714851][T16474] tun0: linktype set to 769 [ 301.783164][T16474] syzkaller0: entered promiscuous mode [ 301.788857][T16474] syzkaller0: entered allmulticast mode [ 301.874826][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.876175][T16483] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.936727][T16488] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.060677][T16496] xt_l2tp: missing protocol rule (udp|l2tpip) [ 302.249011][ T29] audit: type=1326 audit(2000000203.120:43164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.273325][ T29] audit: type=1326 audit(2000000203.120:43165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.297876][ T29] audit: type=1326 audit(2000000203.120:43166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.322257][ T29] audit: type=1326 audit(2000000203.120:43167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.346537][ T29] audit: type=1326 audit(2000000203.120:43168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.370860][ T29] audit: type=1326 audit(2000000203.120:43169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.395199][ T29] audit: type=1326 audit(2000000203.120:43170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.419344][ T29] audit: type=1326 audit(2000000203.120:43171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.443585][ T29] audit: type=1326 audit(2000000203.120:43172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5a95ea9 code=0x7fc00000 [ 302.545482][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.594317][T16524] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.666042][T16526] syzkaller0: entered promiscuous mode [ 302.671591][T16526] syzkaller0: entered allmulticast mode [ 302.703057][ T11] syzkaller0: tun_net_xmit 48 [ 302.750094][T16526] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 302.763484][T16526] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 302.769352][T16526] syzkaller0: Linktype set failed because interface is up [ 302.802342][T16526] syzkaller0: tun_net_xmit 1280 [ 302.854353][T16535] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.911115][T16537] gretap0: entered promiscuous mode [ 302.916853][T16537] vlan3: entered promiscuous mode [ 302.945630][T16537] gretap0: left promiscuous mode [ 303.095923][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.198309][T16563] loop3: detected capacity change from 0 to 512 [ 303.234439][T16563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.296500][T16567] loop0: detected capacity change from 0 to 1024 [ 303.311594][T16563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c02c, mo2=0002] [ 303.330156][T16563] System zones: 1-12 [ 303.342993][T16563] EXT4-fs (loop3): 1 truncate cleaned up [ 303.379328][T16563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.395261][T16567] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 303.496095][T15817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.947461][T16600] syzkaller0: entered promiscuous mode [ 303.952960][T16600] syzkaller0: entered allmulticast mode [ 304.466289][T16618] xt_l2tp: missing protocol rule (udp|l2tpip) [ 304.701236][T16630] syzkaller0: entered promiscuous mode [ 304.706810][T16630] syzkaller0: entered allmulticast mode [ 304.954242][T16643] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.101980][T16648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=16648 comm=syz-executor.4 [ 305.589090][T16656] loop0: detected capacity change from 0 to 512 [ 305.640910][T16656] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 305.689505][T16656] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 305.731596][T16656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.777228][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 305.777242][ T29] audit: type=1400 audit(2000000206.650:43299): avc: denied { create } for pid=16655 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 305.828913][ T29] audit: type=1400 audit(2000000206.700:43300): avc: denied { read } for pid=16655 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 305.851787][ T29] audit: type=1400 audit(2000000206.700:43301): avc: denied { rename } for pid=16655 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 305.874684][ T29] audit: type=1400 audit(2000000206.700:43302): avc: denied { unlink } for pid=16655 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 305.915117][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.075117][ T29] audit: type=1326 audit(2000000206.940:43303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.099376][ T29] audit: type=1326 audit(2000000206.940:43304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.123792][ T29] audit: type=1326 audit(2000000206.940:43305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.148001][ T29] audit: type=1326 audit(2000000206.940:43306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.172129][ T29] audit: type=1326 audit(2000000206.940:43307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.197284][ T29] audit: type=1326 audit(2000000206.940:43308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4b99be3ea9 code=0x7ffc0000 [ 306.394834][T16686] loop3: detected capacity change from 0 to 512 [ 306.435670][T16686] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 306.542528][T16686] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 306.593670][T16686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.677158][T15817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.730262][T16695] __nla_validate_parse: 4 callbacks suppressed [ 306.730276][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.831492][T16705] loop2: detected capacity change from 0 to 2048 [ 306.846101][T16705] EXT4-fs: Ignoring removed orlov option [ 306.876691][T16705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.899521][T16705] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.906653][T16711] loop3: detected capacity change from 0 to 1024 [ 306.916336][T16705] EXT4-fs (loop2): Remounting filesystem read-only [ 306.936189][T16711] EXT4-fs: Ignoring removed nobh option [ 306.936498][T15800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.942212][T16711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.965242][T16711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.062467][T16715] loop2: detected capacity change from 0 to 512 [ 307.089839][T15817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.103566][T16715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.150201][T16715] ext4 filesystem being mounted at /root/syzkaller-testdir2426658051/syzkaller.VEOtYb/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.226977][T16715] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 307.265261][T16715] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 307.290717][T16721] gretap0: entered promiscuous mode [ 307.302235][T16715] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 307.302642][T16721] vlan2: entered promiscuous mode [ 307.337118][T16721] gretap0: left promiscuous mode [ 307.345351][T16715] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 307.405550][T15800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.449523][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.492694][T16730] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.645564][T16741] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 307.686259][T16741] can0: slcan on ptm1. [ 307.755373][T16740] can0 (unregistered): slcan off ptm1. [ 307.850168][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.900361][T16760] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.992353][T16766] loop2: detected capacity change from 0 to 1024 [ 308.024951][T16766] EXT4-fs: Ignoring removed nobh option [ 308.038931][T16766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.065866][T16766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.163285][T15800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.329006][T16788] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.331573][T16790] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 308.346717][T16790] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.356106][T16790] NCSI netlink: No device for ifindex 131092 [ 308.369205][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.381004][T16790] wireguard0: entered promiscuous mode [ 308.386583][T16790] wireguard0: entered allmulticast mode [ 308.651261][T16812] loop0: detected capacity change from 0 to 2048 [ 308.681540][T16816] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.700825][T16812] EXT4-fs: Ignoring removed orlov option [ 308.742738][T16812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.798328][T16812] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.826148][T16824] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 308.834368][T16824] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.843817][T16824] NCSI netlink: No device for ifindex 131092 [ 308.856703][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.870053][T16824] wireguard0: entered promiscuous mode [ 308.875574][T16824] wireguard0: entered allmulticast mode [ 308.905441][T16812] EXT4-fs (loop0): Remounting filesystem read-only [ 308.947809][T15281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.659984][T16858] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 309.668357][T16858] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.677834][T16858] NCSI netlink: No device for ifindex 131092 [ 309.694867][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.713184][T16858] wireguard0: entered promiscuous mode [ 309.718791][T16858] wireguard0: entered allmulticast mode [ 310.102859][T16886] loop2: detected capacity change from 0 to 256 [ 310.120826][T16886] FAT-fs (loop2): Unrecognized mount option "nontmtail=0" or missing value [ 310.341016][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.348308][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.382939][T16905] bridge0: entered promiscuous mode [ 310.630758][T16915] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQI¸¥ [ 310.986150][T16923] loop3: detected capacity change from 0 to 256 [ 311.004859][T16923] FAT-fs (loop3): Unrecognized mount option "nontmtail=0" or missing value [ 311.253621][T16939] loop4: detected capacity change from 0 to 256 [ 311.256188][T16938] loop3: detected capacity change from 0 to 1024 [ 311.312296][T16938] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 311.777569][T16972] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.985480][T16979] loop4: detected capacity change from 0 to 256 [ 312.026256][T16979] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.851721][T16991] loop4: detected capacity change from 0 to 8192 [ 312.878792][T16991] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.960740][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 312.960754][ T29] audit: type=1400 audit(2000000213.830:44003): avc: denied { setattr } for pid=16997 comm="syz-executor.0" name="/" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.027996][T17002] loop0: detected capacity change from 0 to 128 [ 313.064036][T17002] FAT-fs (loop0): bogus logical sector size 0 [ 313.070124][T17002] FAT-fs (loop0): Can't find a valid FAT filesystem [ 313.107480][T17004] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.156619][T17004] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.181537][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.337937][T17009] batadv_slave_0: entered allmulticast mode [ 313.384642][T17011] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 313.394039][ T29] audit: type=1400 audit(2000000214.260:44004): avc: denied { write } for pid=17007 comm="syz-executor.4" name="loop9" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.439643][ T29] audit: type=1400 audit(2000000214.300:44005): avc: denied { ioctl } for pid=17007 comm="syz-executor.4" path="/dev/loop9" dev="devtmpfs" ino=1043 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.562859][T17018] loop0: detected capacity change from 0 to 160 [ 314.007664][ T29] audit: type=1326 audit(2000000214.880:44006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b99be3ea9 code=0x0 [ 314.110809][T17048] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQI¸¥ [ 314.215865][T17032] chnl_net:caif_netlink_parms(): no params data found [ 314.305217][T17017] loop3: detected capacity change from 0 to 65536 [ 314.313084][T17032] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.315267][T17017] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff" or missing value [ 314.320315][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.364140][T17032] bridge_slave_0: entered allmulticast mode [ 314.378888][T17032] bridge_slave_0: entered promiscuous mode [ 314.392504][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.399627][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.437389][T17032] bridge_slave_1: entered allmulticast mode [ 314.449591][T17032] bridge_slave_1: entered promiscuous mode [ 314.489289][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.510062][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.554806][T17032] team0: Port device team_slave_0 added [ 314.567141][T17032] team0: Port device team_slave_1 added [ 314.599307][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.606319][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.632229][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.643771][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.650773][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.676761][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.692679][T17013] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 314.734891][T17032] hsr_slave_0: entered promiscuous mode [ 314.746611][T17032] hsr_slave_1: entered promiscuous mode [ 314.792320][T17055] batadv_slave_0: entered allmulticast mode [ 314.865871][T17061] loop4: detected capacity change from 0 to 1024 [ 314.976915][T17066] loop2: detected capacity change from 0 to 8192 [ 315.026419][T17032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.037376][T17066] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.052515][T17061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.215885][T17032] netdevsim netdevsim0 netdevsim2 (unregistering): left allmulticast mode [ 315.224530][T17032] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 315.232955][T17032] bridge0: port 3(netdevsim2) entered disabled state [ 315.258395][T15048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.285460][T17032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.373009][T17032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.465600][T17032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.552537][T17032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.576795][T17032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.593106][T17032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.612557][T17032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.723089][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.759394][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.785210][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.792300][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.856244][T17032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.866792][T17032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.899098][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.906204][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.002763][T17032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.168319][T17032] veth0_vlan: entered promiscuous mode [ 316.175586][T17109] loop4: detected capacity change from 0 to 128 [ 316.198561][T17032] veth1_vlan: entered promiscuous mode [ 316.217074][T17109] FAT-fs (loop4): bogus logical sector size 0 [ 316.223173][T17109] FAT-fs (loop4): Can't find a valid FAT filesystem [ 316.246552][T17032] veth0_macvtap: entered promiscuous mode [ 316.264329][T17032] veth1_macvtap: entered promiscuous mode [ 316.267307][T17083] loop2: detected capacity change from 0 to 65536 [ 316.283290][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.293825][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.303728][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.305054][T17083] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 316.314187][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.333147][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.343668][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.353591][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.364035][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.373837][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.384343][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.394185][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.404727][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.414540][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.425021][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.434944][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.445446][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.457895][T17032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.466279][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.476883][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.486774][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.497260][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.507155][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.517594][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.527401][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.527841][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.537842][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.537860][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.537873][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.537888][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.587765][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.597715][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.608382][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.655401][T17032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.674643][T17032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.683442][T17032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.692195][T17032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.700898][T17032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.131049][T17114] loop4: detected capacity change from 0 to 512 [ 317.168178][T17114] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 317.179088][T17114] EXT4-fs (loop4): group descriptors corrupted! [ 317.188857][T17118] loop0: detected capacity change from 0 to 256 [ 317.202328][T17080] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 317.212629][T17118] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.336688][T17120] loop2: detected capacity change from 0 to 1024 [ 317.376119][T17120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.442187][T15800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.558575][T17134] loop2: detected capacity change from 0 to 1024 [ 317.576115][T17134] EXT4-fs: Ignoring removed orlov option [ 317.581803][T17134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.602919][T17136] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.610109][T17136] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.625833][T17134] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 317.635742][T17134] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 317.652900][T17136] bridge0: entered promiscuous mode [ 317.923157][T17152] loop4: detected capacity change from 0 to 1024 [ 317.941732][T17152] EXT4-fs: Mount option(s) incompatible with ext2 [ 318.247559][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.256885][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.403697][T17160] loop0: detected capacity change from 0 to 1024 [ 318.445061][T17160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.476979][T17165] loop3: detected capacity change from 0 to 2048 [ 318.514389][T17032] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.534621][T17165] loop3: p2 < > [ 318.654817][T17171] loop0: detected capacity change from 0 to 256 [ 318.680138][T17171] FAT-fs (loop0): Unrecognized mount option "erroTs=remount-ro" or missing value [ 318.718438][T17174] loop2: detected capacity change from 0 to 1024 [ 318.745494][T17174] EXT4-fs: Mount option(s) incompatible with ext2 [ 318.808239][T17177] syzkaller0: entered promiscuous mode [ 318.813796][T17177] syzkaller0: entered allmulticast mode [ 318.831704][ T50] syzkaller0: tun_net_xmit 48 [ 318.837017][T17180] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.846419][T17180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.855785][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.885434][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.892545][T17180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.982604][T17189] loop0: detected capacity change from 0 to 512 [ 319.001365][T17189] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 319.012379][T17189] EXT4-fs (loop0): group descriptors corrupted! [ 319.036128][T17192] bridge0: port 3(team0) entered disabled state [ 319.042477][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.049735][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.086332][T17192] bridge0: entered promiscuous mode [ 319.255094][T17206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.369552][T17210] loop0: detected capacity change from 0 to 256 [ 319.408123][T17210] FAT-fs (loop0): Unrecognized mount option "erroTs=remount-ro" or missing value [ 319.685322][T17214] loop3: detected capacity change from 0 to 160 [ 319.800149][ T29] audit: type=1400 audit(2000000220.670:44007): avc: denied { lock } for pid=17226 comm="syz-executor.3" path="socket:[69754]" dev="sockfs" ino=69754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 319.892425][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.974365][ T29] audit: type=1400 audit(2000000220.850:44008): avc: denied { mounton } for pid=17239 comm="syz-executor.3" path="/root/syzkaller-testdir1598542175/syzkaller.scAID5/130/file0" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.148991][T17241] ================================================================== [ 320.157090][T17241] BUG: KCSAN: data-race in ondemand_readahead / ondemand_readahead [ 320.164982][T17241] [ 320.167295][T17241] read to 0xffff888114eddd78 of 8 bytes by task 17237 on cpu 1: [ 320.174907][T17241] ondemand_readahead+0x133/0x6b0 [ 320.179927][T17241] page_cache_async_ra+0x94/0xa0 [ 320.184857][T17241] filemap_fault+0x2d3/0xa60 [ 320.189442][T17241] __do_fault+0xb6/0x200 [ 320.193685][T17241] handle_mm_fault+0xdeb/0x2a80 [ 320.198538][T17241] exc_page_fault+0x296/0x650 [ 320.203218][T17241] asm_exc_page_fault+0x26/0x30 [ 320.208072][T17241] rep_movs_alternative+0x30/0x70 [ 320.213094][T17241] _copy_from_user+0x80/0xd0 [ 320.217689][T17241] copy_msghdr_from_user+0x54/0x2a0 [ 320.222894][T17241] do_recvmmsg+0x290/0x720 [ 320.227321][T17241] __x64_sys_recvmmsg+0xe2/0x170 [ 320.232265][T17241] x64_sys_call+0x271d/0x2d70 [ 320.236946][T17241] do_syscall_64+0xc9/0x1c0 [ 320.241445][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.247343][T17241] [ 320.249657][T17241] write to 0xffff888114eddd78 of 8 bytes by task 17241 on cpu 0: [ 320.257359][T17241] ondemand_readahead+0x588/0x6b0 [ 320.262385][T17241] page_cache_async_ra+0x94/0xa0 [ 320.267320][T17241] filemap_fault+0x2d3/0xa60 [ 320.271910][T17241] __do_fault+0xb6/0x200 [ 320.276154][T17241] handle_mm_fault+0xdeb/0x2a80 [ 320.281005][T17241] exc_page_fault+0x296/0x650 [ 320.285688][T17241] asm_exc_page_fault+0x26/0x30 [ 320.290541][T17241] fault_in_readable+0xf8/0x1b0 [ 320.295380][T17241] fault_in_iov_iter_readable+0x152/0x190 [ 320.301096][T17241] generic_perform_write+0x106/0x410 [ 320.306373][T17241] ext4_buffered_write_iter+0x1f6/0x380 [ 320.311921][T17241] ext4_file_write_iter+0x29f/0xe30 [ 320.317120][T17241] vfs_write+0x78f/0x900 [ 320.321355][T17241] ksys_write+0xeb/0x1b0 [ 320.325600][T17241] __x64_sys_write+0x42/0x50 [ 320.330192][T17241] x64_sys_call+0x27ef/0x2d70 [ 320.334870][T17241] do_syscall_64+0xc9/0x1c0 [ 320.339369][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.345260][T17241] [ 320.347572][T17241] value changed: 0x0000000000000052 -> 0x0000000000000159 [ 320.354679][T17241] [ 320.356988][T17241] Reported by Kernel Concurrency Sanitizer on: [ 320.363126][T17241] CPU: 0 PID: 17241 Comm: syz-executor.4 Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 [ 320.373613][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 320.383665][T17241] ================================================================== 2033/05/18 03:37:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 320.456962][ T29] audit: type=1400 audit(2000000221.290:44009): avc: denied { write } for pid=3075 comm="syz-fuzzer" path="pipe:[1749]" dev="pipefs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1