last executing test programs: 8.477153367s ago: executing program 0 (id=3009): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = gettid() tkill(r2, 0x7) kcmp(r1, r2, 0x3, r0, r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x4, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0xfffffffd, 0x8000, 0x110, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x200004}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f0000000240), 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x9}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x20) 7.483503978s ago: executing program 0 (id=3035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bb6bfe8000fcffffffffff7d5100000000aa"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 7.405462205s ago: executing program 0 (id=3037): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x6d0a, 0x0, &(0x7f0000000080), 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 7.376156217s ago: executing program 0 (id=3038): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 7.330299831s ago: executing program 0 (id=3041): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 7.156578755s ago: executing program 0 (id=3042): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r0, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) 1.777295745s ago: executing program 1 (id=3109): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.744628908s ago: executing program 1 (id=3111): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = gettid() tkill(r2, 0x7) kcmp(r1, r2, 0x3, r0, r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x4, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0xfffffffd, 0x8000, 0x110, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x200004}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f0000000240), 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x9}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x20) 831.130452ms ago: executing program 2 (id=3129): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff9d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) 762.254929ms ago: executing program 3 (id=3133): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x80, &(0x7f0000001900)=ANY=[], 0xfd, 0x22e, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x100, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./bus\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x8, 0x8}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x2, 0x283c0a394b3a0583}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x4000, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) pread64(r1, &(0x7f00000005c0)=""/185, 0xb9, 0x10001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$binfmt_elf32(r4, &(0x7f0000000240)=ANY=[], 0x58) r5 = open(&(0x7f0000000c00)='./bus\x00', 0x0, 0x0) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x4) 716.807872ms ago: executing program 3 (id=3135): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0xec0}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 540.025096ms ago: executing program 3 (id=3139): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00+']) 524.274418ms ago: executing program 2 (id=3140): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="c528d7", 0x3, 0x0, 0x0, 0x0) 475.932632ms ago: executing program 2 (id=3142): unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) 452.135754ms ago: executing program 3 (id=3143): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 411.788227ms ago: executing program 2 (id=3145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 411.429817ms ago: executing program 3 (id=3146): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) setuid(0xee00) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x18}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) close(r0) 411.225257ms ago: executing program 2 (id=3147): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @local}, 0x10) sendto$packet(r2, &(0x7f0000000040)="0304000000010000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 339.063663ms ago: executing program 2 (id=3149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000008c0)={&(0x7f00000004c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote}}}], 0x20}, 0x8800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) 301.072536ms ago: executing program 3 (id=3151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00060900004039fa0500"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5427, 0x0) 284.245918ms ago: executing program 1 (id=3153): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00+']) 176.189936ms ago: executing program 4 (id=3156): unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) 174.128346ms ago: executing program 1 (id=3157): syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nr_inodes']) 160.252998ms ago: executing program 4 (id=3158): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 130.92241ms ago: executing program 1 (id=3159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @local}, 0x10) sendto$packet(r2, &(0x7f0000000040)="0304000000010000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 130.58665ms ago: executing program 4 (id=3160): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x60400) flock(r0, 0x1) 114.963901ms ago: executing program 1 (id=3161): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0xab4d, 0x8) getpriority(0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 109.202482ms ago: executing program 4 (id=3162): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x2842436, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000600)=0x10001, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) 95.467343ms ago: executing program 4 (id=3163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, 0x4}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0xffffffffffffffff, 0x375, "d9e67b", 0x7, 0xd3}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(r0, &(0x7f0000000000)="2e000400010001", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0), 0x10) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) 0s ago: executing program 4 (id=3164): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0xff67) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000042, &(0x7f0000000400), 0x7, 0x4ea, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0xfffb) accept(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), 0x0, 0x0, 0x3b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r8 = dup(r7) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0801450000380000000000019078ac1e0001ac147000000000000000183f2500000000000000006c00007f0000017f000001f1810071ae9b1c03"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f0000000140), 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getqdisc={0x38, 0x26, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0x10, 0xffe0}, {0x9, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11131 comm=syz.0.2400 [ 146.614209][ T3136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.624440][ T3136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.634717][ T3136] bond0 (unregistering): Released all slaves [ 146.644840][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 146.660255][T11131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.676465][T11132] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.698329][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.736452][ T29] audit: type=1326 audit(1720529373.315:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.0.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b04f54bd9 code=0x0 [ 146.764177][ T3136] hsr_slave_0: left promiscuous mode [ 146.769779][ T3136] hsr_slave_1: left promiscuous mode [ 146.776141][ T3136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.783689][ T3136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.791263][ T3136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.798758][ T3136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.808073][ T3136] veth1_macvtap: left promiscuous mode [ 146.813598][ T3136] veth0_macvtap: left promiscuous mode [ 146.819179][ T3136] veth1_vlan: left promiscuous mode [ 146.824467][ T3136] veth0_vlan: left promiscuous mode [ 146.865620][T11148] loop1: detected capacity change from 0 to 1764 [ 146.918251][ T3136] team0 (unregistering): Port device team_slave_1 removed [ 146.930280][ T3136] team0 (unregistering): Port device team_slave_0 removed [ 146.968155][ T3136] team0 (unregistering): Port device dummy0 removed [ 147.047998][T11168] loop1: detected capacity change from 0 to 2048 [ 147.060413][T11039] veth0_vlan: entered promiscuous mode [ 147.063886][T11168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.070908][T11039] veth1_vlan: entered promiscuous mode [ 147.085627][T11168] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.094249][T11039] veth0_macvtap: entered promiscuous mode [ 147.106927][ T29] audit: type=1400 audit(1720529373.685:1433): avc: denied { setattr } for pid=11167 comm="syz.1.2409" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.135883][T11039] veth1_macvtap: entered promiscuous mode [ 147.141918][ T29] audit: type=1400 audit(1720529373.715:1434): avc: denied { unlink } for pid=11167 comm="syz.1.2409" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.157517][T11069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.175724][T11069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.184394][T11069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.194005][T11069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.203746][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.214341][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.224234][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.234683][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.244632][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.255186][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.266029][ T9171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.266346][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.286059][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.296519][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.306414][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.316858][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.326686][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.337125][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.348255][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.360092][T11039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.369054][T11039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.377791][T11039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.386590][T11039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.410882][T11174] loop1: detected capacity change from 0 to 128 [ 147.455119][T11069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.462381][T11174] loop1: detected capacity change from 128 to 0 [ 147.467556][T11069] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.469582][T11174] bio_check_eod: 33 callbacks suppressed [ 147.469597][T11174] syz.1.2410: attempt to access beyond end of device [ 147.469597][T11174] loop1: rw=0, sector=3, nr_sectors = 1 limit=0 [ 147.490955][T11069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.504086][T11069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.510539][T11174] FAT-fs (loop1): Directory bread(block 3) failed [ 147.522496][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.529672][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.539648][T11174] syz.1.2410: attempt to access beyond end of device [ 147.539648][T11174] loop1: rw=0, sector=4, nr_sectors = 1 limit=0 [ 147.541450][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.553638][T11174] FAT-fs (loop1): Directory bread(block 4) failed [ 147.559572][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.566456][T11174] syz.1.2410: attempt to access beyond end of device [ 147.566456][T11174] loop1: rw=0, sector=5, nr_sectors = 1 limit=0 [ 147.601157][T11174] FAT-fs (loop1): Directory bread(block 5) failed [ 147.613442][T11174] syz.1.2410: attempt to access beyond end of device [ 147.613442][T11174] loop1: rw=0, sector=6, nr_sectors = 1 limit=0 [ 147.633052][T11174] FAT-fs (loop1): Directory bread(block 6) failed [ 147.649589][T11174] syz.1.2410: attempt to access beyond end of device [ 147.649589][T11174] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 147.663619][T11174] FAT-fs (loop1): FAT read failed (blocknr 1) [ 147.670036][T11181] syz.1.2410: attempt to access beyond end of device [ 147.670036][T11181] loop1: rw=0, sector=3, nr_sectors = 1 limit=0 [ 147.695451][T11181] FAT-fs (loop1): Directory bread(block 3) failed [ 147.699214][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.718394][T11181] syz.1.2410: attempt to access beyond end of device [ 147.718394][T11181] loop1: rw=0, sector=4, nr_sectors = 1 limit=0 [ 147.731495][T11181] FAT-fs (loop1): Directory bread(block 4) failed [ 147.738407][T11181] syz.1.2410: attempt to access beyond end of device [ 147.738407][T11181] loop1: rw=0, sector=5, nr_sectors = 1 limit=0 [ 147.757401][T11181] FAT-fs (loop1): Directory bread(block 5) failed [ 147.763950][T11181] syz.1.2410: attempt to access beyond end of device [ 147.763950][T11181] loop1: rw=0, sector=6, nr_sectors = 1 limit=0 [ 147.778313][T11181] FAT-fs (loop1): Directory bread(block 6) failed [ 147.785062][T11185] syz.1.2410: attempt to access beyond end of device [ 147.785062][T11185] loop1: rw=0, sector=3, nr_sectors = 1 limit=0 [ 147.814010][T11185] FAT-fs (loop1): Directory bread(block 3) failed [ 147.836532][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2419'. [ 147.852701][T11209] loop3: detected capacity change from 0 to 512 [ 147.859681][T10914] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 147.859891][T11209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.868940][T11069] veth0_vlan: entered promiscuous mode [ 147.885222][T11209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0102] [ 147.894760][T11209] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.901613][T11209] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2420: bg 0: block 248: padding at end of block bitmap is not set [ 147.916576][T11209] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.2420: Failed to acquire dquot type 1 [ 147.920161][T11069] veth1_vlan: entered promiscuous mode [ 147.934132][T11209] EXT4-fs (loop3): 1 truncate cleaned up [ 147.943168][T11069] veth0_macvtap: entered promiscuous mode [ 147.944941][T11209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.960023][T11069] veth1_macvtap: entered promiscuous mode [ 147.975237][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.985752][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.986350][T11209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.995882][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.014989][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.024911][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.035443][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.045382][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.055881][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.065982][T11209] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz.3.2420: Abort forced by user [ 148.068420][T11069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.083523][T11209] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 148.083647][T11209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0102] [ 148.096156][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.111323][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.121267][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.131783][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.133546][T11209] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 148.141689][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.155438][T11209] ext4 filesystem being remounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.162954][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.182892][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.193359][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.203952][T10917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.205592][T11069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.224215][T11069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.233392][T11069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.242533][T11069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.251461][T11069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.273193][ T3155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.327376][ T3155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.364915][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 148.426602][T11239] loop2: detected capacity change from 0 to 128 [ 148.435402][T11239] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 148.446492][ T3155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.460921][T11239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 148.470926][T11244] loop4: detected capacity change from 0 to 512 [ 148.476881][T11239] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz.2.2430: No space for directory leaf checksum. Please run e2fsck -D. [ 148.494576][T11239] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #11: comm syz.2.2430: checksumming directory block 0 [ 148.508026][T11244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.525029][T11244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0102] [ 148.526632][T11069] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.544022][T11244] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.550932][T11244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2431: bg 0: block 248: padding at end of block bitmap is not set [ 148.552937][ T3155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.567783][T11244] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.2431: Failed to acquire dquot type 1 [ 148.589785][T11244] EXT4-fs (loop4): 1 truncate cleaned up [ 148.597584][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.622179][T11244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.630810][T11244] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz.4.2431: Abort forced by user [ 148.649183][T11244] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 148.661637][T11244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0102] [ 148.701448][ T3155] bridge_slave_1: left allmulticast mode [ 148.707182][ T3155] bridge_slave_1: left promiscuous mode [ 148.712987][ T3155] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.724243][ T3155] bridge_slave_0: left allmulticast mode [ 148.729916][ T3155] bridge_slave_0: left promiscuous mode [ 148.735660][ T3155] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.760772][T11244] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 148.773168][T11244] ext4 filesystem being remounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.810107][T11039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.821268][ T3155] team0: Port device bridge0 removed [ 148.905453][ T3155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.915864][ T3155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.926582][ T3155] bond0 (unregistering): Released all slaves [ 148.936002][ T3155] bond1 (unregistering): Released all slaves [ 148.976782][T11228] chnl_net:caif_netlink_parms(): no params data found [ 149.013942][T11228] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.021041][T11228] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.028414][T11228] bridge_slave_0: entered allmulticast mode [ 149.034887][T11228] bridge_slave_0: entered promiscuous mode [ 149.042231][T11228] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.049352][T11228] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.056700][T11228] bridge_slave_1: entered allmulticast mode [ 149.063177][T11228] bridge_slave_1: entered promiscuous mode [ 149.090581][ T3155] hsr_slave_0: left promiscuous mode [ 149.101646][ T3155] hsr_slave_1: left promiscuous mode [ 149.111037][ T3155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.118676][ T3155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.131758][ T3155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.139472][ T3155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.152685][ T3155] veth1_macvtap: left promiscuous mode [ 149.158199][ T3155] veth0_macvtap: left promiscuous mode [ 149.163810][ T3155] veth1_vlan: left promiscuous mode [ 149.169090][ T3155] veth0_vlan: left promiscuous mode [ 149.268824][ T3155] team0 (unregistering): Port device team_slave_1 removed [ 149.279300][ T3155] team0 (unregistering): Port device team_slave_0 removed [ 149.319879][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.329176][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.336918][T11268] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.344043][T11268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.355515][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.381679][T11228] team0: Port device team_slave_0 added [ 149.388882][T11228] team0: Port device team_slave_1 added [ 149.424389][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.431443][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.457628][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.478588][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.485694][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.511813][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.526629][T11295] futex_wake_op: syz.3.2448 tries to shift op by 36; fix this program [ 149.542508][T11295] program syz.3.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.570894][T11228] hsr_slave_0: entered promiscuous mode [ 149.577294][T11228] hsr_slave_1: entered promiscuous mode [ 149.585466][T11228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.593482][T11228] Cannot create hsr debugfs directory [ 149.639378][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 149.653240][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 149.653254][ T29] audit: type=1326 audit(1720529376.205:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.0.2445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b04f54bd9 code=0x0 [ 149.675818][T11304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=11304 comm=syz.3.2450 [ 149.787599][T11312] loop3: detected capacity change from 0 to 256 [ 149.806454][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.814296][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.821422][T11312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.940303][T11228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.949571][T11228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.960298][T11228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.970155][T11228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.990188][T11322] loop3: detected capacity change from 0 to 512 [ 149.996764][T11322] tmpfs: Unknown parameter 'nojournal_checksum' [ 150.039363][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.048220][T11322] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11322 comm=syz.3.2457 [ 150.054219][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.070983][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.078206][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.091434][ T3203] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.098160][T11325] futex_wake_op: syz.3.2458 tries to shift op by 36; fix this program [ 150.098626][ T3203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.109963][T11325] program syz.3.2458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.199686][T11228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.285308][T11228] veth0_vlan: entered promiscuous mode [ 150.294320][T11228] veth1_vlan: entered promiscuous mode [ 150.314491][T11228] veth0_macvtap: entered promiscuous mode [ 150.324718][T11228] veth1_macvtap: entered promiscuous mode [ 150.336898][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.347439][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.357386][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.367976][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.377898][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.388401][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.398697][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.409516][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.422891][T11228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.434080][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.444574][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.449335][ T29] audit: type=1400 audit(1720529377.025:1446): avc: denied { ioctl } for pid=11350 comm="syz.0.2465" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.454411][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.454432][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.454451][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.454468][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.454487][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.454519][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.456475][T11228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.553722][T11228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.553834][T11228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.553867][T11228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.553900][T11228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.560105][T11352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2464'. [ 150.619661][ T29] audit: type=1400 audit(1720529377.195:1447): avc: denied { getopt } for pid=11348 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.666068][T11363] futex_wake_op: syz.2.2469 tries to shift op by 36; fix this program [ 150.681359][T11363] program syz.2.2469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.715553][T11357] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11357 comm=syz.0.2467 [ 150.730265][ T29] audit: type=1400 audit(1720529377.315:1448): avc: denied { getattr } for pid=11364 comm="syz.1.2425" lport=32996 faddr=::ffff:172.30.0.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 150.757487][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 151.037353][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.094810][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.144750][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.206029][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.304288][ T36] bridge_slave_1: left allmulticast mode [ 151.310033][ T36] bridge_slave_1: left promiscuous mode [ 151.315731][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.323519][ T36] bridge_slave_0: left allmulticast mode [ 151.329151][ T36] bridge_slave_0: left promiscuous mode [ 151.334938][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.379028][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 151.435146][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.445707][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.455941][ T36] bond0 (unregistering): Released all slaves [ 151.465329][ T36] bond1 (unregistering): Released all slaves [ 151.554351][ T36] hsr_slave_0: left promiscuous mode [ 151.559967][ T36] hsr_slave_1: left promiscuous mode [ 151.565689][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.573128][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.580582][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.587997][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.598026][ T36] veth1_macvtap: left promiscuous mode [ 151.603601][ T36] veth0_macvtap: left promiscuous mode [ 151.609263][ T36] veth1_vlan: left promiscuous mode [ 151.614527][ T36] veth0_vlan: left promiscuous mode [ 151.699505][ T36] team0 (unregistering): Port device team_slave_1 removed [ 151.710709][ T36] team0 (unregistering): Port device team_slave_0 removed [ 152.039519][ T29] audit: type=1400 audit(1720529378.615:1449): avc: denied { nlmsg_read } for pid=11381 comm="syz.3.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.060313][T11382] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2476'. [ 152.071826][ T29] audit: type=1326 audit(1720529378.655:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.3.2476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7c855dbd9 code=0x0 [ 152.133966][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.263736][T11379] chnl_net:caif_netlink_parms(): no params data found [ 152.273817][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2480'. [ 152.309585][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.316895][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.324358][T11379] bridge_slave_0: entered allmulticast mode [ 152.330816][T11379] bridge_slave_0: entered promiscuous mode [ 152.339253][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.346343][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.353849][T11379] bridge_slave_1: entered allmulticast mode [ 152.360342][T11379] bridge_slave_1: entered promiscuous mode [ 152.386328][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.398731][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.428098][T11379] team0: Port device team_slave_0 added [ 152.436618][T11379] team0: Port device team_slave_1 added [ 152.453415][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.460371][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.486419][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.499276][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.506281][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.532275][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.580182][T11379] hsr_slave_0: entered promiscuous mode [ 152.586463][T11379] hsr_slave_1: entered promiscuous mode [ 152.593352][T11379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.600903][T11379] Cannot create hsr debugfs directory [ 152.608803][T11394] chnl_net:caif_netlink_parms(): no params data found [ 152.666068][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.673341][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.680911][T11394] bridge_slave_0: entered allmulticast mode [ 152.687517][T11394] bridge_slave_0: entered promiscuous mode [ 152.696830][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.704044][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.711350][T11394] bridge_slave_1: entered allmulticast mode [ 152.717947][T11394] bridge_slave_1: entered promiscuous mode [ 152.735652][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.755895][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.775071][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.789213][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.818553][T11394] team0: Port device team_slave_0 added [ 152.827567][T11394] team0: Port device team_slave_1 added [ 152.846324][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.857688][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.864680][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.891024][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.902875][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.909855][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.925503][T11426] loop3: detected capacity change from 0 to 256 [ 152.935865][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.973317][T11394] hsr_slave_0: entered promiscuous mode [ 152.979530][T11394] hsr_slave_1: entered promiscuous mode [ 152.985636][T11394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.993305][T11394] Cannot create hsr debugfs directory [ 153.027923][ T28] bridge_slave_1: left allmulticast mode [ 153.033644][ T28] bridge_slave_1: left promiscuous mode [ 153.039366][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.047211][ T28] bridge_slave_0: left allmulticast mode [ 153.052899][ T28] bridge_slave_0: left promiscuous mode [ 153.058661][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.063845][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 153.145379][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.155886][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.166408][ T28] bond0 (unregistering): Released all slaves [ 153.285327][ T28] hsr_slave_0: left promiscuous mode [ 153.291062][ T28] hsr_slave_1: left promiscuous mode [ 153.298446][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.305893][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.313668][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.321086][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.330141][ T28] veth1_macvtap: left promiscuous mode [ 153.335659][ T28] veth0_macvtap: left promiscuous mode [ 153.341163][ T28] veth1_vlan: left promiscuous mode [ 153.346456][ T28] veth0_vlan: left promiscuous mode [ 153.435134][ T28] team0 (unregistering): Port device team_slave_1 removed [ 153.445831][ T28] team0 (unregistering): Port device team_slave_0 removed [ 154.094554][ T28] bridge_slave_1: left allmulticast mode [ 154.100214][ T28] bridge_slave_1: left promiscuous mode [ 154.105994][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.114401][ T28] bridge_slave_0: left allmulticast mode [ 154.120053][ T28] bridge_slave_0: left promiscuous mode [ 154.125717][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.133541][ T28] bridge_slave_1: left allmulticast mode [ 154.139172][ T28] bridge_slave_1: left promiscuous mode [ 154.144904][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.152590][ T28] bridge_slave_0: left allmulticast mode [ 154.158221][ T28] bridge_slave_0: left promiscuous mode [ 154.164189][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.307933][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2490'. [ 154.325453][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.335528][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.346692][ T28] bond0 (unregistering): Released all slaves [ 154.355862][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.365813][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.375551][ T28] bond0 (unregistering): Released all slaves [ 154.478725][T11475] loop1: detected capacity change from 0 to 512 [ 154.509960][ T28] hsr_slave_0: left promiscuous mode [ 154.516234][ T28] hsr_slave_1: left promiscuous mode [ 154.522260][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.523621][T11475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.542301][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.542453][T11475] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.561447][ T28] hsr_slave_0: left promiscuous mode [ 154.568489][ T28] hsr_slave_1: left promiscuous mode [ 154.574232][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.574902][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.591718][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.636160][ T28] team0 (unregistering): Port device team_slave_1 removed [ 154.646867][ T28] team0 (unregistering): Port device team_slave_0 removed [ 154.703241][T11505] netlink: 'syz.1.2500': attribute type 2 has an invalid length. [ 154.711016][T11505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2500'. [ 154.721149][ T28] team0 (unregistering): Port device team_slave_1 removed [ 154.731455][ T28] team0 (unregistering): Port device team_slave_0 removed [ 154.792831][ T29] audit: type=1400 audit(1720529381.365:1451): avc: denied { read write } for pid=11504 comm="syz.1.2500" name="cgroup.subtree_control" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.817386][ T29] audit: type=1400 audit(1720529381.375:1452): avc: denied { open } for pid=11504 comm="syz.1.2500" path="" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.033403][T11448] chnl_net:caif_netlink_parms(): no params data found [ 155.056925][T11460] chnl_net:caif_netlink_parms(): no params data found [ 155.067041][T11452] chnl_net:caif_netlink_parms(): no params data found [ 155.076253][T11454] chnl_net:caif_netlink_parms(): no params data found [ 155.142716][T11525] dccp_invalid_packet: P.Data Offset(68) too large [ 155.162324][T11531] futex_wake_op: syz.1.2504 tries to shift op by 36; fix this program [ 155.175147][T11531] program syz.1.2504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.207878][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.215243][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.223432][T11460] bridge_slave_0: entered allmulticast mode [ 155.228672][T11536] loop1: detected capacity change from 0 to 1024 [ 155.229998][T11460] bridge_slave_0: entered promiscuous mode [ 155.242742][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.243621][T11536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.249805][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.269161][T11460] bridge_slave_1: entered allmulticast mode [ 155.273986][ T29] audit: type=1400 audit(1720529381.845:1453): avc: denied { read write } for pid=11535 comm="syz.1.2505" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.275908][T11460] bridge_slave_1: entered promiscuous mode [ 155.297737][ T29] audit: type=1400 audit(1720529381.845:1454): avc: denied { open } for pid=11535 comm="syz.1.2505" path="/20/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.299892][T11536] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 155.304468][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.326622][T11536] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.334924][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.343885][T11536] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 155.351287][T11452] bridge_slave_0: entered allmulticast mode [ 155.357739][T11536] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.357739][T11536] [ 155.357753][T11536] EXT4-fs (loop1): Total free blocks count 0 [ 155.357765][T11536] EXT4-fs (loop1): Free/Dirty block details [ 155.357775][T11536] EXT4-fs (loop1): free_blocks=68451041280 [ 155.357788][T11536] EXT4-fs (loop1): dirty_blocks=48 [ 155.357798][T11536] EXT4-fs (loop1): Block reservation details [ 155.357809][T11536] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 155.370733][T11452] bridge_slave_0: entered promiscuous mode [ 155.427050][ T3155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 155.427605][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.447090][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.454918][T11452] bridge_slave_1: entered allmulticast mode [ 155.461426][T11452] bridge_slave_1: entered promiscuous mode [ 155.500506][T11448] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.507706][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.515857][T11448] bridge_slave_0: entered allmulticast mode [ 155.522360][T11448] bridge_slave_0: entered promiscuous mode [ 155.529340][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.536551][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.545848][T11454] bridge_slave_0: entered allmulticast mode [ 155.552347][T11454] bridge_slave_0: entered promiscuous mode [ 155.559179][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.566335][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.573778][T11454] bridge_slave_1: entered allmulticast mode [ 155.580408][T11454] bridge_slave_1: entered promiscuous mode [ 155.588608][T11460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.600007][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.610620][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.619907][T11448] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.627110][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.634344][T11448] bridge_slave_1: entered allmulticast mode [ 155.640784][T11448] bridge_slave_1: entered promiscuous mode [ 155.662374][T11460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.682910][T11452] team0: Port device team_slave_0 added [ 155.689636][T11452] team0: Port device team_slave_1 added [ 155.705600][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.717535][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.795619][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.806043][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.823266][T11460] team0: Port device team_slave_0 added [ 155.829977][T11460] team0: Port device team_slave_1 added [ 155.836735][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.843709][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.869650][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.881099][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.888116][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.914277][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.975497][T11448] team0: Port device team_slave_0 added [ 155.988153][T11460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.995309][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.998144][T11549] dccp_invalid_packet: P.Data Offset(68) too large [ 156.021617][T11460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.045843][T11448] team0: Port device team_slave_1 added [ 156.054330][T11551] futex_wake_op: syz.1.2511 tries to shift op by 36; fix this program [ 156.063811][T11454] team0: Port device team_slave_0 added [ 156.065568][T11551] program syz.1.2511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.070508][T11454] team0: Port device team_slave_1 added [ 156.086985][T11460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.093968][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.119939][T11460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.159637][T11452] hsr_slave_0: entered promiscuous mode [ 156.165869][T11452] hsr_slave_1: entered promiscuous mode [ 156.166836][T11554] loop1: detected capacity change from 0 to 1024 [ 156.179678][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.186688][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.188667][T11554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.212659][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.236439][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.243508][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.247343][T11554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 156.269510][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.288339][T11554] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 156.297397][T11554] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 156.309744][T11554] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.309744][T11554] [ 156.319771][T11554] EXT4-fs (loop1): Total free blocks count 0 [ 156.325780][T11554] EXT4-fs (loop1): Free/Dirty block details [ 156.331718][T11554] EXT4-fs (loop1): free_blocks=68451041280 [ 156.337547][T11554] EXT4-fs (loop1): dirty_blocks=48 [ 156.342690][T11554] EXT4-fs (loop1): Block reservation details [ 156.348671][T11554] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 156.355988][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.371607][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 156.385827][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.392864][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.418885][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.430419][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.437434][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.463405][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.485072][T11460] hsr_slave_0: entered promiscuous mode [ 156.491080][T11460] hsr_slave_1: entered promiscuous mode [ 156.497561][T11460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.505201][ T29] audit: type=1400 audit(1720529383.085:1455): avc: denied { write } for pid=11557 comm="syz.1.2513" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 156.506395][T11460] Cannot create hsr debugfs directory [ 156.551770][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.603079][T11448] hsr_slave_0: entered promiscuous mode [ 156.609194][T11448] hsr_slave_1: entered promiscuous mode [ 156.615195][T11448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.622780][T11448] Cannot create hsr debugfs directory [ 156.648473][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.665376][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'. [ 156.686492][T11454] hsr_slave_0: entered promiscuous mode [ 156.692815][T11454] hsr_slave_1: entered promiscuous mode [ 156.698629][T11454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.706334][T11454] Cannot create hsr debugfs directory [ 156.729566][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.771088][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 156.985148][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.042698][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.126752][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.225135][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.275355][ T28] bridge_slave_1: left allmulticast mode [ 157.281084][ T28] bridge_slave_1: left promiscuous mode [ 157.286762][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.294702][ T28] bridge_slave_0: left allmulticast mode [ 157.300359][ T28] bridge_slave_0: left promiscuous mode [ 157.306130][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.314601][ T28] bridge_slave_1: left allmulticast mode [ 157.320271][ T28] bridge_slave_1: left promiscuous mode [ 157.325990][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.333708][ T28] bridge_slave_0: left allmulticast mode [ 157.339369][ T28] bridge_slave_0: left promiscuous mode [ 157.345129][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.534479][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.544674][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.554680][ T28] bond0 (unregistering): Released all slaves [ 157.563915][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.574476][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.584899][ T28] bond0 (unregistering): Released all slaves [ 157.609743][T11460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.618761][T11460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.627343][T11460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.637875][T11460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.677059][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.689316][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.703276][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.710348][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.719378][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.726515][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.753397][ T28] hsr_slave_0: left promiscuous mode [ 157.759106][ T28] hsr_slave_1: left promiscuous mode [ 157.766121][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.773620][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.781156][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.788703][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.798343][ T28] hsr_slave_0: left promiscuous mode [ 157.804096][ T28] hsr_slave_1: left promiscuous mode [ 157.809723][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.817188][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.824973][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.832435][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.843102][ T28] veth1_macvtap: left promiscuous mode [ 157.848625][ T28] veth0_macvtap: left promiscuous mode [ 157.854273][ T28] veth1_vlan: left promiscuous mode [ 157.859533][ T28] veth0_vlan: left promiscuous mode [ 157.865643][ T28] veth1_macvtap: left promiscuous mode [ 157.871111][ T28] veth0_macvtap: left promiscuous mode [ 157.876660][ T28] veth1_vlan: left promiscuous mode [ 157.881992][ T28] veth0_vlan: left promiscuous mode [ 158.016316][ T28] team0 (unregistering): Port device team_slave_1 removed [ 158.026817][ T28] team0 (unregistering): Port device team_slave_0 removed [ 158.095097][ T28] team0 (unregistering): Port device team_slave_1 removed [ 158.105533][ T28] team0 (unregistering): Port device team_slave_0 removed [ 158.142978][T11460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.199896][T11460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.236821][T11448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.246568][T11448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.255302][T11448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.269868][T11448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.317597][T11460] veth0_vlan: entered promiscuous mode [ 158.330445][T11460] veth1_vlan: entered promiscuous mode [ 158.344772][T11460] veth0_macvtap: entered promiscuous mode [ 158.360079][T11460] veth1_macvtap: entered promiscuous mode [ 158.368756][T11448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.381471][T11448] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.392233][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.402787][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.413651][T11460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.425451][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.432540][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.441246][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.451736][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.462736][T11460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.475664][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.482983][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.492419][T11460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.501169][T11460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.510049][T11460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.518837][T11460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.561196][T11452] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.578797][T11452] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.587277][T11603] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2492'. [ 158.588630][T11452] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.605010][ T29] audit: type=1326 audit(1720529385.185:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11602 comm="syz.2.2492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63cfc00bd9 code=0x0 [ 158.631816][T11452] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.715348][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.732874][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.750282][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.760522][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.767683][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.781399][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.788664][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.836330][T11454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.846314][T11454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.856071][T11454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.865949][T11454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.934463][T11448] veth0_vlan: entered promiscuous mode [ 158.944573][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.954488][T11448] veth1_vlan: entered promiscuous mode [ 158.970828][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.980231][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.991470][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.998576][ T3124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.011491][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.018646][ T3124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.037601][T11448] veth0_macvtap: entered promiscuous mode [ 159.060948][T11448] veth1_macvtap: entered promiscuous mode [ 159.083260][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.093913][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.103877][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.114489][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.125308][T11448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.136967][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.147465][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.157435][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.167902][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.179975][T11448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.190114][T11448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.199012][T11448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.207800][T11448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.216577][T11448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.252201][T11452] veth0_vlan: entered promiscuous mode [ 159.264394][T11454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.282714][T11452] veth1_vlan: entered promiscuous mode [ 159.299895][T11642] 9pnet_fd: Insufficient options for proto=fd [ 159.310349][T11452] veth0_macvtap: entered promiscuous mode [ 159.320776][T11452] veth1_macvtap: entered promiscuous mode [ 159.341435][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.352518][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.362658][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.373289][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.383203][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.393785][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.404532][T11452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.414721][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.425193][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.435062][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.445521][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.455386][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.465886][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.477040][T11452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.486885][T11452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.495875][T11452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.504858][T11452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.513850][T11452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.581165][T11454] veth0_vlan: entered promiscuous mode [ 159.598458][T11454] veth1_vlan: entered promiscuous mode [ 159.605085][ T29] audit: type=1400 audit(1720529386.175:1457): avc: denied { create } for pid=11662 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.640216][T11454] veth0_macvtap: entered promiscuous mode [ 159.646502][ T29] audit: type=1400 audit(1720529386.205:1458): avc: denied { connect } for pid=11662 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.688008][T11454] veth1_macvtap: entered promiscuous mode [ 159.713322][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.723885][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.733782][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.744316][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.754207][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.764712][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.765992][ T29] audit: type=1400 audit(1720529386.325:1459): avc: denied { bind } for pid=11668 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.774553][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.794024][ T29] audit: type=1400 audit(1720529386.325:1460): avc: denied { listen } for pid=11668 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.804435][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.809108][T11454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.824227][ T29] audit: type=1400 audit(1720529386.325:1461): avc: denied { write } for pid=11668 comm="syz.3.2534" path="socket:[38790]" dev="sockfs" ino=38790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.864986][ T29] audit: type=1400 audit(1720529386.325:1462): avc: denied { accept } for pid=11668 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.866689][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.884775][ T29] audit: type=1400 audit(1720529386.325:1463): avc: denied { read } for pid=11668 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.895171][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.895191][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.935257][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.945086][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.955530][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.965388][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.975819][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.000369][T11454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.013530][T11454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.022282][T11454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.031029][T11454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.039825][T11454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.084424][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 160.093482][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 160.109070][T11689] loop4: detected capacity change from 0 to 512 [ 160.146261][T11686] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.164796][ T29] audit: type=1400 audit(1720529386.745:1464): avc: denied { override_creds } for pid=11690 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.191362][T11689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.208382][T11689] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.255894][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.288465][T11664] chnl_net:caif_netlink_parms(): no params data found [ 160.339805][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.347227][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.356297][T11664] bridge_slave_0: entered allmulticast mode [ 160.363235][T11664] bridge_slave_0: entered promiscuous mode [ 160.370701][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.377908][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.387193][T11664] bridge_slave_1: entered allmulticast mode [ 160.394614][T11664] bridge_slave_1: entered promiscuous mode [ 160.438332][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.454578][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.483295][T11734] loop4: detected capacity change from 0 to 1024 [ 160.484356][T11664] team0: Port device team_slave_0 added [ 160.497414][T11664] team0: Port device team_slave_1 added [ 160.497723][T11736] 9pnet_fd: Insufficient options for proto=fd [ 160.560120][ T29] audit: type=1400 audit(1720529387.135:1465): avc: denied { ioctl } for pid=11725 comm="syz.0.2552" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.627916][T11734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.645803][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.653036][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.679280][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.810605][T11734] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 160.856804][T11734] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 160.869241][T11734] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.869241][T11734] [ 160.878993][T11734] EXT4-fs (loop4): Total free blocks count 0 [ 160.885048][T11734] EXT4-fs (loop4): Free/Dirty block details [ 160.890999][T11734] EXT4-fs (loop4): free_blocks=68451041280 [ 160.896450][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.896862][T11734] EXT4-fs (loop4): dirty_blocks=48 [ 160.903788][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.908883][T11734] EXT4-fs (loop4): Block reservation details [ 160.908898][T11734] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 160.946891][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.967683][ T3155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 160.995037][T11664] hsr_slave_0: entered promiscuous mode [ 161.002102][T11664] hsr_slave_1: entered promiscuous mode [ 161.009562][T11664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.018491][T11664] Cannot create hsr debugfs directory [ 161.025682][T11753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2563'. [ 161.034819][T11753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2563'. [ 161.052971][T11753] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.110761][T11762] loop4: detected capacity change from 0 to 512 [ 161.136133][T11664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.158067][T11762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.158148][T11762] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.250769][T11762] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2566: corrupted inode contents [ 161.279854][T11762] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.2566: mark_inode_dirty error [ 161.297324][T11762] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2566: corrupted inode contents [ 161.310859][T11762] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2566: mark_inode_dirty error [ 161.344587][T11762] Falling back ldisc for ptm0. [ 161.483234][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.685510][T11800] dccp_invalid_packet: P.Data Offset(68) too large [ 161.805026][T11809] loop4: detected capacity change from 0 to 512 [ 161.811702][T11809] EXT4-fs: Ignoring removed bh option [ 161.818992][T11809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.830382][T11809] EXT4-fs (loop4): 1 truncate cleaned up [ 161.837851][T11809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.879068][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.056047][T11826] loop4: detected capacity change from 0 to 512 [ 162.059426][T11827] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 162.065433][T11826] EXT4-fs: Ignoring removed i_version option [ 162.076363][T11826] EXT4-fs: Ignoring removed nobh option [ 162.083130][T11826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.095129][T11826] EXT4-fs (loop4): 1 truncate cleaned up [ 162.101170][T11826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.125545][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.180047][T11837] No such timeout policy "syz1" [ 162.187347][T11837] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 162.197639][T11837] netlink: 'syz.4.2595': attribute type 2 has an invalid length. [ 162.271418][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 162.546615][T11860] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 162.621790][T11860] veth0_vlan: left promiscuous mode [ 162.660517][T11860] veth0_vlan: entered promiscuous mode [ 162.699126][T11860] team0: Device veth0_vlan failed to register rx_handler [ 162.766554][T11862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2605'. [ 162.876242][T11867] No such timeout policy "syz1" [ 162.882573][T11867] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 162.893917][T11867] netlink: 'syz.0.2607': attribute type 2 has an invalid length. [ 162.917152][T11870] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 162.950825][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2610'. [ 163.169316][T11887] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 163.262947][T11892] loop1: detected capacity change from 0 to 256 [ 163.355862][T11904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2624'. [ 163.365038][T11904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2624'. [ 163.499507][ T29] audit: type=1400 audit(1720529390.075:1466): avc: denied { execute } for pid=11907 comm="syz.3.2626" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 163.529492][ T29] audit: type=1400 audit(1720529390.105:1467): avc: denied { read } for pid=11915 comm="syz.1.2628" name="file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.574250][T11918] loop3: detected capacity change from 0 to 128 [ 163.581573][T11918] FAT-fs (loop3): invalid media value (0x00) [ 163.587755][T11918] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 163.597354][T11918] FAT-fs (loop3): Can't find a valid FAT filesystem [ 163.649314][T11918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 163.770525][T11932] loop3: detected capacity change from 0 to 512 [ 163.777351][T11932] EXT4-fs: Ignoring removed bh option [ 163.783346][T11932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.794450][T11932] EXT4-fs (loop3): 1 truncate cleaned up [ 163.800492][T11932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.839189][T11452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.893916][T11935] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.127172][T11956] loop3: detected capacity change from 0 to 128 [ 164.127887][T11959] loop4: detected capacity change from 0 to 512 [ 164.135766][T11956] FAT-fs (loop3): invalid media value (0x00) [ 164.145886][T11956] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 164.154388][T11959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.155294][T11956] FAT-fs (loop3): Can't find a valid FAT filesystem [ 164.169494][T11959] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.203370][T11959] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2644: corrupted inode contents [ 164.217289][T11959] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.2644: mark_inode_dirty error [ 164.247607][T11959] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2644: corrupted inode contents [ 164.290935][T11959] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2644: mark_inode_dirty error [ 164.328726][T11956] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 164.359172][T11959] Falling back ldisc for ptm0. [ 164.389830][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.575447][T11971] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2646'. [ 164.612237][ T29] audit: type=1400 audit(1720529391.195:1468): avc: denied { ioctl } for pid=11972 comm="syz.3.2648" path="socket:[41145]" dev="sockfs" ino=41145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.670044][T11975] loop4: detected capacity change from 0 to 512 [ 164.676851][T11975] EXT4-fs: Ignoring removed i_version option [ 164.683020][T11975] EXT4-fs: Ignoring removed nobh option [ 164.688880][T11975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.699820][T11975] EXT4-fs (loop4): 1 truncate cleaned up [ 164.705947][T11975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.729935][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.755552][ T29] audit: type=1400 audit(1720529391.335:1469): avc: denied { write } for pid=11979 comm="syz.3.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.805231][T11989] raw_sendmsg: syz.3.2654 forgot to set AF_INET. Fix it! [ 164.814656][T11989] loop3: detected capacity change from 0 to 256 [ 164.830450][T11991] loop4: detected capacity change from 0 to 1764 [ 164.837227][T11991] iso9660: Unknown parameter 'overriderkckperm' [ 164.845114][ T29] audit: type=1400 audit(1720529391.425:1470): avc: denied { ioctl } for pid=11988 comm="syz.3.2654" path="socket:[41183]" dev="sockfs" ino=41183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.902971][T11995] loop3: detected capacity change from 0 to 256 [ 164.944498][T11999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.968486][T12008] No such timeout policy "syz1" [ 164.976613][T12008] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 164.988827][T12008] netlink: 'syz.3.2659': attribute type 2 has an invalid length. [ 165.064838][T12024] loop4: detected capacity change from 0 to 1764 [ 165.071017][ T29] audit: type=1400 audit(1720529391.645:1471): avc: denied { bind } for pid=12027 comm="syz.3.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.072074][T12024] iso9660: Unknown parameter 'overriderkckperm' [ 165.091083][ T29] audit: type=1400 audit(1720529391.645:1472): avc: denied { listen } for pid=12027 comm="syz.3.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.117430][ T29] audit: type=1400 audit(1720529391.645:1473): avc: denied { accept } for pid=12027 comm="syz.3.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.176987][T12035] Falling back ldisc for ptm0. [ 165.221698][T12039] No such timeout policy "syz1" [ 165.229126][T12039] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.240300][T12039] netlink: 'syz.4.2678': attribute type 2 has an invalid length. [ 165.264055][T12041] __nla_validate_parse: 5 callbacks suppressed [ 165.264074][T12041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2679'. [ 165.264880][ T29] audit: type=1400 audit(1720529391.845:1474): avc: denied { mount } for pid=12042 comm="syz.4.2680" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.313592][ T29] audit: type=1400 audit(1720529391.895:1475): avc: denied { unmount } for pid=11448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.347229][ T29] audit: type=1326 audit(1720529391.925:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.4.2682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d786ffbd9 code=0x0 [ 165.377468][ T29] audit: type=1400 audit(1720529391.955:1477): avc: denied { create } for pid=12050 comm="syz.0.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.397557][ T29] audit: type=1400 audit(1720529391.975:1478): avc: denied { connect } for pid=12050 comm="syz.0.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.485478][T11664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.585293][T11664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.635699][T11664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.684857][ T28] bridge_slave_1: left allmulticast mode [ 165.690578][ T28] bridge_slave_1: left promiscuous mode [ 165.696347][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.704329][ T28] bridge_slave_0: left allmulticast mode [ 165.709995][ T28] bridge_slave_0: left promiscuous mode [ 165.715793][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.824853][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.835743][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.845857][ T28] bond0 (unregistering): Released all slaves [ 165.867100][T11664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.876270][T11664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.885306][T11664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.895347][T11664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.936988][ T28] hsr_slave_0: left promiscuous mode [ 165.942971][ T28] hsr_slave_1: left promiscuous mode [ 165.948665][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.956404][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.965038][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.972648][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.982379][ T28] veth1_macvtap: left promiscuous mode [ 165.987875][ T28] veth0_macvtap: left promiscuous mode [ 165.993621][ T28] veth1_vlan: left promiscuous mode [ 165.998847][ T28] veth0_vlan: left promiscuous mode [ 166.085296][ T28] team0 (unregistering): Port device team_slave_1 removed [ 166.096042][ T28] team0 (unregistering): Port device team_slave_0 removed [ 166.134959][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2690'. [ 166.152703][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.165203][T11664] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.178193][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.185326][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.216512][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.219938][ T29] audit: type=1400 audit(1720529392.795:1479): avc: denied { bind } for pid=12073 comm="syz.0.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 166.223725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.261601][T11664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.361211][T12080] loop1: detected capacity change from 0 to 128 [ 166.386165][T12080] FAT-fs (loop1): invalid media value (0x00) [ 166.392381][T12080] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 166.401776][T12080] FAT-fs (loop1): Can't find a valid FAT filesystem [ 166.432617][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.513646][T12080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 166.867177][T12100] loop1: detected capacity change from 0 to 1024 [ 166.885780][T12100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.914874][T12100] vhci_hcd: invalid port number 97 [ 166.920108][T12100] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 166.925837][T11664] veth0_vlan: entered promiscuous mode [ 166.938464][T11664] veth1_vlan: entered promiscuous mode [ 166.955434][T11664] veth0_macvtap: entered promiscuous mode [ 166.962944][T11664] veth1_macvtap: entered promiscuous mode [ 166.973931][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.984427][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.994327][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.004902][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.014753][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.025202][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.035209][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.045735][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.057021][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.057264][T11664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.076819][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.087425][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.097429][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.108047][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.117903][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.128374][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.138268][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.148756][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.159959][T11664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.168904][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2704'. [ 167.189739][T11664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.198708][T11664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.207481][T11664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.216357][T11664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.290272][T12126] loop4: detected capacity change from 0 to 128 [ 167.297591][T12126] FAT-fs (loop4): invalid media value (0x00) [ 167.303760][T12126] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 167.313104][T12126] FAT-fs (loop4): Can't find a valid FAT filesystem [ 167.350981][T12140] loop7: detected capacity change from 0 to 16384 [ 167.379921][T12126] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 167.504109][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 167.576526][T12169] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 167.600242][T12169] veth0_vlan: left promiscuous mode [ 167.610447][T12169] veth0_vlan: entered promiscuous mode [ 167.637261][T12169] team0: Device veth0_vlan failed to register rx_handler [ 167.693111][T12172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2719'. [ 167.855034][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 169.047568][T12225] loop1: detected capacity change from 0 to 512 [ 169.077212][T12225] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.2743: casefold flag without casefold feature [ 169.171394][T12225] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2743: couldn't read orphan inode 15 (err -117) [ 169.195019][T12225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.271283][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.317789][T12256] loop4: detected capacity change from 0 to 512 [ 169.334030][T12256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.347321][T12256] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.367944][T12261] loop1: detected capacity change from 0 to 512 [ 169.387386][T12261] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 169.415193][T12263] loop2: detected capacity change from 0 to 1024 [ 169.435366][T12263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.447924][T12263] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.487128][T11664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.527564][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 169.578099][T12276] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2756: corrupted inode contents [ 169.595049][T12276] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.2756: mark_inode_dirty error [ 169.607473][T12276] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2756: corrupted inode contents [ 169.620567][T12276] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2756: mark_inode_dirty error [ 169.778720][T12284] loop2: detected capacity change from 0 to 512 [ 169.795359][T12284] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.2763: casefold flag without casefold feature [ 169.840151][ T3202] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 169.848415][T12284] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2763: couldn't read orphan inode 15 (err -117) [ 169.863304][T12284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.877305][ T3202] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 169.948663][T11664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.011099][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 170.011184][ T29] audit: type=1400 audit(1720529396.585:1495): avc: denied { unmount } for pid=12295 comm="syz.2.2768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 170.039970][ T29] audit: type=1400 audit(1720529396.625:1496): avc: denied { remount } for pid=12295 comm="syz.2.2768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 170.087808][T12304] tap0: tun_chr_ioctl cmd 1074025677 [ 170.093678][T12304] tap0: linktype set to 825 [ 170.099194][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 170.208200][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.285609][T12326] loop4: detected capacity change from 0 to 512 [ 170.293427][T12326] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.2778: casefold flag without casefold feature [ 170.306290][T12326] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2778: couldn't read orphan inode 15 (err -117) [ 170.319190][T12326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.408015][T11448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.503087][ T29] audit: type=1400 audit(1720529397.085:1497): avc: denied { bind } for pid=12337 comm="syz.4.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.526885][T12341] tap0: tun_chr_ioctl cmd 1074025677 [ 170.533459][T12341] tap0: linktype set to 825 [ 170.546320][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 170.738710][T12356] loop4: detected capacity change from 0 to 256 [ 171.019259][T12361] loop1: detected capacity change from 0 to 2048 [ 171.050664][T12365] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 171.134241][T12361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.176409][ T29] audit: type=1400 audit(1720529397.755:1498): avc: denied { map } for pid=12360 comm="syz.1.2795" path="/91/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 171.199154][ T29] audit: type=1400 audit(1720529397.755:1499): avc: denied { execute } for pid=12360 comm="syz.1.2795" path="/91/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 171.222344][ T29] audit: type=1400 audit(1720529397.755:1500): avc: denied { getopt } for pid=12360 comm="syz.1.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.275590][T12371] loop4: detected capacity change from 0 to 2048 [ 171.284433][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.317689][T12309] kexec: Could not allocate control_code_buffer [ 171.356710][ T29] audit: type=1326 audit(1720529397.935:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.3.2803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x0 [ 171.389219][T12371] loop4: p1 < > p3 p4 < > [ 171.397086][T12371] loop4: p3 start 4284289 is beyond EOD, truncated [ 171.409958][T12371] isofs_fill_super: bread failed, dev=loop4p4, iso_blknum=16, block=32 [ 171.410806][ T29] audit: type=1400 audit(1720529397.985:1502): avc: denied { mounton } for pid=12370 comm="syz.4.2798" path="/dev/loop4p4" dev="devtmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.517512][ T29] audit: type=1400 audit(1720529398.095:1503): avc: denied { create } for pid=12392 comm="syz.1.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.538840][ T29] audit: type=1400 audit(1720529398.125:1504): avc: denied { ioctl } for pid=12392 comm="syz.1.2808" path="socket:[42256]" dev="sockfs" ino=42256 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.625869][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 171.725394][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2815'. [ 171.986733][T12422] loop3: detected capacity change from 0 to 256 [ 172.351509][T12422] loop3: detected capacity change from 0 to 8192 [ 172.538003][T12399] kexec: Could not allocate control_code_buffer [ 172.570495][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2829'. [ 172.694827][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2843'. [ 172.707956][T12474] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44508 - 0 [ 172.717061][T12474] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44508 - 0 [ 172.726059][T12474] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44508 - 0 [ 172.735174][T12474] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 44508 - 0 [ 172.750674][T12474] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 45736 - 0 [ 172.759578][T12474] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 45736 - 0 [ 172.768446][T12474] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 45736 - 0 [ 172.777289][T12474] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 45736 - 0 [ 172.788494][T12474] geneve2: entered promiscuous mode [ 172.797954][T12474] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 45736 - 0 [ 172.807076][T12474] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 45736 - 0 [ 172.816085][T12474] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 45736 - 0 [ 172.825139][T12474] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 45736 - 0 [ 172.836037][T12474] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 44508 - 0 [ 172.845111][T12474] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 44508 - 0 [ 172.854142][T12474] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 44508 - 0 [ 172.863382][T12474] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 44508 - 0 [ 173.022402][T12497] netlink: 'syz.3.2854': attribute type 5 has an invalid length. [ 173.030218][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 173.081101][T12501] loop3: detected capacity change from 0 to 2048 [ 173.132072][T12501] loop3: p1 < > p3 p4 < > [ 173.141423][T12501] loop3: p3 start 4284289 is beyond EOD, truncated [ 173.151748][T12501] isofs_fill_super: bread failed, dev=loop3p4, iso_blknum=16, block=32 [ 173.267199][T12514] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 40928 - 0 [ 173.276114][T12514] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 40928 - 0 [ 173.285038][T12514] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 40928 - 0 [ 173.293960][T12514] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 40928 - 0 [ 173.304331][T12514] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 52330 - 0 [ 173.313210][T12514] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 52330 - 0 [ 173.322071][T12514] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 52330 - 0 [ 173.330953][T12514] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 52330 - 0 [ 173.341172][T12514] geneve2: entered promiscuous mode [ 173.348732][T12514] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 52330 - 0 [ 173.357922][T12514] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 52330 - 0 [ 173.366930][T12514] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 52330 - 0 [ 173.375999][T12514] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 52330 - 0 [ 173.390389][T12514] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 40928 - 0 [ 173.399472][T12514] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 40928 - 0 [ 173.408482][T12514] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 40928 - 0 [ 173.417578][T12514] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 40928 - 0 [ 173.496641][T12522] netlink: 'syz.0.2866': attribute type 5 has an invalid length. [ 173.504473][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'. [ 173.558763][T12529] loop3: detected capacity change from 0 to 256 [ 173.600004][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2869'. [ 173.706732][T12468] kexec: Could not allocate control_code_buffer [ 173.737122][T12540] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 173.746379][T12544] loop1: detected capacity change from 0 to 128 [ 173.761473][T12544] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 173.769745][T12544] FAT-fs (loop1): Filesystem has been set read-only [ 173.782456][T12544] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 173.787608][T12547] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 35589 - 0 [ 173.798818][T12547] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 35589 - 0 [ 173.807702][T12547] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 35589 - 0 [ 173.816535][T12547] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 35589 - 0 [ 173.826380][T12547] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 44629 - 0 [ 173.835356][T12547] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 44629 - 0 [ 173.844312][T12547] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 44629 - 0 [ 173.853181][T12547] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 44629 - 0 [ 173.863236][T12547] geneve2: entered promiscuous mode [ 173.871117][T12547] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 44629 - 0 [ 173.880154][T12547] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 44629 - 0 [ 173.889232][T12547] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 44629 - 0 [ 173.898303][T12547] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 44629 - 0 [ 173.907474][T12547] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 35589 - 0 [ 173.916558][T12547] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 35589 - 0 [ 173.925589][T12547] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 35589 - 0 [ 173.934815][T12547] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 35589 - 0 [ 173.977502][T12561] netlink: 'syz.0.2884': attribute type 12 has an invalid length. [ 173.985509][T12561] netlink: 'syz.0.2884': attribute type 29 has an invalid length. [ 173.993409][T12561] netlink: 'syz.0.2884': attribute type 2 has an invalid length. [ 174.001161][T12561] netlink: 'syz.0.2884': attribute type 2 has an invalid length. [ 174.008968][T12561] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2884'. [ 174.333563][T12600] loop2: detected capacity change from 0 to 8192 [ 174.376161][T12600] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.452470][T12600] loop2: detected capacity change from 0 to 512 [ 174.459214][T12600] EXT4-fs: Ignoring removed oldalloc option [ 174.467502][T12600] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2903: Parent and EA inode have the same ino 15 [ 174.480301][T12600] EXT4-fs (loop2): Remounting filesystem read-only [ 174.486982][T12600] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 174.497199][T12600] EXT4-fs (loop2): 1 orphan inode deleted [ 174.503396][T12600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.515471][T12600] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 174.523701][T12600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.603519][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 175.224027][T12669] vlan2: entered promiscuous mode [ 175.229106][T12669] veth0: entered promiscuous mode [ 175.234331][T12669] vlan2: entered allmulticast mode [ 175.239528][T12669] veth0: entered allmulticast mode [ 175.246509][T12669] veth0: left allmulticast mode [ 175.251384][T12669] veth0: left promiscuous mode [ 175.316260][T12671] TCP: Unexpected MD5 Hash found for [fe80::bb].0->[ff02::1].20002 [F.] [ 175.335600][T12673] netlink: 'syz.2.2934': attribute type 4 has an invalid length. [ 175.653687][T12682] loop1: detected capacity change from 0 to 512 [ 175.673793][T12682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.686549][T12682] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.881700][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.926898][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2951'. [ 175.935969][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2951'. [ 175.998446][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 175.998459][ T29] audit: type=1326 audit(1720529402.575:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.032936][ T29] audit: type=1326 audit(1720529402.585:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.056407][ T29] audit: type=1326 audit(1720529402.585:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.079996][ T29] audit: type=1326 audit(1720529402.585:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.103535][ T29] audit: type=1326 audit(1720529402.585:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.127043][ T29] audit: type=1326 audit(1720529402.585:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.150639][ T29] audit: type=1326 audit(1720529402.585:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.174178][ T29] audit: type=1326 audit(1720529402.585:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.197801][ T29] audit: type=1326 audit(1720529402.585:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.221278][ T29] audit: type=1326 audit(1720529402.585:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x7ffc0000 [ 176.378204][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2964'. [ 176.387247][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2964'. [ 177.326289][T12772] netlink: 'syz.3.2977': attribute type 3 has an invalid length. [ 177.334087][T12772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2977'. [ 177.527545][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113aa3400: rx timeout, send abort [ 177.535868][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888102b66800: rx timeout, send abort [ 177.544236][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113aa3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.558642][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888102b66800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.784209][T12802] netlink: 'syz.2.2989': attribute type 3 has an invalid length. [ 177.786911][T12803] loop1: detected capacity change from 0 to 256 [ 177.791992][T12802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 177.841210][T12805] loop2: detected capacity change from 0 to 4096 [ 177.848972][T12805] EXT4-fs: Ignoring removed nobh option [ 177.854590][T12805] EXT4-fs: Ignoring removed i_version option [ 177.862817][T12805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.866868][T12803] loop1: detected capacity change from 0 to 8192 [ 177.893380][T11664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.959131][T12810] loop2: detected capacity change from 0 to 128 [ 178.050284][T12812] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2993'. [ 178.091365][T12818] loop2: detected capacity change from 0 to 2048 [ 178.199920][ T4536] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.207425][ T4536] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.217064][ T4536] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 178.261465][T12831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3002'. [ 178.272221][T12831] loop3: detected capacity change from 0 to 256 [ 178.520422][T12843] loop2: detected capacity change from 0 to 2048 [ 178.679784][ T3194] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 178.687311][ T3194] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 178.713236][ T3194] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 178.962819][ T4536] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 178.970276][ T4536] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 178.984097][ T4536] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 179.522663][T12847] syz.0.3009 (12847) used greatest stack depth: 8368 bytes left [ 179.867259][T12938] loop1: detected capacity change from 0 to 512 [ 179.883704][T12938] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.3043: corrupted in-inode xattr: e_value size too large [ 179.903004][T12938] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.3043: couldn't read orphan inode 15 (err -117) [ 179.935920][T12938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.083362][T12960] netlink: 'syz.3.3051': attribute type 21 has an invalid length. [ 180.162700][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.392092][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3065'. [ 181.413948][T13000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 181.427358][T13000] loop1: detected capacity change from 0 to 256 [ 181.980882][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 181.980898][ T29] audit: type=1400 audit(1720529408.555:1895): avc: denied { create } for pid=13021 comm="syz.3.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.042864][T13022] loop3: detected capacity change from 0 to 2048 [ 182.092187][T13022] loop3: p1 < > p3 [ 182.096774][T13022] loop3: p3 size 134217728 extends beyond EOD, truncated [ 182.105669][ T29] audit: type=1400 audit(1720529408.685:1896): avc: denied { map } for pid=13021 comm="syz.3.3076" path="socket:[44478]" dev="sockfs" ino=44478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 182.183716][T13035] loop3: detected capacity change from 0 to 256 [ 182.942853][T13044] chnl_net:caif_netlink_parms(): no params data found [ 182.977572][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3090'. [ 183.005537][ T1444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.056984][ T1444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.193293][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.200394][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.285027][T13044] bridge_slave_0: entered allmulticast mode [ 183.331281][T13044] bridge_slave_0: entered promiscuous mode [ 183.363371][ T1444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.425287][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.432552][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.454556][T13086] loop1: detected capacity change from 0 to 256 [ 183.491242][T13044] bridge_slave_1: entered allmulticast mode [ 183.502634][T13044] bridge_slave_1: entered promiscuous mode [ 183.512359][ T1444] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.535891][T13044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.546466][T13044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.566730][T13044] team0: Port device team_slave_0 added [ 183.576416][T13044] team0: Port device team_slave_1 added [ 183.605528][T13044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.612533][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.638517][T13044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.649877][ T1444] bridge_slave_1: left allmulticast mode [ 183.655576][ T1444] bridge_slave_1: left promiscuous mode [ 183.661352][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.669615][ T1444] bridge_slave_0: left allmulticast mode [ 183.675497][ T1444] bridge_slave_0: left promiscuous mode [ 183.681250][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.835198][ T1444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.847083][ T1444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.872538][ T1444] bond0 (unregistering): Released all slaves [ 183.881160][T13044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.888142][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.914134][T13044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.968148][T13088] loop2: detected capacity change from 0 to 256 [ 183.976881][T13044] hsr_slave_0: entered promiscuous mode [ 183.984015][T13044] hsr_slave_1: entered promiscuous mode [ 183.990080][T13044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.997897][T13044] Cannot create hsr debugfs directory [ 184.008263][ T1444] hsr_slave_0: left promiscuous mode [ 184.015549][ T1444] hsr_slave_1: left promiscuous mode [ 184.021741][ T1444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.029247][ T1444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.045786][ T1444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.053338][ T1444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.064198][ T1444] veth1_macvtap: left promiscuous mode [ 184.069701][ T1444] veth0_macvtap: left promiscuous mode [ 184.075245][ T1444] veth1_vlan: left promiscuous mode [ 184.209617][ T1444] team0 (unregistering): Port device team_slave_1 removed [ 184.223654][ T1444] team0 (unregistering): Port device team_slave_0 removed [ 184.267553][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3101'. [ 184.392957][T13111] loop2: detected capacity change from 0 to 512 [ 184.408849][T13111] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.3107: corrupted in-inode xattr: e_value size too large [ 184.424987][ T29] audit: type=1326 audit(1720529411.005:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.3108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa407d25bd9 code=0x0 [ 184.449580][T13111] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.3107: couldn't read orphan inode 15 (err -117) [ 184.495322][T13111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.700802][T13044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.767357][T13044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.821300][T13044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.863960][T13044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.015357][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.029212][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.039337][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.046462][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.062728][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.069937][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.088036][T13044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.098600][T13044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.168539][T13044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.259547][T11664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.292610][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3112'. [ 185.372614][T13044] veth0_vlan: entered promiscuous mode [ 185.398908][T13044] veth1_vlan: entered promiscuous mode [ 185.410983][T13149] loop1: detected capacity change from 0 to 512 [ 185.436494][T13044] veth0_macvtap: entered promiscuous mode [ 185.451156][T13044] veth1_macvtap: entered promiscuous mode [ 185.457557][T13149] EXT4-fs: Ignoring removed nobh option [ 185.469040][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.479522][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.489386][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.499907][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.509753][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.520358][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.521964][T13149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.530200][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.550426][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.558419][T13157] loop3: detected capacity change from 0 to 2048 [ 185.563597][T13044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.576007][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.586489][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.596591][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.607084][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.617065][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.627584][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.637476][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.647989][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.660636][T13044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.675083][T13044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.684077][T13044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.693318][T13044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.702115][T13044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.720442][T13149] EXT4-fs (loop1): 1 truncate cleaned up [ 185.726765][T13157] loop3: p1 < > p3 [ 185.731216][T13149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.788018][T13157] loop3: p3 size 134217728 extends beyond EOD, truncated [ 185.964705][T13176] loop2: detected capacity change from 0 to 128 [ 185.991937][ T29] audit: type=1400 audit(1720529412.565:1898): avc: denied { module_load } for pid=13175 comm="syz.2.3122" path="/140/file0/bus" dev="loop2" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 186.143206][T13191] program syz.2.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.172898][T13192] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.268626][T13202] loop3: detected capacity change from 0 to 128 [ 186.457953][T13215] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3138'. [ 186.485356][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'. [ 186.503669][T13217] program syz.3.3139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.515278][T13219] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.534675][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 186.654776][ T29] audit: type=1400 audit(1720529413.235:1899): avc: denied { read } for pid=13234 comm="syz.2.3149" lport=42108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.719005][T13138] syz.1.3111 (13138) used greatest stack depth: 8016 bytes left [ 186.736911][T11228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.748641][T13243] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3152'. [ 186.758821][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 186.783103][T13245] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.801067][T13247] program syz.1.3153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.808406][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'. [ 186.857093][T13254] tmpfs: Bad value for 'nr_inodes' [ 186.927701][ T29] audit: type=1400 audit(1720529413.505:1900): avc: denied { write } for pid=13265 comm="syz.4.3163" path="socket:[45873]" dev="sockfs" ino=45873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.973206][ T29] audit: type=1400 audit(1720529413.545:1901): avc: denied { write } for pid=13265 comm="syz.4.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.992922][ T29] audit: type=1400 audit(1720529413.545:1902): avc: denied { getopt } for pid=13265 comm="syz.4.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.046531][T13269] loop4: detected capacity change from 0 to 512 [ 187.149183][T13269] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.275142][T13269] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3164: bg 0: block 64: padding at end of block bitmap is not set [ 187.324618][T13269] Quota error (device loop4): write_blk: dquota write failed [ 187.355857][T13269] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 187.395187][T13269] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.3164: Failed to acquire dquot type 0 [ 187.441397][T13269] EXT4-fs (loop4): 1 truncate cleaned up [ 187.447479][T13269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.463889][T13269] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 187.472251][T13269] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 187.481779][ T29] audit: type=1400 audit(1720529414.055:1903): avc: denied { watch watch_reads } for pid=13267 comm="syz.4.3164" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.515270][T13234] ================================================================== [ 187.523353][T13234] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 187.530468][T13234] [ 187.532789][T13234] write to 0xffff88811cb5b680 of 8 bytes by task 13237 on cpu 1: [ 187.540506][T13234] exit_mm+0x9c/0x190 [ 187.544511][T13234] do_exit+0x556/0x1710 [ 187.548668][T13234] do_group_exit+0x102/0x150 [ 187.553266][T13234] get_signal+0xf2f/0x1080 [ 187.557692][T13234] arch_do_signal_or_restart+0x95/0x4b0 [ 187.563240][T13234] syscall_exit_to_user_mode+0x59/0x130 [ 187.568792][T13234] do_syscall_64+0xd6/0x1c0 [ 187.573314][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.579239][T13234] [ 187.581560][T13234] read to 0xffff88811cb5b680 of 8 bytes by task 13234 on cpu 0: [ 187.589208][T13234] mm_update_next_owner+0x1c9/0x450 [ 187.594414][T13234] exit_mm+0xdc/0x190 [ 187.598399][T13234] do_exit+0x556/0x1710 [ 187.602558][T13234] do_group_exit+0x142/0x150 [ 187.607161][T13234] __x64_sys_exit_group+0x1f/0x20 [ 187.612190][T13234] x64_sys_call+0x27f9/0x2d70 [ 187.616895][T13234] do_syscall_64+0xc9/0x1c0 [ 187.621407][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.627306][T13234] [ 187.629626][T13234] value changed: 0xffff8881130c9500 -> 0x0000000000000000 [ 187.636726][T13234] [ 187.639044][T13234] Reported by Kernel Concurrency Sanitizer on: [ 187.645189][T13234] CPU: 0 PID: 13234 Comm: syz.2.3149 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 187.655341][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 187.665396][T13234] ================================================================== [ 187.694834][T13269] Quota error (device loop4): write_blk: dquota write failed [ 187.702499][T13269] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 187.713766][T13269] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.3164: Failed to acquire dquot type 0 [ 187.791673][T13044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.