last executing test programs: 3.881098194s ago: executing program 4 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001"], 0x108}}, 0x0) 3.655828055s ago: executing program 1 (id=2863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 3.308425387s ago: executing program 0 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 3.227338725s ago: executing program 0 (id=2875): mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.205707758s ago: executing program 0 (id=2868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) close_range(r1, 0xffffffffffffffff, 0x0) 2.019485155s ago: executing program 0 (id=2870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) 1.932986933s ago: executing program 0 (id=2871): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.931413193s ago: executing program 4 (id=2843): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 1.866647929s ago: executing program 4 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000000400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000005"], 0x50) 1.860748909s ago: executing program 0 (id=2877): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1.807084435s ago: executing program 4 (id=2880): mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.659887368s ago: executing program 3 (id=2885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1000000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2) 1.388291513s ago: executing program 2 (id=2891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 1.361536235s ago: executing program 3 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.109273518s ago: executing program 1 (id=2894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.109060068s ago: executing program 3 (id=2895): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) inotify_init1(0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 1.107262548s ago: executing program 2 (id=2904): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x189) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x7}) 928.059905ms ago: executing program 4 (id=2896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) 927.834275ms ago: executing program 1 (id=2897): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 927.530235ms ago: executing program 2 (id=2898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 886.729449ms ago: executing program 1 (id=2899): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff430486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 846.965522ms ago: executing program 1 (id=2900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 846.658192ms ago: executing program 2 (id=2901): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 827.993734ms ago: executing program 4 (id=2902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 243.636468ms ago: executing program 3 (id=2903): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 242.791638ms ago: executing program 1 (id=2914): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) inotify_init1(0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 242.013788ms ago: executing program 2 (id=2905): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x201c840, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 165.248005ms ago: executing program 2 (id=2906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 157.566175ms ago: executing program 3 (id=2907): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 0s ago: executing program 3 (id=2908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) kernel console output (not intermixed with test programs): .269928][ T9444] EXT4-fs: Ignoring removed nobh option [ 102.275757][ T9444] EXT4-fs: Ignoring removed i_version option [ 102.291934][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 102.327836][ T9455] syz.4.2121[9455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.327924][ T9455] syz.4.2121[9455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.341826][ T9455] tmpfs: Unsupported parameter 'huge' [ 102.368126][ T29] audit: type=1400 audit(102.364:2563): avc: denied { create } for pid=9457 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.387179][ T29] audit: type=1400 audit(102.364:2564): avc: denied { bind } for pid=9457 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.406010][ T29] audit: type=1400 audit(102.364:2565): avc: denied { listen } for pid=9457 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.425078][ T29] audit: type=1400 audit(102.364:2566): avc: denied { connect } for pid=9457 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.444359][ T29] audit: type=1400 audit(102.364:2567): avc: denied { write } for pid=9457 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.675941][ T9479] loop4: detected capacity change from 0 to 8192 [ 102.721258][ T9493] loop3: detected capacity change from 0 to 512 [ 102.747484][ T9493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.788421][ T9211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.811590][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.819313][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.827068][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.834792][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.842506][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.850175][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.857946][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.865680][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.873422][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.881144][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.888880][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.896658][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.904446][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.912150][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.919983][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.927891][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.935601][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.940971][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.943329][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.959439][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.967153][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.974907][ T24] hid-generic 0000:1000003:0000.0007: unknown main item tag 0x0 [ 102.982684][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.993772][ T24] hid-generic 0000:1000003:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.011626][ T29] audit: type=1400 audit(102.994:2568): avc: denied { append } for pid=9504 comm="syz.4.2143" name="hidraw0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.036859][ T9511] loop3: detected capacity change from 0 to 4096 [ 103.061084][ T9511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.121127][ T9211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.207565][ T9529] loop1: detected capacity change from 0 to 256 [ 103.215631][ T9529] msdos: Unknown parameter 'dots-gid' [ 103.242293][ T9532] syz.0.2154[9532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.242444][ T9532] syz.0.2154[9532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.287095][ T9529] loop1: detected capacity change from 0 to 8192 [ 103.305788][ T9529] vfat: Unknown parameter 'xœìÝÁjQ' [ 103.373570][ T9540] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 103.474972][ T9552] loop1: detected capacity change from 0 to 512 [ 103.477669][ T9554] hsr0: entered promiscuous mode [ 103.487675][ T9554] macsec1: entered promiscuous mode [ 103.493114][ T9554] macsec1: entered allmulticast mode [ 103.498645][ T9554] hsr0: entered allmulticast mode [ 103.503814][ T9554] hsr_slave_0: entered allmulticast mode [ 103.509507][ T9554] hsr_slave_1: entered allmulticast mode [ 103.527376][ T9554] hsr0: left allmulticast mode [ 103.532233][ T9554] hsr_slave_0: left allmulticast mode [ 103.537759][ T9554] hsr_slave_1: left allmulticast mode [ 103.545231][ T9552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.665445][ T9563] loop4: detected capacity change from 0 to 512 [ 103.676009][ T9563] EXT4-fs: Ignoring removed oldalloc option [ 103.717501][ T5403] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.847844][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2180'. [ 103.899493][ T9602] hub 9-0:1.0: USB hub found [ 103.905956][ T9602] hub 9-0:1.0: 8 ports detected [ 104.041839][ T9619] loop1: detected capacity change from 0 to 512 [ 104.048947][ T9615] wg2: entered promiscuous mode [ 104.054122][ T9615] wg2: entered allmulticast mode [ 104.063605][ T9619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.088913][ T5403] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.168887][ T9637] loop1: detected capacity change from 0 to 1024 [ 104.189515][ T9637] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.202373][ T9637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.216555][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.225626][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.234717][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.261910][ T5403] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 104.278827][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.287866][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.296868][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.306226][ T5403] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 104.350337][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 104.369847][ T7961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585491][ T6817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.627370][ T6817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.664257][ T9655] syzkaller0: entered promiscuous mode [ 104.669957][ T9655] syzkaller0: entered allmulticast mode [ 104.678451][ T9655] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 104.691732][ T6817] bond0: (slave netdevsim1): Releasing backup interface [ 104.702634][ T6817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.747384][ T6817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.842572][ T6817] batman_adv: batadv0: Interface deactivated: gretap1 [ 104.918754][ T6817] batman_adv: batadv0: Removing interface: gretap1 [ 104.940380][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.952378][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.964443][ T6817] bond0 (unregistering): Released all slaves [ 105.012484][ T9651] chnl_net:caif_netlink_parms(): no params data found [ 105.046964][ T6817] hsr_slave_0: left promiscuous mode [ 105.058683][ T6817] hsr_slave_1: left promiscuous mode [ 105.065749][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.073253][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.083942][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.091433][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.113303][ T6817] veth1_macvtap: left promiscuous mode [ 105.118878][ T6817] veth0_macvtap: left promiscuous mode [ 105.124463][ T6817] veth1_vlan: left promiscuous mode [ 105.129770][ T6817] veth0_vlan: left promiscuous mode [ 105.263766][ T9685] rdma_op ffff888109d85d80 conn xmit_rdma 0000000000000000 [ 105.318409][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 105.329830][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 105.468488][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.475741][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.484344][ T9651] bridge_slave_0: entered allmulticast mode [ 105.492112][ T9651] bridge_slave_0: entered promiscuous mode [ 105.507235][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.514700][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.526476][ T9651] bridge_slave_1: entered allmulticast mode [ 105.533088][ T9651] bridge_slave_1: entered promiscuous mode [ 105.575466][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.587915][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.628123][ T9651] team0: Port device team_slave_0 added [ 105.635360][ T9651] team0: Port device team_slave_1 added [ 105.673423][ T9720] netlink: 'syz.4.2232': attribute type 3 has an invalid length. [ 105.688372][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.695423][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.721380][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.753495][ T9725] loop0: detected capacity change from 0 to 2048 [ 105.769899][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.777032][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.803083][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.832809][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.858194][ T9732] loop2: detected capacity change from 0 to 2048 [ 105.874723][ T9651] hsr_slave_0: entered promiscuous mode [ 105.882956][ T9725] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.899570][ T9651] hsr_slave_1: entered promiscuous mode [ 105.906040][ T9651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.916680][ T9725] EXT4-fs (loop0): Remounting filesystem read-only [ 105.919219][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 105.923600][ T9651] Cannot create hsr debugfs directory [ 105.930892][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 105.943643][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 105.950437][ T9743] syz.2.2241[9743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.951955][ T9743] syz.2.2241[9743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.954363][ T9695] chnl_net:caif_netlink_parms(): no params data found [ 105.992350][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 105.999962][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.007605][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.015076][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.022499][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.030042][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.037503][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.045083][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.052617][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.060012][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.067554][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.075178][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.082701][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.090170][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.097651][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.105174][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.112709][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.120271][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.121259][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.127729][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.144164][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.151810][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.159240][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.166762][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.174255][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.181743][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.189264][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.196668][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.204074][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.211484][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.218874][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.226409][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.233943][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.241338][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.249397][ T8] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.279404][ T9753] loop2: detected capacity change from 0 to 512 [ 106.296543][ T6817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.336448][ T6817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.384788][ T6817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.395475][ T9765] loop4: detected capacity change from 0 to 1024 [ 106.402592][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.409702][ T9695] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.425281][ T9695] bridge_slave_0: entered allmulticast mode [ 106.432084][ T9695] bridge_slave_0: entered promiscuous mode [ 106.439170][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.446373][ T9695] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.456745][ T9695] bridge_slave_1: entered allmulticast mode [ 106.463457][ T9695] bridge_slave_1: entered promiscuous mode [ 106.491110][ T9777] syz.4.2255[9777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.491175][ T9777] syz.4.2255[9777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.532401][ T6817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.576826][ T9783] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.587239][ T9783] vhci_hcd: invalid port number 23 [ 106.596071][ T9775] macvtap0: entered promiscuous mode [ 106.614604][ T9775] macvtap0: left promiscuous mode [ 106.629882][ T9787] __nla_validate_parse: 2 callbacks suppressed [ 106.629969][ T9787] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 106.657032][ T9695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.669952][ T9695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.682659][ T9787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.724779][ T9789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.732783][ T9791] loop0: detected capacity change from 0 to 128 [ 106.741931][ T9791] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 106.756343][ T9787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.763536][ T9791] syz.0.2262: attempt to access beyond end of device [ 106.763536][ T9791] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 106.780991][ T9695] team0: Port device team_slave_0 added [ 106.781458][ T9791] syz.0.2262: attempt to access beyond end of device [ 106.781458][ T9791] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 106.804359][ T9695] team0: Port device team_slave_1 added [ 106.818695][ T6817] bridge_slave_1: left allmulticast mode [ 106.824589][ T6817] bridge_slave_1: left promiscuous mode [ 106.830259][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.837985][ T6817] bridge_slave_0: left allmulticast mode [ 106.843705][ T6817] bridge_slave_0: left promiscuous mode [ 106.849385][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.856167][ T9794] loop0: detected capacity change from 0 to 1024 [ 106.863340][ T9794] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 106.877798][ T9794] loop0: detected capacity change from 0 to 512 [ 106.892353][ T9794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.919392][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.971623][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.982831][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.993863][ T6817] bond0 (unregistering): Released all slaves [ 107.006218][ T9789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.028141][ T9787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.050067][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.057162][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.083151][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 107.083168][ T29] audit: type=1326 audit(107.064:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.083198][ T29] audit: type=1326 audit(107.064:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.083278][ T29] audit: type=1326 audit(107.064:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.083304][ T29] audit: type=1326 audit(107.064:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.089425][ T9695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.112359][ T29] audit: type=1326 audit(107.064:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.136368][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.157766][ T29] audit: type=1326 audit(107.064:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.157839][ T29] audit: type=1326 audit(107.064:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.180607][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.191226][ T29] audit: type=1326 audit(107.064:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.191262][ T29] audit: type=1326 audit(107.064:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.214107][ T9695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.349552][ T29] audit: type=1326 audit(107.244:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 107.375028][ T6817] hsr_slave_0: left promiscuous mode [ 107.384627][ T6817] hsr_slave_1: left promiscuous mode [ 107.390455][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.397970][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.406804][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.414281][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.424794][ T6817] veth1_macvtap: left promiscuous mode [ 107.430407][ T6817] veth0_macvtap: left promiscuous mode [ 107.435968][ T6817] veth1_vlan: left promiscuous mode [ 107.441264][ T6817] veth0_vlan: left promiscuous mode [ 107.529756][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 107.540269][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 107.582787][ T9787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.596842][ T9789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.622060][ T9695] hsr_slave_0: entered promiscuous mode [ 107.628357][ T9695] hsr_slave_1: entered promiscuous mode [ 107.634373][ T9695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.642018][ T9695] Cannot create hsr debugfs directory [ 107.657612][ T9789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.675219][ T9787] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.686648][ T9787] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.702445][ T9787] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.715861][ T9787] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.749031][ T9789] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.768637][ T9789] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.780907][ T9789] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.799800][ T9789] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.811022][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 107.820099][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 107.843981][ T9651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.856329][ T9651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.866561][ T9822] loop4: detected capacity change from 0 to 4096 [ 107.875376][ T9651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.884928][ T9651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.940637][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2279'. [ 107.955924][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.982224][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.000175][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.007301][ T6817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.031514][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.038624][ T6817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.131997][ T9695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.144911][ T9695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.156257][ T9695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.164843][ T9849] loop4: detected capacity change from 0 to 512 [ 108.175197][ T9695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.191912][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.283400][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.315080][ T9695] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.331367][ T9861] sch_tbf: peakrate 1 is lower than or equals to rate 3 ! [ 108.349655][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.356831][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.378423][ T9651] veth0_vlan: entered promiscuous mode [ 108.398775][ T9651] veth1_vlan: entered promiscuous mode [ 108.410317][ T9872] loop4: detected capacity change from 0 to 512 [ 108.427951][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.435076][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.502328][ T9651] veth0_macvtap: entered promiscuous mode [ 108.515576][ T9651] veth1_macvtap: entered promiscuous mode [ 108.543741][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.554419][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.564322][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.574865][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.584732][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.595244][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.634409][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.652056][ T9695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.678263][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.688844][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.698748][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.709301][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.719493][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.729963][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.760458][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.782040][ T9651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.791148][ T9651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.800002][ T9651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.808764][ T9651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.832359][ T9901] loop7: detected capacity change from 16384 to 16383 [ 108.927387][ T9695] veth0_vlan: entered promiscuous mode [ 108.930833][ T9908] Invalid logical block size (65472) [ 108.938014][ T9695] veth1_vlan: entered promiscuous mode [ 108.972336][ T9695] veth0_macvtap: entered promiscuous mode [ 108.980140][ T9695] veth1_macvtap: entered promiscuous mode [ 108.991908][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.002496][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.012383][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.022884][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.032905][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.044020][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.054051][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.064512][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.080171][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.095676][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.106242][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.116286][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.126965][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.136868][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.142031][ T9933] ebtables: ebtables: counters copy to user failed while replacing table [ 109.147318][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.165799][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.167274][ T9897] Buffer I/O error on dev loop7, logical block 2047, async page read [ 109.176295][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.185851][ T9897] Buffer I/O error on dev loop7, logical block 2047, async page read [ 109.204323][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.228984][ T9932] ebtables: ebtables: counters copy to user failed while replacing table [ 109.239795][ T9695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248735][ T9695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.257510][ T9695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.266296][ T9695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.345611][ T9944] loop2: detected capacity change from 0 to 512 [ 109.358402][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2307'. [ 109.425594][ T9957] SELinux: Context Ü is not valid (left unmapped). [ 109.469674][ T9964] €: renamed from bond0 (while UP) [ 109.503226][ T9971] vlan2: entered promiscuous mode [ 109.508347][ T9971] macvtap0: entered promiscuous mode [ 109.518419][ T9971] macvtap0: left promiscuous mode [ 109.524214][ T9975] syz.2.2322[9975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.524353][ T9975] syz.2.2322[9975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.704146][ T9997] loop2: detected capacity change from 0 to 512 [ 109.742282][ T9999] Invalid ELF header magic: != ELF [ 109.912000][T10013] loop4: detected capacity change from 0 to 128 [ 110.027399][T10022] syzkaller0: refused to change device tx_queue_len [ 110.060011][T10016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.108142][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2348'. [ 110.117742][T10040] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 110.118011][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2349'. [ 110.143571][T10040] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.249279][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 110.347241][T10071] loop0: detected capacity change from 0 to 512 [ 110.361479][T10071] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 110.369609][T10071] System zones: 0-2, 18-18, 34-34 [ 110.376880][T10071] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2363: bg 0: block 248: padding at end of block bitmap is not set [ 110.398368][T10071] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.2363: Failed to acquire dquot type 1 [ 110.412568][T10071] EXT4-fs (loop0): 1 truncate cleaned up [ 110.418938][T10071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.432071][T10075] loop4: detected capacity change from 0 to 2048 [ 110.448281][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.457957][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:3: Failed to release dquot type 1 [ 110.480945][T10075] Alternate GPT is invalid, using primary GPT. [ 110.487377][T10075] loop4: p2 p3 p7 [ 110.522501][T10092] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.677423][T10118] netlink: 'syz.2.2376': attribute type 1 has an invalid length. [ 110.685302][T10118] netlink: 'syz.2.2376': attribute type 2 has an invalid length. [ 110.731926][T10117] loop1: detected capacity change from 0 to 8192 [ 110.814267][T10141] loop4: detected capacity change from 0 to 164 [ 110.816091][T10141] Unable to read rock-ridge attributes [ 110.831773][T10141] Unable to read rock-ridge attributes [ 110.963087][T10158] loop4: detected capacity change from 0 to 4096 [ 110.970378][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 111.032039][T10174] loop1: detected capacity change from 0 to 1024 [ 111.048440][T10174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.066493][T10180] loop0: detected capacity change from 0 to 164 [ 111.073504][T10174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.105837][T10180] syz.0.2395: attempt to access beyond end of device [ 111.105837][T10180] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 111.120517][T10180] syz.0.2395: attempt to access beyond end of device [ 111.120517][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.134177][T10180] syz.0.2395: attempt to access beyond end of device [ 111.134177][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.147800][T10180] syz.0.2395: attempt to access beyond end of device [ 111.147800][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.161492][T10180] syz.0.2395: attempt to access beyond end of device [ 111.161492][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.176077][ T9651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.177309][T10180] syz.0.2395: attempt to access beyond end of device [ 111.177309][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.198819][T10180] syz.0.2395: attempt to access beyond end of device [ 111.198819][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.212703][T10180] syz.0.2395: attempt to access beyond end of device [ 111.212703][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.240979][T10189] loop2: detected capacity change from 0 to 1024 [ 111.247727][T10189] EXT4-fs: Ignoring removed orlov option [ 111.253538][T10189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.411266][T10209] loop3: detected capacity change from 0 to 2048 [ 111.476433][T10209] Alternate GPT is invalid, using primary GPT. [ 111.483035][T10209] loop3: p2 p3 p7 [ 111.584948][T10223] loop3: detected capacity change from 0 to 164 [ 111.603201][T10223] Unable to read rock-ridge attributes [ 111.617085][T10223] Unable to read rock-ridge attributes [ 111.770595][T10180] bio_check_eod: 12040 callbacks suppressed [ 111.770616][T10180] syz.0.2395: attempt to access beyond end of device [ 111.770616][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.790989][T10180] syz.0.2395: attempt to access beyond end of device [ 111.790989][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.804569][T10180] syz.0.2395: attempt to access beyond end of device [ 111.804569][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.818060][T10180] syz.0.2395: attempt to access beyond end of device [ 111.818060][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.831601][T10180] syz.0.2395: attempt to access beyond end of device [ 111.831601][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.845163][T10180] syz.0.2395: attempt to access beyond end of device [ 111.845163][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.858741][T10180] syz.0.2395: attempt to access beyond end of device [ 111.858741][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.872301][T10180] syz.0.2395: attempt to access beyond end of device [ 111.872301][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.885801][T10180] syz.0.2395: attempt to access beyond end of device [ 111.885801][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.899533][T10180] syz.0.2395: attempt to access beyond end of device [ 111.899533][T10180] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.957137][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2412'. [ 112.086956][T10249] 9pnet_fd: Insufficient options for proto=fd [ 112.097044][T10251] loop3: detected capacity change from 0 to 512 [ 112.105072][T10251] EXT4-fs: Ignoring removed i_version option [ 112.128311][T10251] EXT4-fs (loop3): 1 truncate cleaned up [ 112.140210][T10251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.174121][T10251] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2419: bg 0: block 7: invalid block bitmap [ 112.237928][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.291379][T10264] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.305155][T10265] loop0: detected capacity change from 0 to 2048 [ 112.322571][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 112.322596][ T29] audit: type=1326 audit(112.324:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a64e5def9 code=0x7ffc0000 [ 112.324475][T10270] loop2: detected capacity change from 0 to 164 [ 112.329112][ T29] audit: type=1326 audit(112.324:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9a64e5def9 code=0x7ffc0000 [ 112.382209][ T29] audit: type=1326 audit(112.384:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a64e5def9 code=0x7ffc0000 [ 112.405398][ T29] audit: type=1326 audit(112.384:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a64e5def9 code=0x7ffc0000 [ 112.442037][T10265] Alternate GPT is invalid, using primary GPT. [ 112.448579][T10265] loop0: p2 p3 p7 [ 112.518332][T10292] loop0: detected capacity change from 0 to 164 [ 112.545386][T10292] Unable to read rock-ridge attributes [ 112.563292][T10292] Unable to read rock-ridge attributes [ 112.604491][T10297] loop4: detected capacity change from 0 to 512 [ 112.620855][T10297] EXT4-fs: Ignoring removed i_version option [ 113.350379][T10323] loop1: detected capacity change from 0 to 2048 [ 113.395355][T10327] loop3: detected capacity change from 0 to 1024 [ 113.403397][T10327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.406683][T10323] Alternate GPT is invalid, using primary GPT. [ 113.416527][T10323] loop1: p2 p3 p7 [ 113.443013][T10327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.496983][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.634659][T10355] loop4: detected capacity change from 0 to 764 [ 113.649330][T10355] rock: directory entry would overflow storage [ 113.655604][T10355] rock: sig=0x4f50, size=4, remaining=3 [ 113.661215][T10355] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.047324][T10411] PM: Enabling pm_trace changes system date and time during resume. [ 114.047324][T10411] PM: Correct system time has to be restored manually after resume. [ 114.099735][ T29] audit: type=1326 audit(114.094:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.122686][ T29] audit: type=1326 audit(114.094:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.145559][ T29] audit: type=1326 audit(114.094:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.168582][ T29] audit: type=1326 audit(114.094:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.191557][ T29] audit: type=1326 audit(114.094:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.216470][ T29] audit: type=1326 audit(114.174:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.1.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8ba9def9 code=0x7ffc0000 [ 114.255335][T10425] syz.4.2480[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.255481][T10425] syz.4.2480[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.281140][ T3393] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 114.300335][ T3393] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 114.332187][ T3393] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 114.345546][ T3393] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.647850][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 114.674730][T10463] loop4: detected capacity change from 0 to 512 [ 114.689354][T10463] EXT4-fs: Ignoring removed oldalloc option [ 114.695536][T10463] EXT4-fs: Ignoring removed i_version option [ 114.701589][T10463] EXT4-fs: Ignoring removed nobh option [ 114.726244][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2482'. [ 114.847760][ T3393] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 114.855524][ T3393] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 114.871489][ T3393] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 114.880664][ T3393] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.940083][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2491'. [ 115.220735][T10548] PM: Enabling pm_trace changes system date and time during resume. [ 115.220735][T10548] PM: Correct system time has to be restored manually after resume. [ 115.467127][T10549] cgroup: fork rejected by pids controller in /syz4 [ 115.496372][T10593] syz.0.2505[10593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.496438][T10593] syz.0.2505[10593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.610587][T10600] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 115.656311][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2509'. [ 115.905273][T10644] loop0: detected capacity change from 0 to 8192 [ 116.412125][T10651] syz.1.2526 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 116.423194][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.1.2526 Tainted: G W 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 116.435165][T10651] Tainted: [W]=WARN [ 116.439029][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.449111][T10651] Call Trace: [ 116.452410][T10651] [ 116.455370][T10651] dump_stack_lvl+0xf2/0x150 [ 116.460022][T10651] dump_stack+0x15/0x20 [ 116.464242][T10651] dump_header+0x83/0x2d0 [ 116.468659][T10651] oom_kill_process+0x341/0x4c0 [ 116.473537][T10651] out_of_memory+0x9af/0xbe0 [ 116.478206][T10651] ? __rcu_read_unlock+0x4e/0x70 [ 116.483233][T10651] mem_cgroup_out_of_memory+0x13e/0x190 [ 116.488801][T10651] try_charge_memcg+0x51b/0x810 [ 116.493718][T10651] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 116.499836][T10651] __read_swap_cache_async+0x2b7/0x520 [ 116.505501][T10651] swap_cluster_readahead+0x276/0x3f0 [ 116.510997][T10651] swapin_readahead+0xe4/0x760 [ 116.515907][T10651] ? __filemap_get_folio+0x420/0x5b0 [ 116.521264][T10651] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 116.526835][T10651] ? swap_cache_get_folio+0x77/0x210 [ 116.532225][T10651] do_swap_page+0x3da/0x1ef0 [ 116.536838][T10651] ? cgroup_rstat_updated+0x99/0x550 [ 116.542158][T10651] ? __rcu_read_lock+0x36/0x50 [ 116.546943][T10651] ? pte_offset_map_nolock+0x124/0x1d0 [ 116.552421][T10651] handle_mm_fault+0x8c5/0x2a20 [ 116.557340][T10651] exc_page_fault+0x3b9/0x650 [ 116.562092][T10651] asm_exc_page_fault+0x26/0x30 [ 116.566969][T10651] RIP: 0033:0x7f4a8b9719dc [ 116.571436][T10651] Code: 72 64 0f 1f 40 00 69 3d d6 3c e1 00 e8 03 00 00 48 8d 1d b7 45 2e 00 e8 82 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 116.591153][T10651] RSP: 002b:00007ffef663e440 EFLAGS: 00010202 [ 116.597279][T10651] RAX: 0000000000000000 RBX: 00007f4a8bc55f80 RCX: 0000000000000000 [ 116.605317][T10651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558b4e8808 [ 116.613311][T10651] RBP: 00007f4a8bc57a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 116.621297][T10651] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001c816 [ 116.629276][T10651] R13: 00007ffef663e540 R14: 0000000000000032 R15: ffffffffffffffff [ 116.637348][T10651] [ 116.640579][T10651] memory: usage 307200kB, limit 307200kB, failcnt 11696 [ 116.647632][T10651] memory+swap: usage 300112kB, limit 9007199254740988kB, failcnt 0 [ 116.655606][T10651] kmem: usage 285112kB, limit 9007199254740988kB, failcnt 0 [ 116.662962][T10651] Memory cgroup stats for /syz1: [ 116.664289][T10651] cache 69632 [ 116.672607][T10651] rss 0 [ 116.675453][T10651] shmem 0 [ 116.678439][T10651] mapped_file 122880 [ 116.682354][T10651] dirty 69632 [ 116.685694][T10651] writeback 4096 [ 116.689244][T10651] workingset_refault_anon 1 [ 116.693762][T10651] workingset_refault_file 32 [ 116.698358][T10651] swap 196608 [ 116.701799][T10651] swapcached 8192 [ 116.705466][T10651] pgpgin 106179 [ 116.708953][T10651] pgpgout 106160 [ 116.712590][T10651] pgfault 115368 [ 116.716154][T10651] pgmajfault 8 [ 116.719530][T10651] inactive_anon 0 [ 116.723191][T10651] active_anon 8192 [ 116.726921][T10651] inactive_file 0 [ 116.730593][T10651] active_file 69632 [ 116.734516][T10651] unevictable 0 [ 116.738043][T10651] hierarchical_memory_limit 314572800 [ 116.743467][T10651] hierarchical_memsw_limit 9223372036854771712 [ 116.749638][T10651] total_cache 69632 [ 116.753485][T10651] total_rss 0 [ 116.756844][T10651] total_shmem 0 [ 116.760314][T10651] total_mapped_file 122880 [ 116.764754][T10651] total_dirty 69632 [ 116.768636][T10651] total_writeback 4096 [ 116.772740][T10651] total_workingset_refault_anon 1 [ 116.777836][T10651] total_workingset_refault_file 32 [ 116.782974][T10651] total_swap 196608 [ 116.786784][T10651] total_swapcached 8192 [ 116.791114][T10651] total_pgpgin 106179 [ 116.795145][T10651] total_pgpgout 106160 [ 116.799221][T10651] total_pgfault 115368 [ 116.803379][T10651] total_pgmajfault 8 [ 116.807332][T10651] total_inactive_anon 0 [ 116.811526][T10651] total_active_anon 8192 [ 116.815778][T10651] total_inactive_file 0 [ 116.820121][T10651] total_active_file 69632 [ 116.824548][T10651] total_unevictable 0 [ 116.828532][T10651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2526,pid=10651,uid=0 [ 116.843259][T10651] Memory cgroup out of memory: Killed process 10651 (syz.1.2526) total-vm:89216kB, anon-rss:720kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 117.904629][T10720] syz.4.2552[10720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.904709][T10720] syz.4.2552[10720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.923933][T10722] loop0: detected capacity change from 0 to 512 [ 117.953894][T10722] EXT4-fs (loop0): unsupported inode size: 0 [ 117.960022][T10722] EXT4-fs (loop0): blocksize: 1024 [ 117.984494][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 117.984511][ T29] audit: type=1326 audit(117.984:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.013579][ T29] audit: type=1326 audit(117.984:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.033946][T10727] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 118.036601][ T29] audit: type=1326 audit(117.984:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd226d3c890 code=0x7ffc0000 [ 118.066531][ T29] audit: type=1326 audit(117.984:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.089728][ T29] audit: type=1326 audit(117.984:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.112599][ T29] audit: type=1326 audit(117.984:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.135658][ T29] audit: type=1326 audit(117.984:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.158590][ T29] audit: type=1326 audit(117.984:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.181601][ T29] audit: type=1326 audit(117.984:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.207422][ T29] audit: type=1326 audit(117.984:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226d3def9 code=0x7ffc0000 [ 118.775087][T10742] netem: incorrect ge model size [ 118.780103][T10742] netem: change failed [ 118.840306][T10752] syz.1.2567[10752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.840377][T10752] syz.1.2567[10752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.895107][T10756] loop2: detected capacity change from 0 to 164 [ 118.923287][T10756] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 118.953760][T10756] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 119.068272][T10789] loop1: detected capacity change from 0 to 512 [ 119.075174][T10789] EXT4-fs (loop1): unsupported inode size: 0 [ 119.081287][T10789] EXT4-fs (loop1): blocksize: 1024 [ 119.892635][T10812] syz.2.2581[10812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.892758][T10812] syz.2.2581[10812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.908677][T10811] loop3: detected capacity change from 0 to 128 [ 119.926806][T10816] loop1: detected capacity change from 0 to 512 [ 119.927350][T10814] netlink: 'syz.4.2598': attribute type 10 has an invalid length. [ 119.947858][T10811] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.963993][T10816] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.983700][T10816] EXT4-fs error (device loop1): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.1.2585: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 119.998313][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 120.011325][T10825] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 120.037198][T10816] EXT4-fs error (device loop1) in ext4_delete_entry:2749: Corrupt filesystem [ 120.063216][T10816] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.2585: Deleting old file: nlink 4, error=-117 [ 120.082439][ T9695] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.119116][T10845] loop2: detected capacity change from 0 to 512 [ 120.137338][ T9651] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 120.177339][T10863] loop2: detected capacity change from 0 to 512 [ 120.188012][T10863] EXT4-fs: Ignoring removed i_version option [ 120.194225][T10863] EXT4-fs: Ignoring removed nobh option [ 120.224526][T10872] loop1: detected capacity change from 0 to 512 [ 120.257375][T10872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 120.266235][T10872] System zones: 0-2, 18-18, 34-34 [ 120.275476][T10872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2615: bg 0: block 248: padding at end of block bitmap is not set [ 120.291204][T10872] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2615: Failed to acquire dquot type 1 [ 120.303643][T10872] EXT4-fs (loop1): 1 truncate cleaned up [ 120.310018][T10872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.353449][ T9651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.364279][T10890] netem: incorrect ge model size [ 120.369439][T10890] netem: change failed [ 120.404008][T10899] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2614'. [ 120.480368][T10908] loop1: detected capacity change from 0 to 2048 [ 120.495412][T10908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.560461][ T9651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.597440][T10919] loop0: detected capacity change from 0 to 512 [ 120.614033][T10919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 120.636853][T10919] System zones: 0-2, 18-18, 34-34 [ 120.652232][T10919] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2625: bg 0: block 248: padding at end of block bitmap is not set [ 120.678999][T10919] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.2625: Failed to acquire dquot type 1 [ 120.707712][T10919] EXT4-fs (loop0): 1 truncate cleaned up [ 120.717509][T10919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.774602][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.991403][T10959] loop0: detected capacity change from 0 to 164 [ 120.998917][T10959] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.026136][T10959] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.098877][T10967] loop0: detected capacity change from 0 to 2048 [ 121.119313][T10977] loop3: detected capacity change from 0 to 512 [ 121.146409][T10977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 121.158895][T10977] System zones: 0-2, 18-18, 34-34 [ 121.176718][T10977] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2642: bg 0: block 248: padding at end of block bitmap is not set [ 121.192842][T10977] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2642: Failed to acquire dquot type 1 [ 121.214723][T10977] EXT4-fs (loop3): 1 truncate cleaned up [ 121.221507][T10977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.257271][ T5313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 121.268282][ T5313] CPU: 1 UID: 0 PID: 5313 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 121.280336][ T5313] Tainted: [W]=WARN [ 121.284159][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 121.294242][ T5313] Call Trace: [ 121.297532][ T5313] [ 121.300484][ T5313] dump_stack_lvl+0xf2/0x150 [ 121.305194][ T5313] dump_stack+0x15/0x20 [ 121.309380][ T5313] dump_header+0x83/0x2d0 [ 121.313736][ T5313] oom_kill_process+0x341/0x4c0 [ 121.318619][ T5313] out_of_memory+0x9af/0xbe0 [ 121.323247][ T5313] ? __rcu_read_unlock+0x4e/0x70 [ 121.328279][ T5313] mem_cgroup_out_of_memory+0x13e/0x190 [ 121.333863][ T5313] try_charge_memcg+0x51b/0x810 [ 121.338769][ T5313] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 121.344873][ T5313] __read_swap_cache_async+0x2b7/0x520 [ 121.350412][ T5313] swap_cluster_readahead+0x276/0x3f0 [ 121.355865][ T5313] swapin_readahead+0xe4/0x760 [ 121.360664][ T5313] ? __filemap_get_folio+0x420/0x5b0 [ 121.365979][ T5313] ? swap_cache_get_folio+0x77/0x210 [ 121.371398][ T5313] do_swap_page+0x3da/0x1ef0 [ 121.376099][ T5313] ? hrtimer_start_range_ns+0x53d/0x580 [ 121.381701][ T5313] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 121.387191][ T5313] ? __rcu_read_lock+0x36/0x50 [ 121.392058][ T5313] ? pte_offset_map_nolock+0x124/0x1d0 [ 121.397575][ T5313] handle_mm_fault+0x8c5/0x2a20 [ 121.402476][ T5313] exc_page_fault+0x3b9/0x650 [ 121.407197][ T5313] asm_exc_page_fault+0x26/0x30 [ 121.412091][ T5313] RIP: 0033:0x7f30ad79ffa5 [ 121.416533][ T5313] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e c5 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 121.436172][ T5313] RSP: 002b:00007fff282ffbf8 EFLAGS: 00010246 [ 121.442392][ T5313] RAX: 0000000000000000 RBX: 000000000000039d RCX: 00007f30ad79ffa3 [ 121.450423][ T5313] RDX: 00007fff282ffc10 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.458418][ T5313] RBP: 00007fff282ffc6c R08: 000000000dd06e42 R09: 7fffffffffffffff [ 121.466464][ T5313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 121.474449][ T5313] R13: 000000000001d98f R14: 000000000001d62f R15: 00007fff282ffcc0 [ 121.482436][ T5313] [ 121.485566][ T5313] memory: usage 307200kB, limit 307200kB, failcnt 16042 [ 121.493817][ T5313] memory+swap: usage 362140kB, limit 9007199254740988kB, failcnt 0 [ 121.502473][ T5313] kmem: usage 297932kB, limit 9007199254740988kB, failcnt 0 [ 121.509779][ T5313] Memory cgroup stats for /syz2: [ 121.518350][T10985] loop4: detected capacity change from 0 to 512 [ 121.530004][T10985] EXT4-fs: Ignoring removed orlov option [ 121.546866][ T5313] cache 69632 [ 121.550256][ T5313] rss 0 [ 121.553095][ T5313] shmem 0 [ 121.556057][ T5313] mapped_file 69632 [ 121.559872][ T5313] dirty 69632 [ 121.563190][ T5313] writeback 0 [ 121.566553][ T5313] workingset_refault_anon 1 [ 121.571172][ T5313] workingset_refault_file 0 [ 121.575724][ T5313] swap 60518400 [ 121.579188][ T5313] swapcached 8192 [ 121.582847][ T5313] pgpgin 177618 [ 121.586321][ T5313] pgpgout 177599 [ 121.589878][ T5313] pgfault 111464 [ 121.593467][ T5313] pgmajfault 5 [ 121.596927][ T5313] inactive_anon 0 [ 121.600668][ T5313] active_anon 8192 [ 121.604401][ T5313] inactive_file 0 [ 121.608043][ T5313] active_file 69632 [ 121.611879][ T5313] unevictable 0 [ 121.615355][ T5313] hierarchical_memory_limit 314572800 [ 121.620910][ T5313] hierarchical_memsw_limit 9223372036854771712 [ 121.627076][ T5313] total_cache 69632 [ 121.630915][ T5313] total_rss 0 [ 121.634223][ T5313] total_shmem 0 [ 121.637692][ T5313] total_mapped_file 69632 [ 121.642057][ T5313] total_dirty 69632 [ 121.645990][ T5313] total_writeback 0 [ 121.649876][ T5313] total_workingset_refault_anon 1 [ 121.655000][ T5313] total_workingset_refault_file 0 [ 121.660033][ T5313] total_swap 60518400 [ 121.664056][ T5313] total_swapcached 8192 [ 121.668212][ T5313] total_pgpgin 177618 [ 121.672220][ T5313] total_pgpgout 177599 [ 121.676297][ T5313] total_pgfault 111464 [ 121.680429][ T5313] total_pgmajfault 5 [ 121.684434][ T5313] total_inactive_anon 0 [ 121.688727][ T5313] total_active_anon 8192 [ 121.693014][ T5313] total_inactive_file 0 [ 121.697180][ T5313] total_active_file 69632 [ 121.701556][ T5313] total_unevictable 0 [ 121.705624][ T5313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2616,pid=10891,uid=0 [ 121.720380][ T5313] Memory cgroup out of memory: Killed process 10891 (syz.2.2616) total-vm:89032kB, anon-rss:744kB, file-rss:16040kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 121.738899][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.835708][T11012] loop1: detected capacity change from 0 to 164 [ 121.851983][T11012] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.870252][T11020] loop4: detected capacity change from 0 to 512 [ 121.880479][T11012] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.900217][T11020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 121.911616][T11020] System zones: 1-12 [ 121.915774][T11020] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.2653: inode #0: comm syz.4.2653: iget: illegal inode # [ 121.928831][T11020] EXT4-fs (loop4): get orphan inode failed [ 121.947186][T10892] syz.2.2616 (10892) used greatest stack depth: 8832 bytes left [ 121.955381][T11020] EXT4-fs (loop4): mount failed [ 121.984191][T11115] loop1: detected capacity change from 0 to 2048 [ 121.994748][T10993] chnl_net:caif_netlink_parms(): no params data found [ 122.100478][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.107806][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.118454][T10993] bridge_slave_0: entered allmulticast mode [ 122.125228][T10993] bridge_slave_0: entered promiscuous mode [ 122.132227][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.139331][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.146809][T10993] bridge_slave_1: entered allmulticast mode [ 122.162421][T10993] bridge_slave_1: entered promiscuous mode [ 122.197963][T11194] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.209405][T10993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.229882][T10993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.264172][ T7909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.313740][T10993] team0: Port device team_slave_0 added [ 122.324162][ T7909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.336187][T10993] team0: Port device team_slave_1 added [ 122.362257][T10993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.369298][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.395386][T10993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.420399][ T7909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.438921][T10993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.446104][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.472057][T10993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.472324][T11291] loop2: detected capacity change from 0 to 4096 [ 122.489388][T11291] EXT4-fs: Ignoring removed nobh option [ 122.495186][T11291] EXT4-fs: Ignoring removed i_version option [ 122.515590][ T7909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.526689][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 122.597846][T10993] hsr_slave_0: entered promiscuous mode [ 122.609696][T11343] loop4: detected capacity change from 0 to 512 [ 122.616774][T10993] hsr_slave_1: entered promiscuous mode [ 122.623479][T10993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.631671][T10993] Cannot create hsr debugfs directory [ 122.648824][T11358] loop2: detected capacity change from 0 to 512 [ 122.716374][ T7909] bridge_slave_1: left allmulticast mode [ 122.722089][ T7909] bridge_slave_1: left promiscuous mode [ 122.727725][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.735799][ T7909] bridge_slave_0: left allmulticast mode [ 122.741563][ T7909] bridge_slave_0: left promiscuous mode [ 122.747288][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.763511][T11471] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.923376][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.934087][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.944789][ T7909] bond0 (unregistering): Released all slaves [ 123.018507][T11257] chnl_net:caif_netlink_parms(): no params data found [ 123.033393][ T7909] hsr_slave_0: left promiscuous mode [ 123.043359][ T7909] hsr_slave_1: left promiscuous mode [ 123.049178][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.056749][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.064460][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.071908][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.081531][ T7909] veth1_macvtap: left promiscuous mode [ 123.087029][ T7909] veth0_macvtap: left promiscuous mode [ 123.092576][ T7909] veth1_vlan: left promiscuous mode [ 123.097787][ T7909] veth0_vlan: left promiscuous mode [ 123.183934][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 123.195843][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 123.262379][T10993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.288497][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.295675][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.302923][T11257] bridge_slave_0: entered allmulticast mode [ 123.309507][T11257] bridge_slave_0: entered promiscuous mode [ 123.316535][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.323652][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.330914][T11257] bridge_slave_1: entered allmulticast mode [ 123.337594][T11257] bridge_slave_1: entered promiscuous mode [ 123.358428][T10993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.371705][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.382465][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.402358][T11257] team0: Port device team_slave_0 added [ 123.409008][T11257] team0: Port device team_slave_1 added [ 123.426920][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.433953][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.459920][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.471671][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.478650][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.504672][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.518501][T10993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.548859][T11257] hsr_slave_0: entered promiscuous mode [ 123.555171][T11257] hsr_slave_1: entered promiscuous mode [ 123.561153][T11257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.568709][T11257] Cannot create hsr debugfs directory [ 123.585802][T10993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.691988][T10993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.701326][T10993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.710450][T10993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.719227][T10993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.757985][T10993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.773876][T10993] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.784058][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.791342][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.802558][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.809655][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.878497][T10993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.930968][T11257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.939861][T11257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.948953][T11257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.958087][T11257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.979550][T10993] veth0_vlan: entered promiscuous mode [ 123.990927][T10993] veth1_vlan: entered promiscuous mode [ 124.016476][T10993] veth0_macvtap: entered promiscuous mode [ 124.025430][T10993] veth1_macvtap: entered promiscuous mode [ 124.043004][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.053693][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.063826][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.074268][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.084289][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.094758][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.104573][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.115078][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.126213][T10993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.144224][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.151880][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.162502][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.172504][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.182982][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.192904][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.203386][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.213302][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.223731][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.234521][T10993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.244048][T10993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.252936][T10993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.261790][T10993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.270570][T10993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.299911][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.312821][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.319915][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.333878][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.341101][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.439088][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.468512][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 124.468527][ T29] audit: type=1326 audit(124.464:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.507329][T11819] loop3: detected capacity change from 0 to 512 [ 124.517204][ T29] audit: type=1326 audit(124.504:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.540218][ T29] audit: type=1326 audit(124.504:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.563390][ T29] audit: type=1326 audit(124.504:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.586664][ T29] audit: type=1326 audit(124.504:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.610286][ T29] audit: type=1326 audit(124.504:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.618790][T11257] veth0_vlan: entered promiscuous mode [ 124.633556][ T29] audit: type=1326 audit(124.504:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87174edef9 code=0x7ffc0000 [ 124.661637][ T29] audit: type=1326 audit(124.504:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87174edf33 code=0x7ffc0000 [ 124.664892][T11257] veth1_vlan: entered promiscuous mode [ 124.684391][ T29] audit: type=1326 audit(124.504:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87174ec9df code=0x7ffc0000 [ 124.707297][T11257] veth0_macvtap: entered promiscuous mode [ 124.712718][ T29] audit: type=1326 audit(124.504:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87174edf87 code=0x7ffc0000 [ 124.725341][T11257] veth1_macvtap: entered promiscuous mode [ 124.756139][T11819] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.763601][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.779153][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.789122][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.799727][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.809587][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.820070][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.830037][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.833503][T11819] EXT4-fs error (device loop3): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.3.2693: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 124.840573][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.840595][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.840612][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.842412][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.891162][T11819] EXT4-fs error (device loop3) in ext4_delete_entry:2749: Corrupt filesystem [ 124.924408][T11819] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.2693: Deleting old file: nlink 4, error=-117 [ 124.938064][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.948616][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.958576][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.969212][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.979224][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.989721][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.999322][T11842] loop0: detected capacity change from 0 to 512 [ 124.999659][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.008994][T11842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 125.016304][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.016329][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.025887][T11842] System zones: [ 125.034171][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.043329][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.044740][T11842] 1-12 [ 125.055588][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 125.058034][T11842] [ 125.080302][T11842] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.2709: inode #0: comm syz.0.2709: iget: illegal inode # [ 125.082363][ T9695] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 125.095215][T11257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.111425][T11257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.120172][T11257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.120827][T11842] EXT4-fs (loop0): get orphan inode failed [ 125.129024][T11257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.150300][T11842] EXT4-fs (loop0): mount failed [ 125.175269][T11854] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2704'. [ 125.298474][T11869] hsr0: entered promiscuous mode [ 125.303858][T11869] macsec1: entered promiscuous mode [ 125.309434][T11869] macsec1: entered allmulticast mode [ 125.315027][T11869] hsr0: entered allmulticast mode [ 125.320247][T11869] hsr_slave_0: entered allmulticast mode [ 125.326303][T11869] hsr_slave_1: entered allmulticast mode [ 125.334854][T11869] hsr0: left allmulticast mode [ 125.339958][T11869] hsr_slave_0: left allmulticast mode [ 125.345731][T11869] hsr_slave_1: left allmulticast mode [ 125.393932][T11880] loop2: detected capacity change from 0 to 2048 [ 125.415706][T11880] loop2: detected capacity change from 0 to 164 [ 125.426282][T11889] loop3: detected capacity change from 0 to 512 [ 125.438522][T11880] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 125.449615][T11889] EXT4-fs: Ignoring removed i_version option [ 125.456040][T11889] EXT4-fs: Ignoring removed nobh option [ 125.464310][T11889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.475932][T11889] EXT4-fs (loop3): 1 truncate cleaned up [ 125.483634][T11889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.517852][T11900] loop0: detected capacity change from 0 to 2048 [ 125.531639][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.540672][T11900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.585251][T10993] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.626157][T11914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2718'. [ 125.664591][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.669769][T11918] loop3: detected capacity change from 0 to 512 [ 125.673722][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.673745][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.728403][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.737467][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.746490][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.757762][T11918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.836478][T11916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 125.846770][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.169380][T12025] loop1: detected capacity change from 0 to 512 [ 126.173732][T11988] loop3: detected capacity change from 0 to 2048 [ 126.184187][T12025] EXT4-fs: Ignoring removed i_version option [ 126.190263][T12025] EXT4-fs: Ignoring removed nobh option [ 126.195363][T11941] chnl_net:caif_netlink_parms(): no params data found [ 126.218800][T12025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.241827][T11988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.243127][T12025] EXT4-fs (loop1): 1 truncate cleaned up [ 126.264030][T12025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.296947][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.315486][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.322688][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.331424][T11941] bridge_slave_0: entered allmulticast mode [ 126.338175][T11941] bridge_slave_0: entered promiscuous mode [ 126.345063][T11257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.355091][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.362382][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.376828][T11941] bridge_slave_1: entered allmulticast mode [ 126.386321][T11941] bridge_slave_1: entered promiscuous mode [ 126.433200][T11941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.445907][T11941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.494194][T12171] loop0: detected capacity change from 0 to 512 [ 126.502727][T11941] team0: Port device team_slave_0 added [ 126.512337][T11941] team0: Port device team_slave_1 added [ 126.537258][T12171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.557493][T11941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.564524][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.590675][T11941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.607885][T12211] loop1: detected capacity change from 0 to 4096 [ 126.614771][T11941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.621822][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.647957][T11941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.648181][T12211] EXT4-fs: Ignoring removed nobh option [ 126.664241][T12211] EXT4-fs: Ignoring removed i_version option [ 126.676136][T10993] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.694880][T12211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.710725][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.717459][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.718437][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.734489][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.739783][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 126.742201][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.742226][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.742249][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.773865][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.781590][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.789239][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.796949][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.804684][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.812360][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.820023][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.827759][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.835459][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.843215][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.850988][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.858658][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.866441][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.874112][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.881866][ T3331] hid-generic 0000:1000003:0000.000B: unknown main item tag 0x0 [ 126.889675][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.891873][ T3331] hid-generic 0000:1000003:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 126.902430][T11941] hsr_slave_0: entered promiscuous mode [ 126.915575][T11257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.928251][T11941] hsr_slave_1: entered promiscuous mode [ 126.936894][T11941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.944695][T11941] Cannot create hsr debugfs directory [ 127.034083][T11941] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.082250][T11941] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.152514][T11941] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.222501][T11941] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.286670][T11941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.295613][T11941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.304779][T11941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.313658][T11941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.365838][T11941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.382443][T11941] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.393522][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.400722][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.429388][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.436527][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.557327][T12371] loop4: detected capacity change from 0 to 512 [ 127.574064][T12374] loop0: detected capacity change from 0 to 512 [ 127.581004][T12371] EXT4-fs: Ignoring removed i_version option [ 127.583610][T11941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.587034][T12371] EXT4-fs: Ignoring removed nobh option [ 127.617161][T12374] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.653270][T12374] EXT4-fs error (device loop0): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.0.2757: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 127.699793][T12374] EXT4-fs error (device loop0) in ext4_delete_entry:2749: Corrupt filesystem [ 127.713996][T12374] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.2757: Deleting old file: nlink 4, error=-117 [ 127.764792][T12408] loop1: detected capacity change from 0 to 512 [ 127.776108][T12406] loop4: detected capacity change from 0 to 4096 [ 127.786454][T10993] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 127.817559][T11941] veth0_vlan: entered promiscuous mode [ 127.836185][T12408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.857188][T11941] veth1_vlan: entered promiscuous mode [ 127.903554][T11257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.977628][T11941] veth0_macvtap: entered promiscuous mode [ 128.002100][T11941] veth1_macvtap: entered promiscuous mode [ 128.017849][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.028372][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.038287][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.048756][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.051130][T12442] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 128.058689][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.079871][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.089718][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.100279][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.110181][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.120701][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.130608][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.141063][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.153919][T11941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.162817][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.173344][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.183194][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.193651][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.203489][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.214020][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.223857][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.234396][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.244309][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.254787][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.264638][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.275108][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.288366][T11941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.317852][T11941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.326659][T11941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.335478][T11941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.344343][T11941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.451175][T12455] loop4: detected capacity change from 0 to 128 [ 129.308848][T12475] syz.3.2786[12475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.308931][T12475] syz.3.2786[12475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.375361][T12492] macvtap0: entered promiscuous mode [ 129.393799][T12492] macvtap0: left promiscuous mode [ 129.575113][T12517] loop1: detected capacity change from 0 to 1024 [ 129.577291][T12525] hsr0: entered promiscuous mode [ 129.586328][T12524] loop2: detected capacity change from 0 to 512 [ 129.597160][T12525] macsec1: entered promiscuous mode [ 129.601330][T12517] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 129.602917][T12525] macsec1: entered allmulticast mode [ 129.616663][T12525] hsr0: entered allmulticast mode [ 129.618884][T12517] loop1: detected capacity change from 0 to 512 [ 129.621836][T12525] hsr_slave_0: entered allmulticast mode [ 129.621868][T12525] hsr_slave_1: entered allmulticast mode [ 129.649171][T12525] hsr0: left allmulticast mode [ 129.654090][T12525] hsr_slave_0: left allmulticast mode [ 129.659544][T12525] hsr_slave_1: left allmulticast mode [ 129.856998][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.908544][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.926471][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 129.926488][ T29] audit: type=1326 audit(129.924:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bb24def9 code=0x7ffc0000 [ 129.962426][ T29] audit: type=1326 audit(129.934:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd9bb24def9 code=0x7ffc0000 [ 129.985435][ T29] audit: type=1326 audit(129.934:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bb24def9 code=0x7ffc0000 [ 130.008715][ T29] audit: type=1326 audit(129.934:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bb24def9 code=0x7ffc0000 [ 130.054131][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.096448][T12604] sch_tbf: peakrate 1 is lower than or equals to rate 3 ! [ 130.107021][T12605] loop3: detected capacity change from 0 to 4096 [ 130.113916][T12605] EXT4-fs: Ignoring removed nobh option [ 130.115302][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.119521][T12605] EXT4-fs: Ignoring removed i_version option [ 130.141551][T12605] EXT4-fs mount: 2 callbacks suppressed [ 130.141571][T12605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.197434][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 130.204001][T12578] chnl_net:caif_netlink_parms(): no params data found [ 130.219603][ T55] bridge_slave_1: left allmulticast mode [ 130.225469][ T55] bridge_slave_1: left promiscuous mode [ 130.231564][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.239389][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.249807][ T55] bridge_slave_0: left allmulticast mode [ 130.255617][ T55] bridge_slave_0: left promiscuous mode [ 130.261301][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.343650][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.354289][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.364554][ T55] bond0 (unregistering): Released all slaves [ 130.403129][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.410230][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.417941][T12578] bridge_slave_0: entered allmulticast mode [ 130.426517][T12578] bridge_slave_0: entered promiscuous mode [ 130.447101][T12768] __nla_validate_parse: 5 callbacks suppressed [ 130.447121][T12768] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 130.450081][ T55] hsr_slave_0: left promiscuous mode [ 130.467669][ T55] hsr_slave_1: left promiscuous mode [ 130.473939][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.481424][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.489486][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.497257][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.508237][ T55] veth1_macvtap: left promiscuous mode [ 130.513989][ T55] veth0_macvtap: left promiscuous mode [ 130.519671][ T55] veth1_vlan: left promiscuous mode [ 130.524955][ T55] veth0_vlan: left promiscuous mode [ 130.615922][ T55] team0 (unregistering): Port device team_slave_1 removed [ 130.626606][ T55] team0 (unregistering): Port device team_slave_0 removed [ 130.668270][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.675404][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.682954][T12578] bridge_slave_1: entered allmulticast mode [ 130.689355][T12578] bridge_slave_1: entered promiscuous mode [ 130.699501][T12768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.718328][T12775] hsr0: entered promiscuous mode [ 130.723486][T12775] macsec1: entered promiscuous mode [ 130.728816][T12775] macsec1: entered allmulticast mode [ 130.734284][T12775] hsr0: entered allmulticast mode [ 130.739348][T12775] hsr_slave_0: entered allmulticast mode [ 130.745035][T12775] hsr_slave_1: entered allmulticast mode [ 130.752422][T12775] hsr0: left allmulticast mode [ 130.757209][T12775] hsr_slave_0: left allmulticast mode [ 130.762629][T12775] hsr_slave_1: left allmulticast mode [ 130.789433][T12768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.810972][T12578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.822330][T12578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.850390][T12578] team0: Port device team_slave_0 added [ 130.860215][T12844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.876423][T12578] team0: Port device team_slave_1 added [ 130.887544][T12768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.926334][T12844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.939211][T12578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.946315][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.972278][T12578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.985348][T12578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.992584][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.018666][T12578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.035936][T12768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.056758][T12844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.098672][T12578] hsr_slave_0: entered promiscuous mode [ 131.106339][T12578] hsr_slave_1: entered promiscuous mode [ 131.112764][T12578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.120347][T12578] Cannot create hsr debugfs directory [ 131.131536][T12844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.157759][T12768] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.170142][T12768] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.187919][T12768] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.199787][T12768] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.232089][T12844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.249725][T12844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.268478][T12844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.282553][T12844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.584889][T12578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.593658][T12578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.602341][T12578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.611146][T12578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.646967][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.659648][T12578] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.669443][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.676595][ T7909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.688605][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.695750][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.762086][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.831626][T12578] veth0_vlan: entered promiscuous mode [ 131.839996][T12578] veth1_vlan: entered promiscuous mode [ 131.856876][T12578] veth0_macvtap: entered promiscuous mode [ 131.864909][T12578] veth1_macvtap: entered promiscuous mode [ 131.876465][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.887003][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.896882][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.907333][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.917236][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.927719][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.937573][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.948129][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.957981][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.968409][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.978255][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.988915][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.000231][T12578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.011832][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.022488][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.032319][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.042825][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.052753][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.063232][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.073198][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.083812][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.093625][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.104079][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.113932][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.124372][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.135306][T12578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.146317][T12578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.155271][T12578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.164135][T12578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.172897][T12578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.222718][T13054] loop4: detected capacity change from 0 to 512 [ 132.234932][T13056] loop0: detected capacity change from 0 to 512 [ 132.248187][T13056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.260051][T13056] EXT4-fs (loop0): 1 truncate cleaned up [ 132.266159][T13056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.331617][T12578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.361831][ T29] audit: type=1326 audit(132.364:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.398125][ T29] audit: type=1326 audit(132.364:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.398148][T13068] ebtables: ebtables: counters copy to user failed while replacing table [ 132.429728][ T29] audit: type=1326 audit(132.364:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.437501][T13076] loop0: detected capacity change from 0 to 4096 [ 132.452812][ T29] audit: type=1326 audit(132.364:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.472389][T13076] EXT4-fs: Ignoring removed nobh option [ 132.482135][ T29] audit: type=1326 audit(132.364:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.487671][T13076] EXT4-fs: Ignoring removed i_version option [ 132.510540][ T29] audit: type=1326 audit(132.364:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0083def9 code=0x7ffc0000 [ 132.543910][T13076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.589991][T13081] loop2: detected capacity change from 0 to 2048 [ 132.598803][ T3137] kernel write not supported for file bpf-prog (pid: 3137 comm: kworker/0:2) [ 132.617359][T13081] EXT4-fs: Ignoring removed orlov option [ 132.626022][T12578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.844514][T13135] vlan2: entered promiscuous mode [ 132.849672][T13135] macvtap0: entered promiscuous mode [ 132.857497][T13135] macvtap0: left promiscuous mode [ 132.869026][T13142] loop2: detected capacity change from 0 to 512 [ 132.869810][T13134] syzkaller0: entered promiscuous mode [ 132.881452][T13134] syzkaller0: entered allmulticast mode [ 132.954134][T13228] loop2: detected capacity change from 0 to 1024 [ 132.960005][T13092] chnl_net:caif_netlink_parms(): no params data found [ 133.004339][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.011626][T13092] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.019096][T13092] bridge_slave_0: entered allmulticast mode [ 133.025923][T13092] bridge_slave_0: entered promiscuous mode [ 133.033541][T13092] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.040760][T13092] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.048069][T13092] bridge_slave_1: entered allmulticast mode [ 133.054695][T13092] bridge_slave_1: entered promiscuous mode [ 133.087320][T13092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.110364][T13092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.111796][T13292] loop2: detected capacity change from 0 to 4096 [ 133.126229][T13292] EXT4-fs: Ignoring removed nobh option [ 133.131912][T13292] EXT4-fs: Ignoring removed i_version option [ 133.151002][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 133.151597][T13092] team0: Port device team_slave_0 added [ 133.172668][T13092] team0: Port device team_slave_1 added [ 133.205508][T13092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.212626][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.238753][T13092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.251409][T13092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.258387][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.284530][T13092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.334202][T13092] hsr_slave_0: entered promiscuous mode [ 133.340356][T13092] hsr_slave_1: entered promiscuous mode [ 133.347871][T13092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.358717][T13092] Cannot create hsr debugfs directory [ 133.435612][T13092] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.532587][T13092] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.582252][T13092] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.642541][T13092] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.712042][T13092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.721854][T13092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.732524][T13092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.742863][T13092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.808044][T13092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.822629][T13092] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.833580][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.840796][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.853584][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.860695][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.939980][T13092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.062389][T13092] veth0_vlan: entered promiscuous mode [ 134.073492][T13092] veth1_vlan: entered promiscuous mode [ 134.097459][T13092] veth0_macvtap: entered promiscuous mode [ 134.106296][T13092] veth1_macvtap: entered promiscuous mode [ 134.121233][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.132031][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.137302][T13505] loop3: detected capacity change from 0 to 512 [ 134.142008][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.159159][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.169101][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.179612][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.189671][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.200143][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.210053][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.220636][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.230481][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.241345][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.251198][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.261735][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.274745][T13092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.274763][T13505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.283229][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.305042][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.314968][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.325567][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.335431][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.345939][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.355948][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.366419][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.376303][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.386817][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.396754][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.407459][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.417439][T13092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.427906][T13092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.439878][T13092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.441670][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.474032][T13092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.482866][T13092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.491733][T13092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.500923][T13092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.568421][T13532] loop0: detected capacity change from 0 to 1024 [ 134.577659][T13532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.588526][T13532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.622135][T12578] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 134.645363][T12578] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 134.708255][T13547] loop3: detected capacity change from 0 to 2048 [ 134.733574][T13547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.751851][T13547] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.767203][T13547] EXT4-fs (loop3): Remounting filesystem read-only [ 134.786445][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.556744][T13587] syz.1.2897[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.556880][T13587] syz.1.2897[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.650778][T13598] bridge0: port 3(veth0_to_bond) entered blocking state [ 135.671105][T13598] bridge0: port 3(veth0_to_bond) entered disabled state [ 135.683490][T13598] veth0_to_bond: entered allmulticast mode [ 135.690040][T13598] veth0_to_bond: entered promiscuous mode [ 135.696432][T13598] bridge0: port 3(veth0_to_bond) entered blocking state [ 135.703635][T13598] bridge0: port 3(veth0_to_bond) entered forwarding state [ 135.916346][T13601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.245845][T13607] loop2: detected capacity change from 0 to 512 [ 136.248886][T13605] loop3: detected capacity change from 0 to 1024 [ 136.260587][T13605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.274846][T13605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.327702][ T9695] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 136.345328][T13613] syzkaller0: entered promiscuous mode [ 136.351001][T13613] syzkaller0: entered allmulticast mode [ 136.359395][ T9695] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 136.401850][ T7918] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.422379][ T9695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.449204][T13618] ================================================================== [ 136.457361][T13618] BUG: KCSAN: data-race in exec_mmap / unmap_region [ 136.464010][T13618] [ 136.466349][T13618] write to 0xffff888107b995e8 of 8 bytes by task 3251 on cpu 0: [ 136.474048][T13618] unmap_region+0x105/0x230 [ 136.478594][T13618] do_vmi_align_munmap+0x6df/0xa60 [ 136.483745][T13618] do_vmi_munmap+0x1fb/0x250 [ 136.488386][T13618] __vm_munmap+0xec/0x210 [ 136.492764][T13618] __x64_sys_munmap+0x36/0x40 [ 136.497483][T13618] x64_sys_call+0xd32/0x2d60 [ 136.502105][T13618] do_syscall_64+0xc9/0x1c0 [ 136.506628][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.507920][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 136.507936][ T29] audit: type=1400 audit(136.504:2912): avc: denied { write } for pid=3251 comm="syz-executor" path="pipe:[666]" dev="pipefs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 136.512538][T13618] [ 136.512546][T13618] read to 0xffff888107b995e8 of 8 bytes by task 13618 on cpu 1: [ 136.512566][T13618] exec_mmap+0x2d0/0x440 [ 136.555408][T13618] begin_new_exec+0xaf9/0x10b0 [ 136.560244][T13618] load_elf_binary+0x63b/0x1970 [ 136.565127][T13618] bprm_execve+0x4e6/0xc30 [ 136.569570][T13618] do_execveat_common+0x793/0x800 [ 136.574625][T13618] __x64_sys_execve+0x5a/0x70 [ 136.579323][T13618] x64_sys_call+0x1277/0x2d60 [ 136.584019][T13618] do_syscall_64+0xc9/0x1c0 [ 136.588627][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.594564][T13618] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.596900][T13618] value changed: 0x00000000000020e5 -> 0x000000000000325a [ 136.604009][T13618] [ 136.606374][T13618] Reported by Kernel Concurrency Sanitizer on: [ 136.612571][T13618] CPU: 1 UID: 0 PID: 13618 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 136.624668][T13618] Tainted: [W]=WARN [ 136.628479][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.638540][T13618] ================================================================== [ 136.762123][ T7918] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.913377][ T7918] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.962083][ T7918] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.012807][T12578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.015592][T13625] chnl_net:caif_netlink_parms(): no params data found [ 137.062528][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.069700][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.077093][T13625] bridge_slave_0: entered allmulticast mode [ 137.083830][T13625] bridge_slave_0: entered promiscuous mode [ 137.091000][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.098074][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.105601][T13625] bridge_slave_1: entered allmulticast mode [ 137.112624][T13625] bridge_slave_1: entered promiscuous mode [ 137.135306][T13625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.146302][T13625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.170569][T13625] team0: Port device team_slave_0 added [ 137.179960][T13625] team0: Port device team_slave_1 added [ 137.204637][T13625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.211767][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.237843][T13625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.248926][ T7918] bridge_slave_1: left allmulticast mode [ 137.254682][ T7918] bridge_slave_1: left promiscuous mode [ 137.260419][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.268376][ T7918] bridge_slave_0: left allmulticast mode [ 137.276076][ T7918] bridge_slave_0: left promiscuous mode [ 137.281853][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.402958][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.413520][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.423776][ T7918] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 137.433630][ T7918] bond0 (unregistering): Released all slaves [ 137.442529][T13625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.449522][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.475539][T13625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.506719][T13625] hsr_slave_0: entered promiscuous mode [ 137.513211][T13625] hsr_slave_1: entered promiscuous mode [ 137.519062][T13625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.526750][T13625] Cannot create hsr debugfs directory [ 137.541200][ T7918] hsr_slave_0: left promiscuous mode [ 137.546956][ T7918] hsr_slave_1: left promiscuous mode [ 137.553281][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.560831][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.568627][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.576090][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.585768][ T7918] veth1_macvtap: left promiscuous mode [ 137.591473][ T7918] veth0_macvtap: left promiscuous mode [ 137.597007][ T7918] veth1_vlan: left promiscuous mode [ 137.602286][ T7918] veth0_vlan: left promiscuous mode [ 137.685943][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 137.696654][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 138.144554][T13625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.153604][T13625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.162285][T13625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.172560][T13625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.185494][ T7918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.225394][ T7918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.239687][T13625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.252629][T13625] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.262556][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.269694][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.281389][ T7918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.295119][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.302278][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.344150][ T7918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.377695][T13625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.411463][ T7918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.465636][ T7918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.478239][T13625] veth0_vlan: entered promiscuous mode [ 138.486721][T13625] veth1_vlan: entered promiscuous mode [ 138.504771][ T7918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.517810][T13625] veth0_macvtap: entered promiscuous mode [ 138.525860][T13625] veth1_macvtap: entered promiscuous mode [ 138.537150][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.547743][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.558153][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.568847][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.578787][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.589242][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.599114][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.609567][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.619415][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.629915][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.639856][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.650416][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.660417][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.670918][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.682331][T13625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.693226][ T7918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.707843][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.718587][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.728460][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.738980][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.748896][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.759388][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.769324][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.779906][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.789867][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.800421][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.810358][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.820803][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.830757][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.841192][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.853096][T13625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.874805][T13625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.883734][T13625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.892588][T13625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.901435][T13625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.933443][ T7918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.984535][ T7918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.054005][ T7918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.124077][ T7918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.206527][ T7918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.262095][ T7918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.312550][ T7918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.372443][ T7918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.455919][ T7918] bridge_slave_1: left allmulticast mode [ 139.461751][ T7918] bridge_slave_1: left promiscuous mode [ 139.467435][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.475274][ T7918] bridge_slave_0: left allmulticast mode [ 139.481061][ T7918] bridge_slave_0: left promiscuous mode [ 139.486726][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.495004][ T7918] bridge_slave_1: left allmulticast mode [ 139.500900][ T7918] bridge_slave_1: left promiscuous mode [ 139.506719][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.514708][ T7918] bridge_slave_0: left allmulticast mode [ 139.520447][ T7918] bridge_slave_0: left promiscuous mode [ 139.526328][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.534504][ T7918] bridge_slave_1: left allmulticast mode [ 139.540183][ T7918] bridge_slave_1: left promiscuous mode [ 139.546029][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.553884][ T7918] bridge_slave_0: left allmulticast mode [ 139.559529][ T7918] bridge_slave_0: left promiscuous mode [ 139.565238][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.573612][ T7918] veth0_to_bond: left allmulticast mode [ 139.579192][ T7918] veth0_to_bond: left promiscuous mode [ 139.584810][ T7918] bridge0: port 3(veth0_to_bond) entered disabled state [ 139.592860][ T7918] bridge_slave_1: left allmulticast mode [ 139.598535][ T7918] bridge_slave_1: left promiscuous mode [ 139.604180][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.612232][ T7918] bridge_slave_0: left allmulticast mode [ 139.618012][ T7918] bridge_slave_0: left promiscuous mode [ 139.623806][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.012994][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.023632][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.033991][ T7918] bond0 (unregistering): Released all slaves [ 140.044434][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.054953][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.065282][ T7918] bond0 (unregistering): Released all slaves [ 140.075280][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.086038][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.096354][ T7918] bond0 (unregistering): Released all slaves [ 140.105490][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.116144][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.126510][ T7918] bond0 (unregistering): Released all slaves [ 140.189708][ T7918] hsr_slave_0: left promiscuous mode [ 140.195544][ T7918] hsr_slave_1: left promiscuous mode [ 140.201409][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.208885][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.216754][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.224196][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.235741][ T7918] hsr_slave_0: left promiscuous mode [ 140.241771][ T7918] hsr_slave_1: left promiscuous mode [ 140.247603][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.255141][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.262896][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.270391][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.279526][ T7918] hsr_slave_0: left promiscuous mode [ 140.285342][ T7918] hsr_slave_1: left promiscuous mode [ 140.291445][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.298847][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.306520][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.313974][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.324806][ T7918] hsr_slave_0: left promiscuous mode [ 140.330417][ T7918] hsr_slave_1: left promiscuous mode [ 140.336437][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.343934][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.351681][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.359122][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.374284][ T7918] veth1_macvtap: left promiscuous mode [ 140.379781][ T7918] veth0_macvtap: left promiscuous mode [ 140.385340][ T7918] veth1_vlan: left promiscuous mode [ 140.390667][ T7918] veth0_vlan: left promiscuous mode [ 140.396508][ T7918] veth1_macvtap: left promiscuous mode [ 140.402020][ T7918] veth0_macvtap: left promiscuous mode [ 140.407588][ T7918] veth1_vlan: left promiscuous mode [ 140.412853][ T7918] veth0_vlan: left promiscuous mode [ 140.418534][ T7918] veth1_macvtap: left promiscuous mode [ 140.424215][ T7918] veth0_macvtap: left promiscuous mode [ 140.429743][ T7918] veth1_vlan: left promiscuous mode [ 140.435060][ T7918] veth0_vlan: left promiscuous mode [ 140.441055][ T7918] veth1_macvtap: left promiscuous mode [ 140.446630][ T7918] veth0_macvtap: left promiscuous mode [ 140.452164][ T7918] veth1_vlan: left promiscuous mode [ 140.457417][ T7918] veth0_vlan: left promiscuous mode [ 140.676428][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 140.687851][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 140.753095][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 140.763091][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 140.827690][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 140.837783][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 140.902417][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 140.912953][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 141.854976][ T7918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.623979][ T7918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.673771][ T7918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.723225][ T7918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.803917][ T7918] bridge_slave_1: left allmulticast mode [ 142.809688][ T7918] bridge_slave_1: left promiscuous mode [ 142.815482][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.823150][ T7918] bridge_slave_0: left allmulticast mode [ 142.828799][ T7918] bridge_slave_0: left promiscuous mode [ 142.834457][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.952988][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.963762][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.973919][ T7918] bond0 (unregistering): Released all slaves [ 143.034601][ T7918] hsr_slave_0: left promiscuous mode [ 143.040354][ T7918] hsr_slave_1: left promiscuous mode [ 143.046186][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.053796][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.061320][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.068743][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.077865][ T7918] veth1_macvtap: left promiscuous mode [ 143.083524][ T7918] veth0_macvtap: left promiscuous mode [ 143.089125][ T7918] veth1_vlan: left promiscuous mode [ 143.094486][ T7918] veth0_vlan: left promiscuous mode [ 143.171684][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 143.181587][ T7918] team0 (unregistering): Port device team_slave_0 removed