last executing test programs: 1.300089331s ago: executing program 1 (id=8636): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ftruncate(r0, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sync_file_range(r0, 0x0, 0x0, 0x6) 1.203625228s ago: executing program 3 (id=8640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 1.17409438s ago: executing program 1 (id=8641): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.132066213s ago: executing program 1 (id=8643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x4822, &(0x7f00000004c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000380)='fd\xa7\x98\xf7Z:%*\xe6%\xb7\x98#\xb0*;\x97\xceY\xf6\x1d\xbe\x98\xd8(E\xcc(\x82#\xda\x94\xfb\xe2WM\xd5\xe1\xba\xef\xd9I:\xa2\xb3l\f\xa8\xad\x9b\x95\xae\xedis,w\x0e\xd9\xf1\x81\x05\x01kV\x9dgnV\xe4\x01C\xbc\xbb}\xee\x1e\x1a\x97*\xb3\xed\xcaK\xca\x86\xacn\x16\x13\xea\x89@\f\x03N\x06\x96G\t\xd7Ia(\xdb\xab\xc9\xa85Pae\x8f\a\f\xec\fjjG\x1a\xdc\xa6\xb1kE#\xb9\x87\xe5\xa4\xd7a\xec\b1\xac#\xcc9\xb9V*\xa4', 0x0, r2) close_range(r1, 0xffffffffffffffff, 0x0) 1.084418426s ago: executing program 1 (id=8656): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) read$msr(r0, &(0x7f0000000200)=""/116, 0x74) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0) 1.02840175s ago: executing program 2 (id=8647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.011580851s ago: executing program 2 (id=8648): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b48090987f70e06d038e7ff7fc6e5539b0d46078b089b37073b6d090890e0878f0e1ac6e7049b334d959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e809ea88008000000000000027b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1dbdb230ae1fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b3804000000bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f6e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f000800080000000000002420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b25361b665a8c97447a3c6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f304b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8cf7d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad15a3a504767b6b45a45957f24d758ed024b3849c1137e2a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb81f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39988b8658a20878b7c1dd7ba02fc42939dde7d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88d0466d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a028ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7bac7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068eb38067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3f0600faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 990.626522ms ago: executing program 2 (id=8649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 965.666464ms ago: executing program 0 (id=8651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 910.434728ms ago: executing program 1 (id=8652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 910.237578ms ago: executing program 2 (id=8653): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ftruncate(r0, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sync_file_range(r0, 0x0, 0x0, 0x6) 909.174768ms ago: executing program 0 (id=8663): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8}, {}, {0x5, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 808.372715ms ago: executing program 0 (id=8666): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) 751.669218ms ago: executing program 0 (id=8655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070d0903001f00000000000005000000000800040001000000", 0x24) 634.766607ms ago: executing program 4 (id=8657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x4822, &(0x7f00000004c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000380)='fd\xa7\x98\xf7Z:%*\xe6%\xb7\x98#\xb0*;\x97\xceY\xf6\x1d\xbe\x98\xd8(E\xcc(\x82#\xda\x94\xfb\xe2WM\xd5\xe1\xba\xef\xd9I:\xa2\xb3l\f\xa8\xad\x9b\x95\xae\xedis,w\x0e\xd9\xf1\x81\x05\x01kV\x9dgnV\xe4\x01C\xbc\xbb}\xee\x1e\x1a\x97*\xb3\xed\xcaK\xca\x86\xacn\x16\x13\xea\x89@\f\x03N\x06\x96G\t\xd7Ia(\xdb\xab\xc9\xa85Pae\x8f\a\f\xec\fjjG\x1a\xdc\xa6\xb1kE#\xb9\x87\xe5\xa4\xd7a\xec\b1\xac#\xcc9\xb9V*\xa4', 0x0, r2) close_range(r1, 0xffffffffffffffff, 0x0) 634.203417ms ago: executing program 0 (id=8669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 632.797207ms ago: executing program 1 (id=8658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 355.056596ms ago: executing program 3 (id=8659): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 350.070226ms ago: executing program 2 (id=8672): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ftruncate(r0, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sync_file_range(r0, 0x0, 0x0, 0x6) 340.780647ms ago: executing program 4 (id=8673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22", @ANYRES16=0x0, @ANYRESOCT], 0x0) 325.565807ms ago: executing program 3 (id=8660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 292.421549ms ago: executing program 4 (id=8661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb1000000000086dd400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) 260.614862ms ago: executing program 0 (id=8662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000001b40)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x545c, 0x0) 246.885513ms ago: executing program 4 (id=8677): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 223.123644ms ago: executing program 3 (id=8664): socket$igmp(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 222.971415ms ago: executing program 4 (id=8665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 207.302925ms ago: executing program 2 (id=8667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef) 166.246818ms ago: executing program 3 (id=8668): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) read$msr(r0, &(0x7f0000000200)=""/116, 0x74) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0) 165.953188ms ago: executing program 4 (id=8670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 3 (id=8671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(318.564:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.695965][ T29] audit: type=1326 audit(318.564:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.719095][ T29] audit: type=1326 audit(318.564:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.742084][ T29] audit: type=1326 audit(318.564:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.765007][ T29] audit: type=1326 audit(318.564:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.788114][ T29] audit: type=1326 audit(318.564:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22807 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5456e8def9 code=0x7ffc0000 [ 318.824897][T22811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.837088][T22811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.846383][T20096] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.067949][T22831] serio: Serial port ptm0 [ 319.164469][T22843] hub 6-0:1.0: USB hub found [ 319.171673][T22855] loop3: detected capacity change from 0 to 512 [ 319.173904][T22843] hub 6-0:1.0: 8 ports detected [ 319.189123][T22855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.240856][T22855] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 319.259168][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.293234][T22868] loop1: detected capacity change from 0 to 1024 [ 319.301304][T22868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.320764][T22868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.347228][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7603'. [ 319.357278][T22885] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7603'. [ 319.383148][T20011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.421094][T22898] loop1: detected capacity change from 0 to 1024 [ 319.434012][T22898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.472197][T22912] tipc: Started in network mode [ 319.477146][T22912] tipc: Node identity ac14140f, cluster identity 4711 [ 319.484343][T22912] tipc: New replicast peer: 255.255.255.255 [ 319.490661][T22912] tipc: Enabled bearer , priority 10 [ 319.512382][T20011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.524544][T22916] rdma_op ffff888109bae980 conn xmit_rdma 0000000000000000 [ 319.599368][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7618'. [ 319.647259][T22940] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 319.653804][T22940] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.661333][T22940] vhci_hcd vhci_hcd.0: Device attached [ 319.676518][T22944] vhci_hcd: connection closed [ 319.681344][ T11] vhci_hcd: stop threads [ 319.684705][T22946] netlink: 'syz.4.7623': attribute type 21 has an invalid length. [ 319.686161][ T11] vhci_hcd: release socket [ 319.690342][T22946] netlink: 'syz.4.7623': attribute type 20 has an invalid length. [ 319.698167][ T11] vhci_hcd: disconnect device [ 319.715162][T22946] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.870894][T22972] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.928312][T22986] loop3: detected capacity change from 0 to 1024 [ 319.957212][T22986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.008256][T23001] loop1: detected capacity change from 0 to 256 [ 320.036514][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.237443][T23030] bpf_get_probe_write_proto: 2 callbacks suppressed [ 320.237457][T23030] syz.3.7657[23030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.244398][T23030] syz.3.7657[23030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.262531][T23030] loop3: detected capacity change from 0 to 512 [ 320.287414][T23030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.318855][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.387183][T23053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7667'. [ 320.413453][T23056] veth2: entered allmulticast mode [ 320.479605][T23077] tipc: New replicast peer: 100.1.1.1 [ 320.485629][T23077] tipc: Enabled bearer , priority 10 [ 320.558377][T23048] chnl_net:caif_netlink_parms(): no params data found [ 320.606307][T23048] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.613415][T23048] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.622123][T23048] bridge_slave_0: entered allmulticast mode [ 320.629617][T23048] bridge_slave_0: entered promiscuous mode [ 320.636944][T23048] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.644355][T23048] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.652007][T23048] bridge_slave_1: entered allmulticast mode [ 320.658843][T23048] bridge_slave_1: entered promiscuous mode [ 320.681472][T23048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.681771][T23267] syz.0.7678[23267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.691689][T23267] syz.0.7678[23267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.692427][T23048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.738378][T23048] team0: Port device team_slave_0 added [ 320.746262][T23048] team0: Port device team_slave_1 added [ 320.763676][T23048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.770706][T23048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.796631][T23048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.808211][T23048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.815187][T23048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.841138][T23048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.876668][T23334] loop0: detected capacity change from 0 to 128 [ 320.889798][T23048] hsr_slave_0: entered promiscuous mode [ 320.903440][T23048] hsr_slave_1: entered promiscuous mode [ 320.910498][T23048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.920073][T23048] Cannot create hsr debugfs directory [ 321.030205][T23048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.084851][T23048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.150467][T23048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.172202][T23447] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 321.234052][T23048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.292700][T23476] loop0: detected capacity change from 0 to 1024 [ 321.299629][T23476] EXT4-fs: Ignoring removed i_version option [ 321.310665][T23476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.360136][T18823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.366556][T23048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.382042][T23048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.406613][T23048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.423846][T23512] syz.3.7720[23512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.423897][T23512] syz.3.7720[23512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.442440][T23048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.484408][ T9453] tipc: Node number set to 2886997007 [ 321.501517][T23519] loop4: detected capacity change from 0 to 512 [ 321.515290][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7724'. [ 321.539333][T23524] netlink: 'syz.0.7721': attribute type 17 has an invalid length. [ 321.562827][T23519] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.7722: Failed to acquire dquot type 1 [ 321.585932][T23519] EXT4-fs (loop4): 1 truncate cleaned up [ 321.591964][T23519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.629275][T23542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7727'. [ 321.647548][T23048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.664335][T23519] loop4: detected capacity change from 512 to 0 [ 321.672557][T23555] syz.4.7722: attempt to access beyond end of device [ 321.672557][T23555] loop4: rw=12288, sector=88, nr_sectors = 8 limit=0 [ 321.694857][T23555] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.7722: Failed to acquire dquot type 1 [ 321.700287][T23048] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.730624][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.737735][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.744865][T23555] syz.4.7722: attempt to access beyond end of device [ 321.744865][T23555] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 321.744919][T23555] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 321.744934][T23555] EXT4-fs (loop4): I/O error while writing superblock [ 321.775599][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.782688][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.782797][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.817679][T23048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.828091][T23048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.833473][T18659] syz-executor: attempt to access beyond end of device [ 321.833473][T18659] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 321.851860][T18659] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 321.869209][T18659] EXT4-fs (loop4): I/O error while writing superblock [ 321.880199][T23527] kmmpd-loop4: attempt to access beyond end of device [ 321.880199][T23527] loop4: rw=14337, sector=64, nr_sectors = 8 limit=0 [ 321.893601][T23527] Buffer I/O error on dev loop4, logical block 8, lost sync page write [ 321.914108][T23568] pim6reg1: entered promiscuous mode [ 321.919494][T23568] pim6reg1: entered allmulticast mode [ 321.939398][T23048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.029469][T23602] hsr0: entered promiscuous mode [ 322.034820][T23602] macsec1: entered promiscuous mode [ 322.040110][T23602] macsec1: entered allmulticast mode [ 322.045473][T23602] hsr0: entered allmulticast mode [ 322.050500][T23602] hsr_slave_0: entered allmulticast mode [ 322.056171][T23602] hsr_slave_1: entered allmulticast mode [ 322.063983][T23602] hsr0: left allmulticast mode [ 322.068884][T23602] hsr_slave_0: left allmulticast mode [ 322.074303][T23602] hsr_slave_1: left allmulticast mode [ 322.099580][T23048] veth0_vlan: entered promiscuous mode [ 322.109220][T23048] veth1_vlan: entered promiscuous mode [ 322.132197][T23048] veth0_macvtap: entered promiscuous mode [ 322.149116][T23048] veth1_macvtap: entered promiscuous mode [ 322.163870][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.174530][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.184381][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.194829][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.204814][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.215439][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.225782][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.236222][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.246049][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.256644][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.266476][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.276983][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.286848][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.297261][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.307138][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.317543][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.327388][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.337804][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.347662][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.358299][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.368156][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.378736][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.392349][T23048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.406277][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.416865][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.426750][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.431386][T23632] loop3: detected capacity change from 0 to 2048 [ 322.437304][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.453533][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.456382][T23632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.464148][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.486043][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.496494][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.506310][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.516715][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.526530][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.536973][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.547097][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.557784][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.567727][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.578220][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.588025][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.598427][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.608272][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.618719][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.628553][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.639044][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.648873][T23048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.659270][T23048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.671774][T23048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.681260][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.690010][T23638] can0: slcan on ttyS3. [ 322.695775][T23048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.704671][T23048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.713451][T23048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.722509][T23048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.753734][T23651] loop3: detected capacity change from 0 to 128 [ 322.774703][T23651] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.786999][T23639] can0 (unregistered): slcan off ttyS3. [ 322.793556][T23639] Falling back ldisc for ttyS3. [ 322.834449][T23651] loop3: detected capacity change from 128 to 127 [ 322.849256][T23669] syz.2.7761[23669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.849356][T23669] syz.2.7761[23669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.898404][T20096] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.960841][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7764'. [ 323.101516][T23737] syz.2.7781[23737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.101626][T23737] syz.2.7781[23737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.264027][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'. [ 323.301075][T23768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.407678][T23768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.433216][T23786] syzkaller0: refused to change device tx_queue_len [ 323.460918][T23768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.543939][T23768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.572512][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 323.572527][ T29] audit: type=1400 audit(323.554:9334): avc: denied { read } for pid=23816 comm="syz.1.7808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.612881][T23768] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.647360][T23768] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.679463][T23768] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.691783][T23768] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.740142][ T29] audit: type=1400 audit(323.724:9335): avc: denied { read write } for pid=23847 comm="syz.2.7817" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 323.764398][ T29] audit: type=1400 audit(323.724:9336): avc: denied { open } for pid=23847 comm="syz.2.7817" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 323.807963][T23850] loop1: detected capacity change from 0 to 128 [ 323.815860][ T29] audit: type=1326 audit(323.804:9337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23852 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8cfdef9 code=0x7ffc0000 [ 323.830556][T23850] vfat: Unknown parameter 'tsefdiscard' [ 323.838819][ T29] audit: type=1326 audit(323.804:9338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23852 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8cfdef9 code=0x7ffc0000 [ 323.879544][ T29] audit: type=1326 audit(323.854:9339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23852 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f43e8cfdef9 code=0x7ffc0000 [ 323.896520][T23857] loop3: detected capacity change from 0 to 512 [ 323.902436][ T29] audit: type=1326 audit(323.854:9340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23852 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8cfdef9 code=0x7ffc0000 [ 323.931530][ T29] audit: type=1326 audit(323.854:9341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23852 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8cfdef9 code=0x7ffc0000 [ 323.958765][T23857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.966926][T23861] loop1: detected capacity change from 0 to 256 [ 323.981592][ T29] audit: type=1400 audit(323.964:9342): avc: denied { write } for pid=23856 comm="syz.3.7820" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 324.003638][ T29] audit: type=1400 audit(323.964:9343): avc: denied { create } for pid=23856 comm="syz.3.7820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 324.026502][T23863] tipc: Enabling of bearer rejected, already enabled [ 324.030153][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.048745][T23861] FAT-fs (loop1): Directory bread(block 64) failed [ 324.055652][T23861] FAT-fs (loop1): Directory bread(block 65) failed [ 324.062226][T23861] FAT-fs (loop1): Directory bread(block 66) failed [ 324.069638][T23861] FAT-fs (loop1): Directory bread(block 67) failed [ 324.077624][T23861] FAT-fs (loop1): Directory bread(block 68) failed [ 324.084701][T23861] FAT-fs (loop1): Directory bread(block 69) failed [ 324.091469][T23861] FAT-fs (loop1): Directory bread(block 70) failed [ 324.108602][T23861] FAT-fs (loop1): Directory bread(block 71) failed [ 324.119461][T23861] FAT-fs (loop1): Directory bread(block 72) failed [ 324.129765][T23861] FAT-fs (loop1): Directory bread(block 73) failed [ 324.208632][T23879] loop4: detected capacity change from 0 to 512 [ 324.208871][T23861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7821'. [ 324.216675][T23879] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.7827: corrupted in-inode xattr: invalid ea_ino [ 324.238667][T23879] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7827: couldn't read orphan inode 15 (err -117) [ 324.251237][T23879] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.300267][T18659] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 324.308504][T23894] loop0: detected capacity change from 0 to 4096 [ 324.316989][T23894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.327703][T23894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.392360][T18823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.487532][T23914] loop4: detected capacity change from 0 to 2048 [ 324.504610][T23914] EXT4-fs: Ignoring removed orlov option [ 324.527131][T23914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.550409][T23914] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 324.573845][T23914] EXT4-fs (loop4): Remounting filesystem read-only [ 324.601890][T23914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.655942][T23954] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7844'. [ 324.736549][T23960] loop2: detected capacity change from 0 to 1024 [ 324.743377][T23960] EXT4-fs: test_dummy_encryption option not supported [ 324.784745][T23972] loop2: detected capacity change from 0 to 128 [ 324.798062][T23972] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.839284][T18722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.871146][T23978] loop1: detected capacity change from 0 to 1024 [ 324.899835][T23978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.928712][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.975660][T23992] loop3: detected capacity change from 0 to 512 [ 324.983924][T23992] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 324.995166][T23992] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7858: invalid indirect mapped block 2683928664 (level 1) [ 325.011391][T23992] EXT4-fs (loop3): Remounting filesystem read-only [ 325.018587][T23992] EXT4-fs (loop3): 1 truncate cleaned up [ 325.027730][T23992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.040978][T23992] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 325.047953][T23992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.161824][T24012] loop1: detected capacity change from 0 to 1024 [ 325.295708][T24012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.323871][T24012] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.7865: attempt to clear invalid blocks 1886221359 len 1 [ 325.537113][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.587313][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7867'. [ 325.701964][T24025] loop4: detected capacity change from 0 to 2048 [ 325.726167][T24025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.765988][T24025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.839282][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.985194][T24061] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.7873'. [ 325.997546][T24061] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.7873'. [ 326.023832][T24063] loop3: detected capacity change from 0 to 512 [ 326.031014][T24063] EXT4-fs: test_dummy_encryption option not supported [ 326.232181][T24075] loop4: detected capacity change from 0 to 1024 [ 326.256933][T24075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.273041][T24075] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.7879: attempt to clear invalid blocks 1886221359 len 1 [ 326.314331][T24085] loop3: detected capacity change from 0 to 512 [ 326.351101][T24085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 326.392485][T24085] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 326.404942][T24085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 326.404942][T24085] [ 326.414640][T24085] EXT4-fs (loop3): Total free blocks count 0 [ 326.420616][T24085] EXT4-fs (loop3): Free/Dirty block details [ 326.426561][T24085] EXT4-fs (loop3): free_blocks=65281 [ 326.431846][T24085] EXT4-fs (loop3): dirty_blocks=23 [ 326.437014][T24085] EXT4-fs (loop3): Block reservation details [ 326.443014][T24085] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 326.457183][T24099] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 326.469655][T24099] EXT4-fs (loop3): This should not happen!! Data will be lost [ 326.469655][T24099] [ 326.821387][T24127] Cannot find set identified by id 0 to match [ 326.919465][T24125] loop2: detected capacity change from 0 to 1024 [ 327.033656][T24125] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.7893: attempt to clear invalid blocks 1886221359 len 1 [ 327.057928][T24137] loop0: detected capacity change from 0 to 512 [ 327.086227][T24137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 327.139115][T24137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 327.151543][T24137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 327.151543][T24137] [ 327.161261][T24137] EXT4-fs (loop0): Total free blocks count 0 [ 327.167269][T24137] EXT4-fs (loop0): Free/Dirty block details [ 327.173327][T24137] EXT4-fs (loop0): free_blocks=65281 [ 327.178789][T24137] EXT4-fs (loop0): dirty_blocks=23 [ 327.184004][T24137] EXT4-fs (loop0): Block reservation details [ 327.190096][T24137] EXT4-fs (loop0): i_reserved_data_blocks=23 [ 327.214530][T24155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 327.226900][T24155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 327.226900][T24155] [ 327.281220][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7904'. [ 327.290799][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7904'. [ 327.320998][T24167] bpf_get_probe_write_proto: 2 callbacks suppressed [ 327.321011][T24167] syz.2.7905[24167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.332419][T24167] syz.2.7905[24167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.753568][T24188] loop1: detected capacity change from 0 to 512 [ 327.805692][T24188] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 327.826804][T24188] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 327.839218][T24188] EXT4-fs (loop1): This should not happen!! Data will be lost [ 327.839218][T24188] [ 327.848865][T24188] EXT4-fs (loop1): Total free blocks count 0 [ 327.854857][T24188] EXT4-fs (loop1): Free/Dirty block details [ 327.860743][T24188] EXT4-fs (loop1): free_blocks=65281 [ 327.866039][T24188] EXT4-fs (loop1): dirty_blocks=23 [ 327.871140][T24188] EXT4-fs (loop1): Block reservation details [ 327.877171][T24188] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 327.975945][T24191] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 327.988486][T24191] EXT4-fs (loop1): This should not happen!! Data will be lost [ 327.988486][T24191] [ 328.149253][T24204] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 328.244347][T24225] loop4: detected capacity change from 0 to 164 [ 328.323397][T24238] loop4: detected capacity change from 0 to 512 [ 328.368692][T24238] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 328.412315][T24238] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 328.424782][T24238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.424782][T24238] [ 328.434440][T24238] EXT4-fs (loop4): Total free blocks count 0 [ 328.440416][T24238] EXT4-fs (loop4): Free/Dirty block details [ 328.446326][T24238] EXT4-fs (loop4): free_blocks=65281 [ 328.451599][T24238] EXT4-fs (loop4): dirty_blocks=23 [ 328.456885][T24238] EXT4-fs (loop4): Block reservation details [ 328.462937][T24238] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 328.473565][T24238] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 328.485887][T24238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.485887][T24238] [ 328.731386][T24271] loop3: detected capacity change from 0 to 128 [ 328.797928][T24282] loop4: detected capacity change from 0 to 512 [ 328.829646][T24282] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 328.859510][T24282] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 328.871988][T24282] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.871988][T24282] [ 328.881736][T24282] EXT4-fs (loop4): Total free blocks count 0 [ 328.887746][T24282] EXT4-fs (loop4): Free/Dirty block details [ 328.893627][T24282] EXT4-fs (loop4): free_blocks=65281 [ 328.898924][T24282] EXT4-fs (loop4): dirty_blocks=23 [ 328.904035][T24282] EXT4-fs (loop4): Block reservation details [ 328.910029][T24282] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 328.917276][T24287] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 328.929670][T24287] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.929670][T24287] [ 329.009327][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 329.009339][ T29] audit: type=1326 audit(328.994:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.041341][ T29] audit: type=1326 audit(329.024:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.064409][ T29] audit: type=1326 audit(329.024:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.087444][ T29] audit: type=1326 audit(329.024:9439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.135384][ T29] audit: type=1326 audit(329.094:9440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.158345][ T29] audit: type=1326 audit(329.094:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.158393][ T29] audit: type=1326 audit(329.094:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.158525][ T29] audit: type=1326 audit(329.094:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.158550][ T29] audit: type=1326 audit(329.094:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.250091][ T29] audit: type=1326 audit(329.104:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24290 comm="syz.4.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 329.283514][T24293] loop1: detected capacity change from 0 to 512 [ 329.394729][T24318] loop4: detected capacity change from 0 to 512 [ 329.404522][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7962'. [ 329.437516][T24318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 329.474299][T24318] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 329.486761][T24318] EXT4-fs (loop4): This should not happen!! Data will be lost [ 329.486761][T24318] [ 329.496495][T24318] EXT4-fs (loop4): Total free blocks count 0 [ 329.502465][T24318] EXT4-fs (loop4): Free/Dirty block details [ 329.508619][T24318] EXT4-fs (loop4): free_blocks=65281 [ 329.513907][T24318] EXT4-fs (loop4): dirty_blocks=23 [ 329.519240][T24318] EXT4-fs (loop4): Block reservation details [ 329.525436][T24318] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 329.528986][T24331] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 329.543917][T24331] EXT4-fs (loop4): This should not happen!! Data will be lost [ 329.543917][T24331] [ 329.560109][T24324] netlink: 'syz.0.7965': attribute type 14 has an invalid length. [ 329.617257][T24337] loop0: detected capacity change from 0 to 2048 [ 329.674630][T24337] loop0: detected capacity change from 2048 to 11 [ 329.681722][T24337] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 329.697893][T24337] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #15: comm syz.0.7970: mark_inode_dirty error [ 329.740736][T24374] loop2: detected capacity change from 0 to 512 [ 329.773056][T24374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 329.804583][T24352] kmmpd-loop0: attempt to access beyond end of device [ 329.804583][T24352] loop0: rw=14337, sector=256, nr_sectors = 4 limit=11 [ 329.816473][T24383] syz.1.7980[24383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.818152][T24352] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 329.818216][T24383] syz.1.7980[24383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.842155][T24374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 329.866122][T24374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 329.866122][T24374] [ 329.875871][T24374] EXT4-fs (loop2): Total free blocks count 0 [ 329.881940][T24374] EXT4-fs (loop2): Free/Dirty block details [ 329.887877][T24374] EXT4-fs (loop2): free_blocks=65281 [ 329.893151][T24374] EXT4-fs (loop2): dirty_blocks=23 [ 329.898265][T24374] EXT4-fs (loop2): Block reservation details [ 329.904584][T24374] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 329.914659][T24384] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 329.926992][T24384] EXT4-fs (loop2): This should not happen!! Data will be lost [ 329.926992][T24384] [ 330.011725][T24398] loop2: detected capacity change from 0 to 128 [ 330.071680][T24404] can0: slcan on ttyS3. [ 330.114466][T24401] can0 (unregistered): slcan off ttyS3. [ 330.197550][T24420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7992'. [ 330.562859][T24429] loop1: detected capacity change from 0 to 512 [ 330.581235][T24429] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 330.589507][T24435] program syz.4.7998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.605814][T24429] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 330.618250][T24429] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.618250][T24429] [ 330.628077][T24429] EXT4-fs (loop1): Total free blocks count 0 [ 330.634212][T24429] EXT4-fs (loop1): Free/Dirty block details [ 330.634226][T24429] EXT4-fs (loop1): free_blocks=65281 [ 330.634305][T24429] EXT4-fs (loop1): dirty_blocks=23 [ 330.634318][T24429] EXT4-fs (loop1): Block reservation details [ 330.634328][T24429] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 330.636842][T24429] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 330.675330][T24429] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.675330][T24429] [ 330.852184][T24444] loop1: detected capacity change from 0 to 512 [ 330.867306][T24443] can0: slcan on ttyS3. [ 330.881365][T24444] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 330.907316][T24444] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 330.919717][T24444] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.919717][T24444] [ 330.929628][T24444] EXT4-fs (loop1): Total free blocks count 0 [ 330.935682][T24444] EXT4-fs (loop1): Free/Dirty block details [ 330.941568][T24444] EXT4-fs (loop1): free_blocks=65281 [ 330.947114][T24444] EXT4-fs (loop1): dirty_blocks=23 [ 330.952217][T24444] EXT4-fs (loop1): Block reservation details [ 330.958278][T24444] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 330.965533][T24462] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 330.969844][T24459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8003'. [ 330.977881][T24462] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.977881][T24462] [ 330.996839][T24441] can0 (unregistered): slcan off ttyS3. [ 331.215536][T24486] bond1: entered promiscuous mode [ 331.220609][T24486] bond1: entered allmulticast mode [ 331.225938][T24486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.244141][T24486] bond1 (unregistering): Released all slaves [ 331.320109][T18573] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.327726][T18573] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.335314][T18573] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.342777][T18573] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.350203][T18573] rtc rtc0: __rtc_set_alarm: err=-22 [ 331.402390][T24559] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 331.825690][T24569] chnl_net:caif_netlink_parms(): no params data found [ 331.932036][T24569] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.939238][T24569] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.946573][T24569] bridge_slave_0: entered allmulticast mode [ 331.953279][T24569] bridge_slave_0: entered promiscuous mode [ 331.960542][T24569] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.967631][T24569] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.975787][T24569] bridge_slave_1: entered allmulticast mode [ 331.982446][T24569] bridge_slave_1: entered promiscuous mode [ 332.015128][T24569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.025745][T24569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.060080][T24569] team0: Port device team_slave_0 added [ 332.067916][T24569] team0: Port device team_slave_1 added [ 332.080688][T24783] syz.3.8030[24783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.080747][T24783] syz.3.8030[24783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.113430][T24569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.132006][T24569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.157940][T24569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.171663][T24569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.178678][T24569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.204647][T24569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.287817][T24569] hsr_slave_0: entered promiscuous mode [ 332.304024][T24867] syz.2.8037[24867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.304083][T24867] syz.2.8037[24867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.320877][T24569] hsr_slave_1: entered promiscuous mode [ 332.387003][T24569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.404931][T24569] Cannot create hsr debugfs directory [ 332.521037][T24943] syz.4.8042[24943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.521165][T24943] syz.4.8042[24943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.564932][T24569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.618502][T24973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8048'. [ 332.637083][T24569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.693020][T24569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.739882][T24991] loop1: detected capacity change from 0 to 128 [ 332.747589][T24993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24993 comm=syz.3.8055 [ 332.762580][T24991] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 332.781761][T24569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.782701][T24991] syz.1.8064: attempt to access beyond end of device [ 332.782701][T24991] loop1: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 332.817454][T24991] syz.1.8064: attempt to access beyond end of device [ 332.817454][T24991] loop1: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 332.821637][T25001] loop2: detected capacity change from 0 to 512 [ 332.844690][T25001] EXT4-fs: Ignoring removed bh option [ 332.868756][T25001] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.8058: invalid block [ 332.888295][T25012] serio: Serial port ptm0 [ 332.893357][T25001] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8058: couldn't read orphan inode 15 (err -117) [ 332.921145][T24569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.930612][T24569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.940396][T24569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.949817][T24569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.006282][T25034] loop1: detected capacity change from 0 to 164 [ 333.011582][T25033] tipc: New replicast peer: 255.255.255.255 [ 333.018642][T25033] tipc: Enabled bearer , priority 10 [ 333.046612][T24569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.076633][T24569] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.091337][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.098424][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.125554][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.132695][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.257502][T24569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.348175][T24569] veth0_vlan: entered promiscuous mode [ 333.359962][T24569] veth1_vlan: entered promiscuous mode [ 333.385518][T24569] veth0_macvtap: entered promiscuous mode [ 333.393563][T24569] veth1_macvtap: entered promiscuous mode [ 333.459286][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.469909][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.479932][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.490581][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.500398][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.510892][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.520784][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.531285][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.541107][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.551527][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.561383][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.571871][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.581867][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.592560][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.602520][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.612995][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.622807][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.633228][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.643228][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.653697][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.663546][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.674128][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.684302][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.694845][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.706747][T24569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.716102][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.726645][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.736573][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.747239][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.757137][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.767647][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.777506][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.787934][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.797759][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.808186][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.817998][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.828491][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.838494][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.849026][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.858966][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.869386][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.879248][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.889868][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.899780][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.910366][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.920205][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.930623][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.940497][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.950929][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.960740][T24569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.971212][T24569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.983067][T24569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.997958][T24569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.006718][T24569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.015491][T24569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.024179][T24569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.034300][T25040] delete_channel: no stack [ 334.062200][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 334.062214][ T29] audit: type=1400 audit(334.044:9565): avc: denied { unmount } for pid=18722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.113288][T18722] bond0: (slave syz_tun): Releasing backup interface [ 334.139644][ T29] audit: type=1400 audit(334.124:9566): avc: denied { create } for pid=25129 comm="syz.0.8095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.159240][ T29] audit: type=1400 audit(334.124:9567): avc: denied { write } for pid=25129 comm="syz.0.8095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.414621][T25141] loop1: detected capacity change from 0 to 2048 [ 336.661072][T25141] EXT4-fs (loop1): failed to initialize system zone (-117) [ 336.672368][T25141] EXT4-fs (loop1): mount failed [ 336.733316][ T29] audit: type=1400 audit(336.714:9568): avc: denied { read write } for pid=25151 comm="syz.4.8100" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.756239][ T29] audit: type=1400 audit(336.714:9569): avc: denied { open } for pid=25151 comm="syz.4.8100" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.792093][ T29] audit: type=1400 audit(336.774:9570): avc: denied { unmount } for pid=25163 comm="syz.3.8102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 336.792129][T25162] loop0: detected capacity change from 0 to 512 [ 336.853262][ T29] audit: type=1400 audit(336.834:9571): avc: denied { write } for pid=25173 comm="syz.1.8105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.918338][ T29] audit: type=1326 audit(336.894:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25206 comm="syz.1.8109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fb2adef9 code=0x7ffc0000 [ 336.941496][ T29] audit: type=1326 audit(336.894:9573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25206 comm="syz.1.8109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fb2adef9 code=0x7ffc0000 [ 336.964817][ T29] audit: type=1326 audit(336.894:9574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25206 comm="syz.1.8109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1fb2adef9 code=0x7ffc0000 [ 337.014621][T25147] chnl_net:caif_netlink_parms(): no params data found [ 337.080465][T25147] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.083042][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.087630][T25147] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.095020][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.102307][T25147] bridge_slave_0: entered allmulticast mode [ 337.109435][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.109460][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.109482][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.109554][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.116840][T25147] bridge_slave_0: entered promiscuous mode [ 337.122818][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.131351][T25147] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.137587][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.144965][T25147] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.150727][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.158268][T25147] bridge_slave_1: entered allmulticast mode [ 337.165136][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.176463][T25147] bridge_slave_1: entered promiscuous mode [ 337.179504][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.210361][ T11] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 337.213542][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.227391][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.234955][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.242591][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.250094][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.257478][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.264986][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.272390][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.279830][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.287325][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.294726][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.302107][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.309482][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.316856][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.324297][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.331663][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.339037][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.346454][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.353827][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.361202][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.368574][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.375999][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.383402][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.390897][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.398406][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.405890][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.413244][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.420615][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.428288][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.435700][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.443070][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.450448][T18570] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 337.458967][T25374] netlink: 'syz.0.8117': attribute type 10 has an invalid length. [ 337.467402][T18570] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 337.477102][T25374] syz_tun: entered promiscuous mode [ 337.490514][T25374] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 337.524121][T25147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.536046][T25147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.562837][T25147] team0: Port device team_slave_0 added [ 337.570152][T25147] team0: Port device team_slave_1 added [ 337.581651][T25429] loop0: detected capacity change from 0 to 1024 [ 337.589564][T25429] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 337.600576][T25429] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 337.614855][T25429] JBD2: no valid journal superblock found [ 337.620606][T25429] EXT4-fs (loop0): Could not load journal inode [ 337.629088][T25147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.636096][T25147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.638698][T25429] loop0: detected capacity change from 0 to 164 [ 337.662066][T25147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.666348][T25147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.679945][T25429] iso9660: Unknown parameter 'ÿ|Ž‰úx`¢9*XéÉ÷>ùª[ýâò“öÿ»VÿѤýózæÖ÷û#âÐB¥Ö­|£ãÿÁäµró÷§ÞžŸ¿21˜œX¹j}m†íªÍxIãÿÓ«_ÿkÿÛâp("{¬óцîV¦ÿ‡ü¤ñ?³®þý‰©›£_w«¿·þÿp½OߟíqýV×k€æÝN' [ 337.686024][T25147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.729432][T25147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.769468][T25147] hsr_slave_0: entered promiscuous mode [ 337.776605][T25147] hsr_slave_1: entered promiscuous mode [ 337.782514][T25147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.792932][T25147] Cannot create hsr debugfs directory [ 337.865855][T25147] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.937723][T25147] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.996469][T25147] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.016948][T25573] loop1: detected capacity change from 0 to 8192 [ 338.035831][T25589] loop3: detected capacity change from 0 to 1024 [ 338.042759][T25589] EXT4-fs: Ignoring removed orlov option [ 338.050666][T25589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.063051][T25589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e02c, mo2=0002] [ 338.071979][T25589] System zones: 0-1, 3-12 [ 338.078511][T25147] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.081108][T25590] loop4: detected capacity change from 0 to 2048 [ 338.098150][T25590] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 338.167400][T25623] syz.4.8144[25623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.167457][T25623] syz.4.8144[25623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.169082][T25147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.210801][T25147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.243843][T25147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.262881][T25147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.305085][T25646] loop4: detected capacity change from 0 to 128 [ 338.403556][T25147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.420191][T25147] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.436935][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.444021][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.486904][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.494043][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.517543][T25665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8155'. [ 338.538186][T25671] syz.1.8162[25671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.538241][T25671] syz.1.8162[25671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.580964][T25678] netlink: 94 bytes leftover after parsing attributes in process `syz.1.8165'. [ 338.588950][T25675] loop0: detected capacity change from 0 to 2048 [ 338.645121][T25675] loop0: p2 < > [ 338.656853][ C1] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 338.660741][T25147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.771403][T25147] veth0_vlan: entered promiscuous mode [ 338.790537][T25147] veth1_vlan: entered promiscuous mode [ 338.817656][T25147] veth0_macvtap: entered promiscuous mode [ 338.825306][T25147] veth1_macvtap: entered promiscuous mode [ 338.838871][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.849427][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.859249][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.869936][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.879768][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.890226][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.900068][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.910521][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.920376][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.930795][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.940623][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.951081][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.960970][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.971443][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.981391][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.991853][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.001762][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.012181][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.022006][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.032486][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.042341][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.052743][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.062657][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.073109][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.082928][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.093372][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.104229][T25147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.112748][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.123277][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.125513][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 339.125525][ T29] audit: type=1326 audit(339.114:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.133213][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.154266][ T29] audit: type=1326 audit(339.134:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.161691][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.172115][ T29] audit: type=1326 audit(339.134:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.194592][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.204314][ T29] audit: type=1326 audit(339.134:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.226700][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.226718][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.226731][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.237134][ T29] audit: type=1326 audit(339.134:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.237156][ T29] audit: type=1326 audit(339.134:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.237188][ T29] audit: type=1326 audit(339.134:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.259578][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.269558][ T29] audit: type=1400 audit(339.134:10204): avc: denied { block_suspend } for pid=25724 comm="+}[@" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 339.279797][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.279807][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.279821][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.279835][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.279857][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.279868][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.279881][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.289659][ T29] audit: type=1326 audit(339.134:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.312038][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.334404][ T29] audit: type=1326 audit(339.134:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25724 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce08def9 code=0x7ffc0000 [ 339.356867][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.356881][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.534616][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.544444][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.554889][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.564715][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.575195][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.585037][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.595453][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.605270][T25147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.615692][T25147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.626860][T25147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.644561][T25147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.653311][T25147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.662067][T25147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.670845][T25147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.753966][T25743] loop1: detected capacity change from 0 to 1024 [ 339.763947][T25743] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.784806][T25743] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.8183: Invalid block bitmap block 0 in block_group 0 [ 339.802764][T25743] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.8183: Failed to acquire dquot type 0 [ 339.820106][T25743] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.8183: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.820233][T25743] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.8183: Invalid inode bitmap blk 0 in block_group 0 [ 339.820352][T25743] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 339.820424][T25743] EXT4-fs (loop1): 1 orphan inode deleted [ 339.836943][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u8:2: Failed to release dquot type 0 [ 339.870307][T25768] syz.0.8190[25768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.870362][T25768] syz.0.8190[25768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.907845][T25769] loop2: detected capacity change from 0 to 512 [ 339.927678][T25769] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8191: corrupted in-inode xattr: invalid ea_ino [ 339.967925][T25769] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8191: couldn't read orphan inode 15 (err -117) [ 339.980629][T25769] EXT4-fs mount: 33 callbacks suppressed [ 339.980695][T25769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.041009][T25785] loop0: detected capacity change from 0 to 128 [ 340.056867][T25785] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.072832][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.116683][T24569] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.201734][T25815] loop2: detected capacity change from 0 to 512 [ 340.216736][T25815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.235563][T25815] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 340.263655][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.493130][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8233'. [ 340.514728][T25856] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8233'. [ 340.568294][T25868] serio: Serial port ptm0 [ 340.621965][T25870] hub 6-0:1.0: USB hub found [ 340.631661][T25870] hub 6-0:1.0: 8 ports detected [ 340.670865][T25878] loop4: detected capacity change from 0 to 1024 [ 340.687926][T25878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 340.736991][T25878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.782846][T25896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.811133][T25896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.845703][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.965203][T25923] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 340.991284][T25925] loop0: detected capacity change from 0 to 128 [ 341.001434][T25925] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 341.009291][T25925] FAT-fs (loop0): Filesystem has been set read-only [ 341.018400][T25925] syz.0.8246: attempt to access beyond end of device [ 341.018400][T25925] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 341.135019][T25933] loop4: detected capacity change from 0 to 512 [ 341.149481][T25933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.189670][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.342919][T25966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8263'. [ 341.421166][T25986] loop2: detected capacity change from 0 to 2048 [ 341.431418][T25986] EXT4-fs: test_dummy_encryption option not supported [ 341.519989][T25986] loop2: detected capacity change from 0 to 8192 [ 341.565084][T26005] syz.0.8278[26005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.565213][T26005] syz.0.8278[26005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.581910][T26005] loop0: detected capacity change from 0 to 512 [ 341.587543][T25986] loop2: p2 p3 p4 [ 341.603994][T25986] loop2: p3 start 83888008 is beyond EOD, truncated [ 341.606101][T26005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.610636][T25986] loop2: p4 size 50331904 extends beyond EOD, truncated [ 341.671255][T24569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.707514][T26027] netlink: 'syz.1.8284': attribute type 3 has an invalid length. [ 341.769964][T26040] syz.2.8289[26040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.770101][T26040] syz.2.8289[26040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.799847][T26042] loop3: detected capacity change from 0 to 512 [ 341.821932][T26045] SELinux: failed to load policy [ 341.822506][T26042] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.854173][T26042] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.8291: corrupted in-inode xattr: invalid ea_ino [ 341.870585][T26042] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8291: couldn't read orphan inode 15 (err -117) [ 341.883375][T26042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.900118][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8297'. [ 341.944200][T20096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.209007][T26088] loop0: detected capacity change from 0 to 8192 [ 342.233173][T26086] ebtables: ebtables: counters copy to user failed while replacing table [ 342.320539][T26109] loop2: detected capacity change from 0 to 4096 [ 342.329605][T26109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.330647][ T11] nci: nci_rx_work: unknown MT 0x1 [ 342.377550][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.571185][T26150] siw: device registration error -23 [ 342.604870][T26154] usb usb8: usbfs: process 26154 (syz.1.8330) did not claim interface 0 before use [ 342.733280][T26185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8343'. [ 342.742331][T26185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8343'. [ 342.753687][T26185] netlink: 'syz.2.8343': attribute type 10 has an invalid length. [ 342.762282][T26185] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.769580][T26185] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.789716][T26185] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.796818][T26185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.804267][T26185] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.811370][T26185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.822960][T26185] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 342.934767][T26209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 342.941179][T26209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.386125][T26241] loop4: detected capacity change from 0 to 512 [ 343.392737][T26241] EXT4-fs: Ignoring removed bh option [ 343.402388][T26241] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.8368: invalid block [ 343.415667][T26241] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8368: couldn't read orphan inode 15 (err -117) [ 343.430586][T26241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.459540][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.088965][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888111cb0000: rx timeout, send abort [ 344.097325][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888111cb0800: rx timeout, send abort [ 344.105658][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888111cb0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 344.120048][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888111cb0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 344.139396][T26270] loop2: detected capacity change from 0 to 512 [ 344.149711][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 344.149737][ T29] audit: type=1400 audit(344.134:10568): avc: denied { nlmsg_write } for pid=26267 comm="syz.4.8378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 344.177829][T26270] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 344.187918][T26270] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 344.197902][T26270] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.8377: Failed to acquire dquot type 1 [ 344.210463][T26270] EXT4-fs (loop2): 1 truncate cleaned up [ 344.216488][T26270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.240403][ T29] audit: type=1400 audit(344.224:10569): avc: denied { ioctl } for pid=26275 comm="syz.4.8380" path="socket:[80155]" dev="sockfs" ino=80155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.243910][T26276] hsr0: entered promiscuous mode [ 344.270333][T26276] macsec1: entered promiscuous mode [ 344.275673][T26276] macsec1: entered allmulticast mode [ 344.280941][T26276] hsr0: entered allmulticast mode [ 344.286040][T26276] hsr_slave_0: entered allmulticast mode [ 344.291681][T26276] hsr_slave_1: entered allmulticast mode [ 344.299041][T26276] hsr0: left allmulticast mode [ 344.303861][T26276] hsr_slave_0: left allmulticast mode [ 344.309323][T26276] hsr_slave_1: left allmulticast mode [ 344.315087][T26270] loop2: detected capacity change from 512 to 0 [ 344.324697][T26279] syz.2.8377: attempt to access beyond end of device [ 344.324697][T26279] loop2: rw=524288, sector=280, nr_sectors = 8 limit=0 [ 344.340781][T26279] syz.2.8377: attempt to access beyond end of device [ 344.340781][T26279] loop2: rw=12288, sector=272, nr_sectors = 8 limit=0 [ 344.357656][T26279] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #4: block 34: comm syz.2.8377: unable to read itable block [ 344.364451][T26286] netlink: 'syz.1.8382': attribute type 4 has an invalid length. [ 344.370938][T26279] syz.2.8377: attempt to access beyond end of device [ 344.370938][T26279] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 344.378222][T26286] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8382'. [ 344.400573][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.409111][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.415961][T26279] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 344.427584][T26279] syz.2.8377: attempt to access beyond end of device [ 344.427584][T26279] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 344.440863][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.462797][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.469645][T26279] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #4: comm syz.2.8377: mark_inode_dirty error [ 344.483018][ T29] audit: type=1326 audit(344.464:10570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.4.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.490492][T26279] syz.2.8377: attempt to access beyond end of device [ 344.490492][T26279] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 344.506061][ T29] audit: type=1326 audit(344.464:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.4.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.506087][ T29] audit: type=1326 audit(344.464:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.4.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.506108][ T29] audit: type=1326 audit(344.464:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.4.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.519298][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.593003][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.620543][T26279] syz.2.8377: attempt to access beyond end of device [ 344.620543][T26279] loop2: rw=536576, sector=16, nr_sectors = 8 limit=0 [ 344.636200][T26302] bpf_get_probe_write_proto: 4 callbacks suppressed [ 344.636215][T26302] syz.1.8391[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.643086][T26302] syz.1.8391[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.670789][T26279] syz.2.8377: attempt to access beyond end of device [ 344.670789][T26279] loop2: rw=12288, sector=16, nr_sectors = 8 limit=0 [ 344.699823][T26279] EXT4-fs error (device loop2): ext4_wait_block_bitmap:584: comm syz.2.8377: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 344.714860][T26279] syz.2.8377: attempt to access beyond end of device [ 344.714860][T26279] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 344.728281][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.736694][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.742675][T26306] can0: slcan on ttyS3. [ 344.743473][T26279] syz.2.8377: attempt to access beyond end of device [ 344.743473][T26279] loop2: rw=12288, sector=16, nr_sectors = 8 limit=0 [ 344.766649][T26279] EXT4-fs error (device loop2): ext4_wait_block_bitmap:584: comm syz.2.8377: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 344.771036][ T29] audit: type=1326 audit(344.754:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.4.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.803750][ T29] audit: type=1326 audit(344.754:10575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26307 comm="syz.4.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31439def9 code=0x7ffc0000 [ 344.826714][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.826731][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.826764][T26279] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #4: block 34: comm syz.2.8377: unable to read itable block [ 344.860658][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.872355][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.879292][T26279] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 344.888102][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.896657][T26306] can0 (unregistered): slcan off ttyS3. [ 344.902254][T26306] Falling back ldisc for ttyS3. [ 344.907201][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.913995][T26279] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #4: comm syz.2.8377: mark_inode_dirty error [ 344.937000][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 344.947705][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 344.954635][T26279] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.8377: Error while async write back metadata [ 344.967681][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 345.003385][T26279] EXT4-fs (loop2): I/O error while writing superblock [ 345.010311][T26279] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.8377: Error while async write back metadata [ 345.023339][T26279] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 345.089739][T26351] syz.4.8405[26351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.089824][T26351] syz.4.8405[26351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.109233][T26354] syz.1.8406[26354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.120772][T26354] syz.1.8406[26354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.227538][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8416'. [ 345.391580][T26398] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8425'. [ 345.401915][T26399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 345.448406][T26404] loop4: detected capacity change from 0 to 128 [ 345.459643][T26404] vfat: Unknown parameter 'tsefdiscard' [ 345.514195][T26415] Process accounting resumed [ 345.643560][T26427] loop1: detected capacity change from 0 to 512 [ 345.651421][T26427] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8438: corrupted in-inode xattr: invalid ea_ino [ 345.665030][T26427] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8438: couldn't read orphan inode 15 (err -117) [ 345.677445][T26427] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.703647][T23048] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 345.709560][T26432] loop4: detected capacity change from 0 to 512 [ 345.725833][T26432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.754657][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.843624][T26456] loop1: detected capacity change from 0 to 4096 [ 345.850945][T26456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.859349][T26456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.886030][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.028196][T26472] loop1: detected capacity change from 0 to 1024 [ 346.034982][T26472] EXT4-fs: test_dummy_encryption option not supported [ 346.176443][T26492] tipc: Started in network mode [ 346.181343][T26492] tipc: Node identity ac1414aa, cluster identity 4711 [ 346.193794][T26494] loop4: detected capacity change from 0 to 1024 [ 346.194904][T26492] tipc: New replicast peer: 100.1.1.1 [ 346.205743][T26492] tipc: Enabled bearer , priority 10 [ 346.219976][T26494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.260230][T18659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.267531][T26500] ebtables: ebtables: counters copy to user failed while replacing table [ 346.281776][T26504] loop1: detected capacity change from 0 to 2048 [ 346.296179][T26504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.318754][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.534642][T26563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8480'. [ 346.749252][T26603] syz.0.8491[26603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.749304][T26603] syz.0.8491[26603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.862137][T26615] loop4: detected capacity change from 0 to 128 [ 346.876061][T26616] loop1: detected capacity change from 0 to 2048 [ 346.882474][T26615] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.905827][T26616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.928985][T26616] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 346.929339][T18659] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.946231][T26616] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 346.964964][T26616] EXT4-fs (loop1): This should not happen!! Data will be lost [ 346.964964][T26616] [ 346.974630][T26616] EXT4-fs (loop1): Total free blocks count 0 [ 346.980648][T26616] EXT4-fs (loop1): Free/Dirty block details [ 346.986579][T26616] EXT4-fs (loop1): free_blocks=2415919104 [ 346.992292][T26616] EXT4-fs (loop1): dirty_blocks=16 [ 346.997398][T26616] EXT4-fs (loop1): Block reservation details [ 347.003378][T26616] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 347.022458][T26616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.042156][T26625] loop4: detected capacity change from 0 to 128 [ 347.240448][T26654] loop2: detected capacity change from 0 to 512 [ 347.248952][T26654] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.256378][T26654] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8507: corrupted in-inode xattr: invalid ea_ino [ 347.272988][T26654] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8507: couldn't read orphan inode 15 (err -117) [ 347.282831][T26663] syz.1.8508[26663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.285312][T26663] syz.1.8508[26663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.288282][T26654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.324274][ T3329] tipc: Node number set to 2886997162 [ 347.337985][T26663] loop1: detected capacity change from 0 to 512 [ 347.363147][T26667] loop1: detected capacity change from 0 to 128 [ 347.370949][T26667] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.394424][T23048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.396529][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.429118][T26674] loop2: detected capacity change from 0 to 2048 [ 347.455853][T26674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.471175][T26674] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 347.485998][T26674] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 347.498168][T26674] EXT4-fs (loop2): This should not happen!! Data will be lost [ 347.498168][T26674] [ 347.507884][T26674] EXT4-fs (loop2): Total free blocks count 0 [ 347.513900][T26674] EXT4-fs (loop2): Free/Dirty block details [ 347.519808][T26674] EXT4-fs (loop2): free_blocks=2415919104 [ 347.525517][T26674] EXT4-fs (loop2): dirty_blocks=16 [ 347.530606][T26674] EXT4-fs (loop2): Block reservation details [ 347.536585][T26674] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 347.549490][T26674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.646459][T26693] loop1: detected capacity change from 0 to 512 [ 347.653001][T26693] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.661011][T26693] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8528: corrupted in-inode xattr: invalid ea_ino [ 347.674942][T26693] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8528: couldn't read orphan inode 15 (err -117) [ 347.687494][T26693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.723275][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.968016][T26710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8520'. [ 348.012975][T26720] loop2: detected capacity change from 0 to 512 [ 348.040223][T26720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.085195][T26730] loop1: detected capacity change from 0 to 4096 [ 348.095235][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.109770][T26730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.161794][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.675425][ T50] bridge_slave_1: left allmulticast mode [ 351.681094][ T50] bridge_slave_1: left promiscuous mode [ 351.686782][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.694573][ T50] bridge_slave_0: left allmulticast mode [ 351.700260][ T50] bridge_slave_0: left promiscuous mode [ 351.705983][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.713976][ T50] bridge_slave_1: left allmulticast mode [ 351.719658][ T50] bridge_slave_1: left promiscuous mode [ 351.725296][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.732916][ T50] bridge_slave_0: left allmulticast mode [ 351.738580][ T50] bridge_slave_0: left promiscuous mode [ 351.744218][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.947147][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.957344][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.967868][ T50] bond0 (unregistering): Released all slaves [ 351.977005][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.988663][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.998781][ T50] bond0 (unregistering): Released all slaves [ 352.161925][ T50] hsr_slave_0: left promiscuous mode [ 352.167546][ T50] hsr_slave_1: left promiscuous mode [ 352.173214][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.180851][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.188492][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.195975][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.205258][ T50] hsr_slave_0: left promiscuous mode [ 352.210813][ T50] hsr_slave_1: left promiscuous mode [ 352.216508][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.223900][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.231523][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.239044][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.250674][ T50] veth1_macvtap: left promiscuous mode [ 352.256313][ T50] veth0_macvtap: left promiscuous mode [ 352.261862][ T50] veth1_vlan: left promiscuous mode [ 352.267148][ T50] veth0_vlan: left promiscuous mode [ 352.273038][ T50] veth1_macvtap: left promiscuous mode [ 352.278510][ T50] veth0_macvtap: left promiscuous mode [ 352.284030][ T50] veth1_vlan: left promiscuous mode [ 352.289293][ T50] veth0_vlan: left promiscuous mode [ 352.410203][ T50] team0 (unregistering): Port device team_slave_1 removed [ 352.420689][ T50] team0 (unregistering): Port device team_slave_0 removed [ 352.482363][ T50] team0 (unregistering): Port device team_slave_1 removed [ 352.492194][ T50] team0 (unregistering): Port device team_slave_0 removed [ 353.442288][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 353.442302][ T29] audit: type=1400 audit(353.424:10744): avc: denied { mounton } for pid=26777 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 353.569806][T26777] chnl_net:caif_netlink_parms(): no params data found [ 353.605732][T26777] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.612850][T26777] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.620384][T26777] bridge_slave_0: entered allmulticast mode [ 353.626948][T26777] bridge_slave_0: entered promiscuous mode [ 353.633735][T26777] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.640823][T26777] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.647969][T26777] bridge_slave_1: entered allmulticast mode [ 353.654379][T26777] bridge_slave_1: entered promiscuous mode [ 353.673364][T26777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.684019][T26777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.703961][T26777] team0: Port device team_slave_0 added [ 353.710424][T26777] team0: Port device team_slave_1 added [ 353.728931][T26777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.735958][T26777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.762050][T26777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.773232][T26777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.780299][T26777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.806355][T26777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.832330][T26777] hsr_slave_0: entered promiscuous mode [ 353.838401][T26777] hsr_slave_1: entered promiscuous mode [ 353.894836][T26777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.916964][ T29] audit: type=1400 audit(353.904:10745): avc: denied { name_bind } for pid=27097 comm="syz.2.8544" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 353.919943][T27102] loop4: detected capacity change from 0 to 164 [ 353.937495][ T29] audit: type=1400 audit(353.904:10746): avc: denied { node_bind } for pid=27097 comm="syz.2.8544" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 353.968317][ T29] audit: type=1400 audit(353.954:10747): avc: denied { mount } for pid=27099 comm="syz.4.8545" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 353.994816][ T29] audit: type=1400 audit(353.984:10748): avc: denied { mounton } for pid=27099 comm="syz.4.8545" path="/560/file0/file0" dev="loop4" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 354.010818][T26777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.036997][ T29] audit: type=1400 audit(354.004:10749): avc: denied { mount } for pid=27099 comm="syz.4.8545" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 354.062449][ T29] audit: type=1400 audit(354.024:10750): avc: denied { unmount } for pid=18659 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 354.103647][T26777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.103933][T27116] loop1: detected capacity change from 0 to 512 [ 354.123292][T27116] EXT4-fs: Ignoring removed bh option [ 354.141041][T27116] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.8546: invalid block [ 354.157652][T27116] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8546: couldn't read orphan inode 15 (err -117) [ 354.173032][T27116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.182082][ T29] audit: type=1400 audit(354.164:10751): avc: denied { write } for pid=27127 comm="syz.0.8554" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 354.198067][T26777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.234187][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.256806][ T29] audit: type=1400 audit(354.244:10752): avc: denied { read } for pid=27136 comm="syz.0.8555" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 354.279694][ T29] audit: type=1400 audit(354.244:10753): avc: denied { open } for pid=27136 comm="syz.0.8555" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 354.348233][T26777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.376229][T26777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.381125][T27173] bpf_get_probe_write_proto: 2 callbacks suppressed [ 354.381141][T27173] syz.0.8563[27173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.389901][T27173] syz.0.8563[27173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.394891][T26777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.436149][T26777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.479877][T26777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.507220][T26777] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.517112][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8568'. [ 354.534794][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.541878][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.560315][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.567421][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.599855][T27194] loop1: detected capacity change from 0 to 1024 [ 354.606134][T26777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.616599][T26777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.636154][T27194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.697754][T26777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.733653][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.744177][T27208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 354.784949][T26777] veth0_vlan: entered promiscuous mode [ 354.796143][T26777] veth1_vlan: entered promiscuous mode [ 354.816518][T26777] veth0_macvtap: entered promiscuous mode [ 354.824705][T26777] veth1_macvtap: entered promiscuous mode [ 354.837292][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.847800][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.857705][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.868178][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.878079][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.888548][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.898428][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.908900][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.919073][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.929559][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.939573][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.950073][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.959949][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.970370][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.980169][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.990677][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.000530][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.010976][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.020794][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.031292][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.041125][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.045580][T27227] loop4: detected capacity change from 0 to 128 [ 355.051753][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.067891][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.078335][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.090013][T26777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.105504][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.116003][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.126047][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.136971][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.146967][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.157561][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.167376][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.177778][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.187638][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.198069][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.207932][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.218339][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.228153][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.238555][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.248347][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.258793][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.268682][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.279096][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.288904][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.299338][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.309165][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.319717][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.329565][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.339965][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.349868][T26777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.360358][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.372977][T26777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.381970][T26777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.390830][T26777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.399551][T26777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.408325][T26777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.445108][T27235] pim6reg1: entered promiscuous mode [ 355.450425][T27235] pim6reg1: entered allmulticast mode [ 355.649616][T27281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8601'. [ 355.685653][T27281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.781416][T27305] loop3: detected capacity change from 0 to 2048 [ 355.788163][T27305] EXT4-fs: Ignoring removed orlov option [ 355.790937][T27307] can0: slcan on ttyS3. [ 355.804722][T27281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.828405][T27305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.829558][T27310] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8612'. [ 355.848300][T27305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 355.864677][T27305] EXT4-fs (loop3): Remounting filesystem read-only [ 355.883277][T27304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.925777][T27281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.964406][T27307] can0 (unregistered): slcan off ttyS3. [ 355.970054][T27307] Falling back ldisc for ttyS3. [ 356.093790][T27281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.153782][T27281] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.165562][T27365] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.8618'. [ 356.169482][T27281] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.174948][T27365] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.8618'. [ 356.190721][T27281] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.220295][T27281] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.496866][T27412] syz.1.8634[27412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.496927][T27412] syz.1.8634[27412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.535493][T27416] loop1: detected capacity change from 0 to 2048 [ 356.553990][T27416] EXT4-fs: Ignoring removed orlov option [ 356.585681][T27416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.601113][T27416] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 356.616595][T27416] EXT4-fs (loop1): Remounting filesystem read-only [ 356.631971][T27416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.689146][T27435] loop4: detected capacity change from 0 to 128 [ 356.758809][T27451] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 356.834617][T27458] loop2: detected capacity change from 0 to 512 [ 356.847586][T27458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.871871][T25147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.923727][T27468] loop2: detected capacity change from 0 to 2048 [ 356.926100][T27472] loop1: detected capacity change from 0 to 512 [ 356.934506][T27468] EXT4-fs: Ignoring removed orlov option [ 356.946709][T27468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.948167][T27472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.965761][T27468] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 356.987195][T27472] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 356.987772][T27468] EXT4-fs (loop2): Remounting filesystem read-only [ 357.015327][T23048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.030054][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8654'. [ 357.064706][T27468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.190754][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8669'. [ 357.204102][T27508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.259294][T27508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.315624][T27508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.376051][T27508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.430959][T27508] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.442633][T27508] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.453673][T27508] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.466348][T27508] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.484689][T27533] loop2: detected capacity change from 0 to 2048 [ 357.495041][T27533] EXT4-fs: Ignoring removed orlov option [ 357.530648][T27533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.555142][T27533] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 357.570168][T27533] EXT4-fs (loop2): Remounting filesystem read-only [ 357.598790][T27533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.829150][T27567] bond1: entered promiscuous mode [ 357.834295][T27567] bond1: entered allmulticast mode [ 357.839565][T27567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.850494][T27567] bond1 (unregistering): Released all slaves [ 357.859443][ T11] ================================================================== [ 357.867512][ T11] BUG: KCSAN: data-race in alloc_pid / copy_process [ 357.874089][ T11] [ 357.876393][ T11] read-write to 0xffffffff8665d8f8 of 4 bytes by task 276 on cpu 0: [ 357.884382][ T11] alloc_pid+0x542/0x6f0 [ 357.888609][ T11] copy_process+0xff8/0x1f90 [ 357.893185][ T11] kernel_clone+0x167/0x5e0 [ 357.897677][ T11] user_mode_thread+0x7d/0xb0 [ 357.902340][ T11] call_usermodehelper_exec_work+0x41/0x150 [ 357.908225][ T11] process_scheduled_works+0x483/0x9a0 [ 357.913694][ T11] worker_thread+0x51d/0x6f0 [ 357.918276][ T11] kthread+0x1d1/0x210 [ 357.922329][ T11] ret_from_fork+0x4b/0x60 [ 357.926730][ T11] ret_from_fork_asm+0x1a/0x30 [ 357.931485][ T11] [ 357.933790][ T11] read to 0xffffffff8665d8f8 of 4 bytes by task 11 on cpu 1: [ 357.941138][ T11] copy_process+0x15e3/0x1f90 [ 357.945809][ T11] kernel_clone+0x167/0x5e0 [ 357.950297][ T11] user_mode_thread+0x7d/0xb0 [ 357.954962][ T11] call_usermodehelper_exec_work+0x41/0x150 [ 357.960845][ T11] process_scheduled_works+0x483/0x9a0 [ 357.966295][ T11] worker_thread+0x51d/0x6f0 [ 357.970885][ T11] kthread+0x1d1/0x210 [ 357.974936][ T11] ret_from_fork+0x4b/0x60 [ 357.979338][ T11] ret_from_fork_asm+0x1a/0x30 [ 357.984088][ T11] [ 357.986392][ T11] value changed: 0x80000103 -> 0x80000104 [ 357.992089][ T11] [ 357.994397][ T11] Reported by Kernel Concurrency Sanitizer on: [ 358.000536][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 358.011193][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 358.021231][ T11] Workqueue: events_unbound call_usermodehelper_exec_work [ 358.028334][ T11] ================================================================== [ 367.037674][ T28] team0: left allmulticast mode [ 367.042565][ T28] team_slave_0: left allmulticast mode [ 367.048117][ T28] team_slave_1: left allmulticast mode [ 367.053566][ T28] team0: left promiscuous mode [ 367.058330][ T28] team_slave_0: left promiscuous mode [ 367.063718][ T28] team_slave_1: left promiscuous mode [ 367.069264][ T28] bridge0: port 3(team0) entered disabled state [ 367.076948][ T28] bridge_slave_1: left allmulticast mode [ 367.082574][ T28] bridge_slave_1: left promiscuous mode [ 367.088271][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.095989][ T28] bridge_slave_0: left allmulticast mode [ 367.101608][ T28] bridge_slave_0: left promiscuous mode [ 367.107480][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.236921][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.247641][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.258125][ T28] bond0 (unregistering): Released all slaves [ 367.388496][ T28] hsr_slave_0: left promiscuous mode [ 367.394214][ T28] hsr_slave_1: left promiscuous mode [ 367.399943][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.407385][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.415551][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.423021][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.441412][ T28] veth1_macvtap: left promiscuous mode [ 367.446973][ T28] veth0_macvtap: left promiscuous mode [ 367.452489][ T28] veth1_vlan: left promiscuous mode [ 367.457705][ T28] veth0_vlan: left promiscuous mode [ 367.537248][ T28] team0 (unregistering): Port device team_slave_1 removed [ 367.547400][ T28] team0 (unregistering): Port device team_slave_0 removed