last executing test programs: 2.893862252s ago: executing program 1 (id=4257): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ee0004, &(0x7f0000000340)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@noblock_validity}, {@usrquota}, {@i_version}]}, 0x1, 0x450, &(0x7f0000000f00)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3, 0x1004, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20001f00) 2.767641083s ago: executing program 1 (id=4261): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 2.527556876s ago: executing program 1 (id=4268): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 2.390112109s ago: executing program 1 (id=4274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) 2.282673229s ago: executing program 2 (id=4275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.280625209s ago: executing program 0 (id=4279): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) 2.204246826s ago: executing program 2 (id=4292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 2.102993735s ago: executing program 0 (id=4283): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.870200637s ago: executing program 0 (id=4286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 1.853428769s ago: executing program 2 (id=4287): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r0, r0) write$tun(r2, 0x0, 0x46) 1.782187775s ago: executing program 0 (id=4289): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.748272758s ago: executing program 2 (id=4301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 1.712082822s ago: executing program 0 (id=4291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pause() 1.684659524s ago: executing program 2 (id=4295): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@errors_remount}, {@user_xattr}, {@errors_remount}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x45c, &(0x7f0000000900)="$eJzs289vFFUcAPDvzLZFfrYi/gBRq8TY+KOlBZWDF40mHjCa6AGPtS2EsFBDayKESDUGLyaGRM/Go4l/gTcvRj2ZeNW7ISHKBfRUM7MzsF12C0u3u5X9fJKB93be7nvfvnkzb+btBtC3RrN/kohtEfF7RAzXsisLjNb+u3bl3Mw/V87NJLG8/PZfSV7u6pVzM2XR8n1bi8xYGpF+mhSVrLRw5uyJ6Wp17nSRn1g8+f7Ewpmzzx0/OX1s7tjcqalDhw4emHzxhann1xLe5jKRxXV1z0fze3e//u7FN2aOXHzv5++y9m4r9tfH0SmjWeB/L+ca9z3Z6cp6bHtdOhnoYUNoSyUisu4azMf/cFTiRucNx2uf9LRxwLrKrk2bWu9eWgbuYkn0ugVAb5QX+uz+t9y6NPXYEC6/XLsByuK+Vmy1PQORFmUGG+5vO2k0Io4s/ft1tsU6PYcAAKj3+cxXh+PZZvO/NB6oK7ejWEMZiYh7I2JnRNwXEbsi4v6IvOyDEfFQm/U3Lg3dPP9JL91RYLcpm/+9VKxtrZz/lbO/GKkUue15/IPJ0ePVuf3F32QsBjdl+clV6vjh1d++aLWvfv6XbVn95VywaMelgYYHdLPTi9P5pLQDLn8csWegWfzJ9ZWAJCJ2R8Se9j56R5k4/vS3e1sVunX8q+jAOtPyNxFP1fp/KRriLyWrr09O3BPVuf0T5VFxs19+vfBWq/rXFH8HZP2/ZeXx31hkJKlfr11ov44Lf3zW8p7mTo//oeSd/Hw0VLz24fTi4unJiKHkcJ5f8frUjfeW+bJ8Fv/Yvubjf2fxniz+hyMiO4gfiYhHI+Kxou2PR8QTEbFvlfh/eqX1vo3Q/7NNz3/Xj/+G/m8vsTmmq5UTP37fqv7b6/+DeWqseCU//93C7TZwLX87AAAA+L9I8+/AJ+n49XSajo/XvsO/K7ak1fmFxWeOzn9warb2XfmRGEzLJ13Ddc9DJ5Ol4hNr+aniWXG5/0Dx3PjLyuY8Pz4zX53tcezQ77a2GP+ZPyu9bh2w7pqto00N9aAhQNc1jv90Zfb8m91sDNBVfq8N/esW4z/tVjuA7nP9h/7VbPyfb8hbC4C7k+s/9C/jH/qX8Q/9y/iHvnSnv+uXWGOi7ICN0p62E5H2oNJNsSFi3/iJypo/p7fnJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//+I1elg") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="02000000040000000900000002000000001000008cec5b5e376891dfc66e4b5e6353460c6112d71acebb203ee151f57c12a32b2300b5dfa731b726abcecd2e25168ea3be2f5dbdf59245fa9e598125a37ac3340a7836cf7767d4d142a838f671188ddf2db1e361a694318f92e4f045721217066f8ce732d4946767b616089781c3d595753a7833b96d1d90217403df94c08ee766db53c7173ed993662f5bfadee362f7204f27987c1066f582f557b803bde796d797489ceffd4217812b895cf90628048c2e212f3f", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES32, @ANYRES8], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x74, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x66}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x240080c5}, 0x8810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 1.437123877s ago: executing program 2 (id=4297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="24d41ef2502c6b8d356d236c0800", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 1.306145409s ago: executing program 3 (id=4300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5477, 0x200000a, 0xffffffdb, 0x0, 0x2}) 1.232818986s ago: executing program 3 (id=4303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 1.0801896s ago: executing program 3 (id=4304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.014425796s ago: executing program 4 (id=4306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000a8dd0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x80002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 948.780783ms ago: executing program 3 (id=4307): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 941.806983ms ago: executing program 4 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 638.740701ms ago: executing program 4 (id=4309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 638.114381ms ago: executing program 0 (id=4318): unshare(0x68040200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) 534.070531ms ago: executing program 3 (id=4310): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 482.191916ms ago: executing program 4 (id=4311): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'wrr\x00', 0x1}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 347.206878ms ago: executing program 4 (id=4312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa0028000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 275.242035ms ago: executing program 3 (id=4313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 203.854741ms ago: executing program 4 (id=4314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1080406, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r2], 0x48}}, 0x0) 111.64257ms ago: executing program 1 (id=4315): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4316): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) munlock(&(0x7f0000381000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x1) munlockall() kernel console output (not intermixed with test programs): _slave_0 [ 254.448274][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.474347][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.541454][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.548513][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.574508][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.654692][T12612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.735647][T12618] hsr_slave_0: entered promiscuous mode [ 254.761518][T12618] hsr_slave_1: entered promiscuous mode [ 254.767568][T12618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.780886][T12618] Cannot create hsr debugfs directory [ 254.806828][T12617] hsr_slave_0: entered promiscuous mode [ 254.821634][T12617] hsr_slave_1: entered promiscuous mode [ 254.828942][T12617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.836520][T12617] Cannot create hsr debugfs directory [ 254.854483][T12612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.934791][T12612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.041715][T12612] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.190546][T12612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.217378][T12612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.244599][T12612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.261459][T12612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.386249][T12612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.417701][T12612] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.456300][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.463616][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.502754][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.509896][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.546408][T12620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.561668][T12612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.572383][T12612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.626551][T12620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.636230][T12620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.661514][T12620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.735931][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.862387][T12617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.892623][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.932176][T12617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.951765][T12617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.968101][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.993058][T12617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.066853][T12612] veth0_vlan: entered promiscuous mode [ 256.094630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.101789][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.120217][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.127401][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.173838][T12612] veth1_vlan: entered promiscuous mode [ 256.245393][T12612] veth0_macvtap: entered promiscuous mode [ 256.276211][T12612] veth1_macvtap: entered promiscuous mode [ 256.329811][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.340335][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.350307][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.360760][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.370653][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.381220][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.391117][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.401555][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.411449][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.421982][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.431921][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.442362][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.452174][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.462699][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.641983][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.658570][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.682335][T12618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.697888][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.708502][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.718426][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.728980][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.739320][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.750280][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.760102][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.770886][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.780805][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.791488][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.801431][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.811910][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.821788][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.832322][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.019842][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.031349][T12618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.045631][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.071246][T12618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.086284][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.121830][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.128985][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.140853][T12618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.173497][T12612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.182423][T12612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.191267][T12612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.200053][T12612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.255105][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.262345][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.295501][T12617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.306054][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.585379][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.606998][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.686992][T12620] veth0_vlan: entered promiscuous mode [ 257.702720][T12618] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.724586][T12620] veth1_vlan: entered promiscuous mode [ 257.782236][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.789729][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.799413][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.806593][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.844070][T12618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.854543][T12618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.895703][T12620] veth0_macvtap: entered promiscuous mode [ 257.896100][T12729] loop4: detected capacity change from 0 to 8192 [ 257.907318][T12620] veth1_macvtap: entered promiscuous mode [ 257.914573][T12729] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.946246][T12617] veth0_vlan: entered promiscuous mode [ 257.967095][T12617] veth1_vlan: entered promiscuous mode [ 257.982483][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.993024][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.002886][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.013449][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.023419][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.034291][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.044158][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.054672][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.064526][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.075038][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.084883][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.095621][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.105471][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.115919][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.125755][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.136434][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.148851][T12620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.158884][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.169982][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.179964][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.190507][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.200456][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.210951][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.220786][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.231293][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.241156][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.251604][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.261656][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.272112][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.282912][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.294912][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.304934][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.315477][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.327508][T12620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.370231][T12620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.379034][T12620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.388063][T12620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.396925][T12620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.438771][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.475015][T12617] veth0_macvtap: entered promiscuous mode [ 258.522716][T12617] veth1_macvtap: entered promiscuous mode [ 258.577047][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.587605][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.597457][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.607894][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.617726][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.628216][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.638145][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.648587][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.658568][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.669217][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.679119][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.689596][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.699611][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.710065][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.719896][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.730581][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.740607][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.751771][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.763817][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.799412][ T29] audit: type=1400 audit(258.784:3718): avc: denied { mount } for pid=12751 comm="syz.0.3365" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 258.836985][T12756] gre0 speed is unknown, defaulting to 1000 [ 258.872514][T12756] lo speed is unknown, defaulting to 1000 [ 258.909960][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.912944][ T29] audit: type=1400 audit(258.904:3719): avc: denied { unmount } for pid=12612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 258.920438][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.920453][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.960312][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.970178][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.980628][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.990725][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.001261][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.011319][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.021832][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.031729][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.042326][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.052250][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.062742][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.072309][T12759] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.072574][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.084920][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.090295][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.090310][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.090326][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.092421][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.097972][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.109391][T12617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.118219][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.127763][T12617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.135209][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.142249][T12617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.150935][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 259.158198][T12617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.282319][T12764] netlink: 'syz.2.3354': attribute type 4 has an invalid length. [ 259.297552][T12618] veth0_vlan: entered promiscuous mode [ 259.328762][T12618] veth1_vlan: entered promiscuous mode [ 259.414725][T12618] veth0_macvtap: entered promiscuous mode [ 259.450433][T12618] veth1_macvtap: entered promiscuous mode [ 259.462074][ T29] audit: type=1326 audit(259.454:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.485229][ T29] audit: type=1326 audit(259.454:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.548615][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.559253][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.569178][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.579695][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.589733][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.600354][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.610206][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.620445][ T29] audit: type=1326 audit(259.504:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.620641][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.643457][ T29] audit: type=1326 audit(259.504:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.653259][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.676074][ T29] audit: type=1326 audit(259.504:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.676102][ T29] audit: type=1326 audit(259.514:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.676129][ T29] audit: type=1326 audit(259.514:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.686534][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.709386][ T29] audit: type=1326 audit(259.514:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 259.732240][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.798565][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.808483][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.818955][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.828971][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.839431][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.849278][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.859929][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.869847][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.880309][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.895306][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.904112][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.914707][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.924563][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.935060][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.944939][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.955387][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.965300][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.975858][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.985691][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.996459][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.006441][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.016981][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.027024][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.037653][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.047552][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.057985][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.067843][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.078472][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.088365][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.098804][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.111569][T12787] syz.1.3371[12787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.111627][T12787] syz.1.3371[12787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.114378][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.142871][T12787] syz.1.3371[12787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.164048][T12618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.184521][T12618] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.193370][T12618] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.202133][T12618] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.350265][T12798] loop1: detected capacity change from 0 to 512 [ 260.470344][T12798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.602514][T12798] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 260.615880][T12817] netlink: 'syz.3.3381': attribute type 3 has an invalid length. [ 260.670275][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.705033][T12824] netlink: 566 bytes leftover after parsing attributes in process `syz.3.3384'. [ 260.829345][T12835] loop1: detected capacity change from 0 to 2048 [ 260.859969][T12835] EXT4-fs (loop1): failed to initialize system zone (-117) [ 260.878772][T12835] EXT4-fs (loop1): mount failed [ 260.961856][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 261.578260][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.585514][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.624623][T12895] 9pnet_fd: Insufficient options for proto=fd [ 261.636461][T12896] bridge_slave_1: left allmulticast mode [ 261.642456][T12896] bridge_slave_1: left promiscuous mode [ 261.648133][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.686742][T12896] bridge_slave_0: left allmulticast mode [ 261.692546][T12896] bridge_slave_0: left promiscuous mode [ 261.698302][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.947739][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 261.962258][T12925] hub 9-0:1.0: USB hub found [ 262.007247][T12925] hub 9-0:1.0: 8 ports detected [ 262.043118][T12932] loop3: detected capacity change from 0 to 512 [ 262.048166][T12933] loop4: detected capacity change from 0 to 512 [ 262.074890][T12933] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.086563][T12933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.117558][T12932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.188651][T12933] EXT4-fs (loop4): 1 truncate cleaned up [ 262.194918][T12933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.253388][T12618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.331638][T12955] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3441'. [ 262.346519][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.668680][T12981] loop3: detected capacity change from 0 to 512 [ 262.676658][T12981] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.686901][T12981] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3454: corrupted in-inode xattr: invalid ea_ino [ 262.723963][T12981] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.3454: couldn't read orphan inode 15 (err -117) [ 262.763010][T12981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.901462][T12618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.926902][T12991] loop4: detected capacity change from 0 to 512 [ 262.954245][T12991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.009989][T13001] rdma_op ffff8881143e0580 conn xmit_rdma 0000000000000000 [ 263.017613][T13000] syz.3.3462[13000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.017680][T13000] syz.3.3462[13000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.040150][T12991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.084243][T13000] syz.3.3462[13000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.149433][T12991] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 263.173789][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 263.194678][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 263.242303][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.462676][T13045] syz.4.3483[13045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.462738][T13045] syz.4.3483[13045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.487913][T13045] syz.4.3483[13045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.999175][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 263.999189][ T29] audit: type=1400 audit(263.984:3858): avc: denied { map } for pid=13055 comm="syz.3.3488" path="socket:[40528]" dev="sockfs" ino=40528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.039603][ T29] audit: type=1400 audit(263.984:3859): avc: denied { read } for pid=13055 comm="syz.3.3488" path="socket:[40528]" dev="sockfs" ino=40528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.166212][T13061] gre0 speed is unknown, defaulting to 1000 [ 264.223171][T13072] loop3: detected capacity change from 0 to 512 [ 264.239621][T13072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.258151][T13061] lo speed is unknown, defaulting to 1000 [ 264.264429][T13072] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 264.272458][T13072] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 264.311648][T13072] System zones: 0-1, 15-15, 18-18, 34-34 [ 264.332193][T13072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.380850][T13072] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 264.424332][T13072] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 264.478930][T13072] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 264.497492][T13072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3495: bg 0: block 40: padding at end of block bitmap is not set [ 264.517280][T13085] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.539019][T13072] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 264.588288][T13072] EXT4-fs (loop3): 1 truncate cleaned up [ 264.596576][T13072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.609121][ T29] audit: type=1400 audit(264.594:3860): avc: denied { listen } for pid=13087 comm="syz.1.3502" lport=52220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.632042][ T29] audit: type=1400 audit(264.594:3861): avc: denied { accept } for pid=13087 comm="syz.1.3502" lport=52220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.655377][ T29] audit: type=1400 audit(264.594:3862): avc: denied { write } for pid=13087 comm="syz.1.3502" lport=52220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 264.713753][T13072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.731441][ T29] audit: type=1400 audit(264.624:3863): avc: denied { setopt } for pid=13087 comm="syz.1.3502" lport=52220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 264.792173][ T29] audit: type=1326 audit(264.784:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 264.797602][T13095] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 264.828880][ T29] audit: type=1326 audit(264.784:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 264.851845][ T29] audit: type=1326 audit(264.784:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd46a39c890 code=0x7ffc0000 [ 264.962399][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3508'. [ 265.201852][T13124] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3517'. [ 265.226464][T13124] 0ªX¹¦À: renamed from caif0 [ 265.242802][T13124] 0ªX¹¦À: entered allmulticast mode [ 265.248113][T13124] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 265.251911][T13126] loop1: detected capacity change from 0 to 1024 [ 265.634336][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3530'. [ 265.643541][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3530'. [ 265.661493][T13153] bond_slave_0: entered promiscuous mode [ 265.680666][T13153] bond_slave_0: left promiscuous mode [ 265.723554][T13158] loop2: detected capacity change from 0 to 512 [ 265.748732][T13158] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3532: bg 0: block 5: invalid block bitmap [ 265.784825][T13158] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 265.806101][T13165] syz.1.3534[13165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.806185][T13165] syz.1.3534[13165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.827916][T13158] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3532: invalid indirect mapped block 3 (level 2) [ 265.857954][T13165] syz.1.3534[13165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.909177][T13158] EXT4-fs (loop2): 1 orphan inode deleted [ 265.926399][T13158] EXT4-fs (loop2): 1 truncate cleaned up [ 265.951276][T13158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.061400][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.764509][T13236] loop4: detected capacity change from 0 to 512 [ 267.222408][T13265] loop1: detected capacity change from 0 to 256 [ 267.248969][T13265] msdos: Bad value for 'uid' [ 267.253588][T13265] msdos: Bad value for 'uid' [ 267.316081][T13273] loop2: detected capacity change from 0 to 512 [ 267.335652][T13277] loop1: detected capacity change from 0 to 512 [ 267.343154][T13273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.357111][T13277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.388119][T13277] EXT4-fs (loop1): 1 truncate cleaned up [ 267.392178][T13276] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 267.404554][T13277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.477617][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.552701][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.619948][T13290] gre0 speed is unknown, defaulting to 1000 [ 267.625280][T13295] loop4: detected capacity change from 0 to 512 [ 267.644438][T13299] syz.3.3595[13299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.644499][T13299] syz.3.3595[13299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.679254][T13295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.703324][T13299] syz.3.3595[13299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.754395][T13290] lo speed is unknown, defaulting to 1000 [ 267.823717][T13308] loop1: detected capacity change from 0 to 512 [ 267.835529][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.876112][T13308] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3598: Parent and EA inode have the same ino 15 [ 267.935471][T13308] EXT4-fs (loop1): Remounting filesystem read-only [ 267.946523][T13308] EXT4-fs (loop1): 1 orphan inode deleted [ 267.985973][T13308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.011708][T13308] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 268.018893][T13308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.053545][T13321] loop4: detected capacity change from 0 to 256 [ 268.096074][T13321] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.122045][T13327] loop2: detected capacity change from 0 to 1024 [ 268.141019][T13327] EXT4-fs: Ignoring removed orlov option [ 268.146761][T13327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.223056][T13332] loop3: detected capacity change from 0 to 2048 [ 268.239787][T13332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.240589][T13327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.268441][T13338] syz.1.3609[13338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.268517][T13338] syz.1.3609[13338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.305760][T13338] syz.1.3609[13338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.321182][T13332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.359712][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.403726][T13348] loop2: detected capacity change from 0 to 512 [ 268.428800][T13332] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.3610: Abort forced by user [ 268.475056][T13332] EXT4-fs (loop3): Remounting filesystem read-only [ 268.501807][T13348] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3614: Invalid inode bitmap blk 4 in block_group 0 [ 268.537601][T12618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.565716][T13348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.642184][T13355] loop1: detected capacity change from 0 to 8192 [ 268.689107][T13361] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 268.702610][T13360] IPVS: stopping backup sync thread 13361 ... [ 268.739249][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.775481][T13363] No such timeout policy "syz0" [ 268.809118][T13366] loop2: detected capacity change from 0 to 256 [ 268.845721][T13366] msdos: Bad value for 'time_offset' [ 269.052966][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 269.052981][ T29] audit: type=1326 audit(269.044:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13383 comm="syz.4.3631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x0 [ 269.192821][ T29] audit: type=1326 audit(269.184:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 269.215909][ T29] audit: type=1326 audit(269.184:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 269.239322][T13402] vhci_hcd: invalid port number 157 [ 269.244565][T13402] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 269.311160][ T29] audit: type=1326 audit(269.184:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 269.334569][ T29] audit: type=1326 audit(269.184:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 269.357638][ T29] audit: type=1326 audit(269.184:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46a39def9 code=0x7ffc0000 [ 269.407095][T13410] gre0 speed is unknown, defaulting to 1000 [ 269.475456][ T29] audit: type=1326 audit(269.384:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 269.478457][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 269.498807][ T29] audit: type=1326 audit(269.384:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 269.531206][ T29] audit: type=1326 audit(269.384:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 269.552947][T13417] erspan0: entered promiscuous mode [ 269.554241][ T29] audit: type=1326 audit(269.384:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x7ffc0000 [ 269.572072][T13417] macvtap1: entered promiscuous mode [ 269.588266][T13417] macvtap1: entered allmulticast mode [ 269.593864][T13417] erspan0: entered allmulticast mode [ 269.682321][T13418] erspan0: left allmulticast mode [ 269.687468][T13418] erspan0: left promiscuous mode [ 269.690122][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 269.727265][T13410] lo speed is unknown, defaulting to 1000 [ 269.765368][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 269.816924][T13425] bond1: entered promiscuous mode [ 269.822075][T13425] bond1: entered allmulticast mode [ 269.861562][T13425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.063783][T13439] loop1: detected capacity change from 0 to 1024 [ 270.118924][T13439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.154911][T13442] veth2: entered allmulticast mode [ 270.248417][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.382437][T13481] loop3: detected capacity change from 0 to 128 [ 270.630205][T13509] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 270.766451][T13529] €: renamed from bond0 (while UP) [ 270.934009][T13564] loop3: detected capacity change from 0 to 512 [ 270.951783][T13567] loop4: detected capacity change from 0 to 512 [ 270.968594][T13567] EXT4-fs: Ignoring removed oldalloc option [ 270.987867][T13575] can0: slcan on ttyS3. [ 270.995537][T13567] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 270.998172][T13564] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3692: bg 0: block 248: padding at end of block bitmap is not set [ 271.009107][T13567] EXT4-fs (loop4): Remounting filesystem read-only [ 271.028383][T13567] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 271.039124][T13567] EXT4-fs (loop4): 1 orphan inode deleted [ 271.045552][T13567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.051972][T13564] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.3692: Failed to acquire dquot type 1 [ 271.060140][T13567] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 271.099268][T13567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.148853][T13564] EXT4-fs (loop3): 1 truncate cleaned up [ 271.155003][T13564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.170218][T13575] can0 (unregistered): slcan off ttyS3. [ 271.175890][T13575] Falling back ldisc for ttyS3. [ 271.221675][T12618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.334915][T13609] syz.4.3705[13609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.335065][T13609] syz.4.3705[13609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.387397][T13609] syz.4.3705[13609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.542872][T13634] sctp: [Deprecated]: syz.4.3711 (pid 13634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.542872][T13634] Use struct sctp_sack_info instead [ 271.588603][T13625] loop0: detected capacity change from 0 to 8192 [ 271.610981][T13641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1282 sclass=netlink_audit_socket pid=13641 comm=syz.2.3717 [ 271.654400][T13633] loop1: detected capacity change from 0 to 8192 [ 271.797371][T13657] loop2: detected capacity change from 0 to 2048 [ 271.851752][T13657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.893803][T13657] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 271.933639][T13671] loop0: detected capacity change from 0 to 512 [ 271.944211][T13657] EXT4-fs (loop2): Remounting filesystem read-only [ 271.964299][T13673] netlink: set zone limit has 8 unknown bytes [ 271.983211][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.003672][T13671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.066813][T13671] Process accounting resumed [ 272.095872][T13671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 272.114576][ T3343] IPVS: starting estimator thread 0... [ 272.121372][T13684] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 272.152205][T12612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.208927][T13686] IPVS: using max 2400 ests per chain, 120000 per kthread [ 272.329697][T13703] gre0 speed is unknown, defaulting to 1000 [ 272.335704][T13704] netlink: 'syz.0.3740': attribute type 3 has an invalid length. [ 272.351517][T13711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.392310][T13715] loop1: detected capacity change from 0 to 512 [ 272.405106][T13711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.422269][T13715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.443254][T13703] lo speed is unknown, defaulting to 1000 [ 272.447206][T13715] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.541647][T13711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.617634][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.634498][T13711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.943107][T13711] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.091694][T13711] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.352054][T13711] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.482441][T13711] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.250337][T13789] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 276.259000][T13789] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.269922][T13792] geneve0: entered promiscuous mode [ 276.291611][T13790] loop0: detected capacity change from 0 to 2048 [ 276.384394][T13790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.431260][T13804] syz.3.3762[13804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.431329][T13804] syz.3.3762[13804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.446270][T13805] syz.4.3761[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.513228][T13804] syz.3.3762[13804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.526850][T13805] syz.4.3761[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.557150][T13808] loop2: detected capacity change from 0 to 512 [ 276.589047][T13805] syz.4.3761[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.601554][T13808] EXT4-fs: Ignoring removed bh option [ 276.651112][T13808] EXT4-fs: inline encryption not supported [ 276.654914][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 276.654932][ T29] audit: type=1400 audit(2000000004.450:4217): avc: denied { accept } for pid=13810 comm="syz.1.3764" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.706441][T13808] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.3763: corrupted in-inode xattr: invalid ea_ino [ 276.721979][T12612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.755104][T13808] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3763: couldn't read orphan inode 12 (err -117) [ 276.768773][ T29] audit: type=1400 audit(2000000004.490:4218): avc: denied { write } for pid=13810 comm="syz.1.3764" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=57816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.826140][T13808] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.854432][T13816] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.863219][T13816] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.872096][T13816] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.880903][T13816] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.901208][T13820] loop4: detected capacity change from 0 to 512 [ 276.919070][T13816] vxlan0: entered promiscuous mode [ 276.924239][T13816] vxlan0: entered allmulticast mode [ 276.970457][T13816] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.979505][T13816] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.988371][T13816] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.997268][T13816] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.010909][T13820] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3768: corrupted in-inode xattr: invalid ea_ino [ 277.077956][T13820] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.3768: couldn't read orphan inode 15 (err -117) [ 277.112895][T13820] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.126226][T13829] tap0: tun_chr_ioctl cmd 1074025692 [ 277.171975][ T29] audit: type=1400 audit(2000000004.970:4219): avc: denied { load_policy } for pid=13838 comm="syz.1.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 277.198753][T13839] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 277.223413][T12620] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 277.237028][T13839] SELinux: failed to load policy [ 277.300382][ T29] audit: type=1326 audit(2000000005.100:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.359032][ T29] audit: type=1326 audit(2000000005.100:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.382627][ T29] audit: type=1326 audit(2000000005.100:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.406233][ T29] audit: type=1326 audit(2000000005.100:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.429887][ T29] audit: type=1326 audit(2000000005.100:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.453482][ T29] audit: type=1326 audit(2000000005.100:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.477008][ T29] audit: type=1326 audit(2000000005.100:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.0.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b188edef9 code=0x7ffc0000 [ 277.565296][T10508] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 277.743059][T13872] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 277.800479][T13876] syz.2.3784[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.800593][T13876] syz.2.3784[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.828842][T13876] syz.2.3784[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.848851][T13878] program syz.1.3785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.891033][T13878] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.944410][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 277.952167][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 277.969115][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 277.977095][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 277.985842][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 277.993689][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.001506][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.009643][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.017678][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.025439][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.033190][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.040887][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.048605][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.056381][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.064084][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.071850][ T3343] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 278.142587][ T3343] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 278.401399][T13914] loop2: detected capacity change from 0 to 512 [ 278.442737][T13914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.477277][T13914] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.548288][T13914] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3797: corrupted inode contents [ 278.591188][T13914] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.3797: mark_inode_dirty error [ 278.641362][T13914] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3797: corrupted inode contents [ 278.689834][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.827033][T13952] loop4: detected capacity change from 0 to 128 [ 278.848844][T13958] IPVS: Error joining to the multicast group [ 279.001092][T13979] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3817'. [ 279.062951][T13985] netlink: 'syz.4.3819': attribute type 3 has an invalid length. [ 279.095904][T13988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3821'. [ 279.104986][T13988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3821'. [ 279.119008][T13991] syz.1.3822[13991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.147051][T13995] sd 0:0:1:0: device reset [ 279.188404][T13988] netlink: 'syz.2.3821': attribute type 10 has an invalid length. [ 279.219458][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.226835][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.243353][T14001] loop1: detected capacity change from 0 to 1024 [ 279.257511][T13988] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.264716][T13988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.272217][T13988] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.279324][T13988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.297092][T14001] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 279.331421][T14001] loop1: detected capacity change from 0 to 512 [ 279.340100][T13988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 279.361394][T14001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.396543][T14001] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.466422][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.979627][T14054] loop1: detected capacity change from 0 to 512 [ 280.020578][T14054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.071043][T14054] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.169121][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.455495][T14079] 9pnet: Could not find request transport: 0xffffffffffffffff [ 281.502351][T14141] loop2: detected capacity change from 0 to 128 [ 281.554069][T14141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.588266][T14141] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.702426][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 281.702444][ T29] audit: type=1400 audit(2000000009.500:4284): avc: denied { create } for pid=14131 comm="syz.2.3862" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.802063][T12620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.886882][ T29] audit: type=1400 audit(2000000009.550:4285): avc: denied { rmdir } for pid=14131 comm="syz.2.3862" name="file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.909201][ T29] audit: type=1400 audit(2000000009.670:4286): avc: denied { write } for pid=14157 comm="syz.2.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.978740][T14160] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.249288][ T29] audit: type=1400 audit(2000000010.050:4287): avc: denied { accept } for pid=14174 comm="syz.1.3874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.559086][ T29] audit: type=1326 audit(2000000010.360:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.634636][ T29] audit: type=1326 audit(2000000010.390:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.658348][ T29] audit: type=1326 audit(2000000010.390:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.682005][ T29] audit: type=1326 audit(2000000010.390:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.705485][ T29] audit: type=1326 audit(2000000010.390:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.729160][ T29] audit: type=1326 audit(2000000010.390:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.2.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 282.832630][T14197] tipc: Started in network mode [ 282.837632][T14197] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 282.844883][T14197] tipc: Enabled bearer , priority 0 [ 282.988250][T14204] team_slave_1: mtu greater than device maximum [ 282.994713][T14204] team0: Device team_slave_1 failed to change mtu [ 283.405435][T14220] loop4: detected capacity change from 0 to 512 [ 283.478826][T14220] EXT4-fs (loop4): orphan cleanup on readonly fs [ 283.510950][T14220] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 283.578408][T14220] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 283.610069][T14220] EXT4-fs (loop4): 1 truncate cleaned up [ 283.635574][T14220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.720576][T14220] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 283.820696][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.978752][ T3343] tipc: Node number set to 11578026 [ 284.524601][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3899'. [ 285.313863][T14252] futex_wake_op: syz.4.3903 tries to shift op by -1; fix this program [ 286.082321][T14279] bpf_get_probe_write_proto: 5 callbacks suppressed [ 286.082403][T14279] syz.2.3911[14279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.098947][T14279] syz.2.3911[14279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.119879][T14281] syz.4.3912[14281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.134521][T14279] syz.2.3911[14279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.170143][T14281] syz.4.3912[14281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.208763][T14285] program syz.4.3912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.272178][T14281] syz.4.3912[14281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.341807][T14288] loop4: detected capacity change from 0 to 128 [ 286.604496][T14297] syz.1.3918[14297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.604642][T14297] syz.1.3918[14297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.668909][T14297] syz.1.3918[14297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.719683][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3918'. [ 286.809794][ T2101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.875588][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3918'. [ 286.922924][ T2101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.998608][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3918'. [ 287.032632][ T2101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.088437][T14298] gre0 speed is unknown, defaulting to 1000 [ 287.139201][ T2101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.264419][T14298] lo speed is unknown, defaulting to 1000 [ 287.284219][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 287.284245][ T29] audit: type=1400 audit(2000000015.080:4324): avc: denied { lock } for pid=14317 comm="syz.1.3921" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.359778][ T2101] bridge_slave_1: left allmulticast mode [ 287.365538][ T2101] bridge_slave_1: left promiscuous mode [ 287.371370][ T2101] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.399789][ T2101] bridge_slave_0: left allmulticast mode [ 287.405649][ T2101] bridge_slave_0: left promiscuous mode [ 287.411486][ T2101] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.419216][T14316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.458840][T14316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.684477][ T2101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.704269][ T2101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.738174][ T2101] bond0 (unregistering): Released all slaves [ 288.060716][ T2101] hsr_slave_0: left promiscuous mode [ 288.108753][ T2101] hsr_slave_1: left promiscuous mode [ 288.126174][ T2101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.134065][ T2101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.169458][ T2101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.176993][ T2101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.285049][ T2101] veth1_macvtap: left promiscuous mode [ 288.290620][ T2101] veth0_macvtap: left promiscuous mode [ 288.296249][ T2101] veth1_vlan: left promiscuous mode [ 288.301776][ T2101] veth0_vlan: left promiscuous mode [ 288.365170][ T29] audit: type=1400 audit(2000000016.160:4325): avc: denied { map } for pid=14455 comm="syz.4.3930" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 288.392776][ T29] audit: type=1400 audit(2000000016.160:4326): avc: denied { execute } for pid=14455 comm="syz.4.3930" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 288.811728][ T2101] team0 (unregistering): Port device team_slave_1 removed [ 288.835527][ T2101] team0 (unregistering): Port device team_slave_0 removed [ 289.091203][T14298] chnl_net:caif_netlink_parms(): no params data found [ 289.169536][T14484] loop2: detected capacity change from 0 to 164 [ 289.287173][T14484] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 289.306439][T14484] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 289.387630][T14298] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.394934][T14298] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.414245][ T29] audit: type=1400 audit(2000000017.210:4327): avc: denied { write } for pid=14541 comm="syz.2.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.451450][T14298] bridge_slave_0: entered allmulticast mode [ 289.462321][T14298] bridge_slave_0: entered promiscuous mode [ 289.553822][T14544] 9pnet_fd: Insufficient options for proto=fd [ 289.568935][T14298] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.576089][T14298] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.617888][T14298] bridge_slave_1: entered allmulticast mode [ 289.629287][T14298] bridge_slave_1: entered promiscuous mode [ 289.705245][T14372] gre0 speed is unknown, defaulting to 1000 [ 289.756870][T14298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.888492][T14298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.919613][T14372] lo speed is unknown, defaulting to 1000 [ 289.986184][T14298] team0: Port device team_slave_0 added [ 290.004981][T14298] team0: Port device team_slave_1 added [ 290.080823][T14298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.087806][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.113780][T14298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.152920][ T29] audit: type=1400 audit(2000000017.950:4328): avc: denied { lock } for pid=14643 comm="syz.4.3944" path="socket:[44083]" dev="sockfs" ino=44083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 290.281213][T14298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.288222][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.314341][T14298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.607053][T14298] hsr_slave_0: entered promiscuous mode [ 290.628622][T14298] hsr_slave_1: entered promiscuous mode [ 290.656196][T14298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.672727][T14298] Cannot create hsr debugfs directory [ 290.684127][T14692] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 290.844612][ T29] audit: type=1326 audit(2000000018.640:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd336def9 code=0x0 [ 290.915899][T14372] chnl_net:caif_netlink_parms(): no params data found [ 291.020734][T14843] netlink: 'syz.2.3960': attribute type 3 has an invalid length. [ 291.150232][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.158660][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.189213][T14372] bridge_slave_0: entered allmulticast mode [ 291.217492][T14372] bridge_slave_0: entered promiscuous mode [ 291.252885][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.260076][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.302955][ T29] audit: type=1326 audit(2000000019.100:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 291.333385][T14372] bridge_slave_1: entered allmulticast mode [ 291.353345][T14372] bridge_slave_1: entered promiscuous mode [ 291.426770][ T29] audit: type=1326 audit(2000000019.130:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 291.450626][ T29] audit: type=1326 audit(2000000019.130:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 291.475239][ T29] audit: type=1326 audit(2000000019.140:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x7ffc0000 [ 291.503151][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.559707][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.621558][T14938] syz.4.3958[14938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.621721][T14938] syz.4.3958[14938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.692827][T14372] team0: Port device team_slave_0 added [ 291.728973][T14938] syz.4.3958[14938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.752048][T14298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.790976][T14980] loop2: detected capacity change from 0 to 512 [ 291.804880][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'. [ 291.826981][T14372] team0: Port device team_slave_1 added [ 291.834396][T14980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.872710][T14298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.883029][T14980] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.906395][T14298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.941210][T14980] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 291.980491][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.987485][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.013459][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.039257][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.113706][T14998] netlink: 566 bytes leftover after parsing attributes in process `syz.1.3962'. [ 292.124895][T14298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.144763][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.151827][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.178285][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.299785][T15026] loop2: detected capacity change from 0 to 2048 [ 292.382660][T15026] EXT4-fs (loop2): failed to initialize system zone (-117) [ 292.397871][T15026] EXT4-fs (loop2): mount failed [ 292.420730][T14372] hsr_slave_0: entered promiscuous mode [ 292.457313][T14372] hsr_slave_1: entered promiscuous mode [ 292.483693][T14372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.518870][T14372] Cannot create hsr debugfs directory [ 292.675100][T14298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.763629][T14298] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.795613][T14372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.854141][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.861306][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.927327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.934428][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.950619][T15134] loop1: detected capacity change from 0 to 1024 [ 292.957336][T15134] EXT4-fs: inline encryption not supported [ 293.003913][T14372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.017449][T15134] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 293.062965][T15134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.099394][T14372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.135981][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 293.135995][ T29] audit: type=1326 audit(2000000020.930:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.194681][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.236442][T14298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.277689][ T29] audit: type=1326 audit(2000000020.960:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.301491][ T29] audit: type=1326 audit(2000000020.970:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.325096][ T29] audit: type=1326 audit(2000000020.970:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.348865][ T29] audit: type=1326 audit(2000000020.970:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.372430][ T29] audit: type=1326 audit(2000000020.980:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.395982][ T29] audit: type=1326 audit(2000000020.980:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.419778][ T29] audit: type=1326 audit(2000000020.980:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.443342][ T29] audit: type=1326 audit(2000000020.980:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.466953][ T29] audit: type=1326 audit(2000000020.980:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 293.712573][T14372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.816829][T14372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.843526][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 293.926518][T14372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.957208][T15177] netlink: 'syz.1.3983': attribute type 3 has an invalid length. [ 293.981569][T14372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.030886][T14298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.050911][T14372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.152698][T15190] loop1: detected capacity change from 0 to 512 [ 294.230433][T15190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.252208][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 294.261328][T15193] bond0: option resend_igmp: invalid value (7540) [ 294.267932][T15193] bond0: option resend_igmp: allowed values 0 - 255 [ 294.320586][T15190] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.368712][T14372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.453761][T14372] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.472689][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.554526][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.561633][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.623694][T14298] veth0_vlan: entered promiscuous mode [ 294.642335][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.649498][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.686792][T14298] veth1_vlan: entered promiscuous mode [ 294.755372][T14298] veth0_macvtap: entered promiscuous mode [ 294.782269][T14298] veth1_macvtap: entered promiscuous mode [ 294.842707][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.853250][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.863113][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.873583][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.883485][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.893949][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.903798][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.914290][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.924101][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.934621][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.944471][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.954971][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.964824][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.975337][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.985172][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.995655][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.005517][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.015948][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.025782][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.036383][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.299428][T14298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.375975][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.396044][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.406595][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.416581][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.427020][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.436857][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.447288][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.457096][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.467525][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.477415][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.487868][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.497853][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.508285][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.518114][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.528683][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.538580][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.549020][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.558834][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.569298][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.579473][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.589996][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.848442][T15244] 9pnet_fd: Insufficient options for proto=fd [ 295.987103][T14298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.003007][T15246] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 296.064099][T15246] bond1: entered promiscuous mode [ 296.079925][T14298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.088942][T14298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.097699][T14298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.106597][T14298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.207527][T15249] team0: Port device team_slave_1 removed [ 296.238048][T15249] bond1: (slave team_slave_1): making interface the new active one [ 296.246158][T15249] team_slave_1: entered promiscuous mode [ 296.260393][T15249] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 296.312136][T15297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.383526][T14372] veth0_vlan: entered promiscuous mode [ 296.440767][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.448061][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.495458][T14372] veth1_vlan: entered promiscuous mode [ 296.505452][T15317] bridge_slave_1: left allmulticast mode [ 296.511225][T15317] bridge_slave_1: left promiscuous mode [ 296.516961][T15317] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.551566][T15317] bridge_slave_0: left allmulticast mode [ 296.557320][T15317] bridge_slave_0: left promiscuous mode [ 296.563107][T15317] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.581794][T15317] bond0: (slave bridge0): Releasing backup interface [ 296.665038][T14372] veth0_macvtap: entered promiscuous mode [ 296.691685][T14372] veth1_macvtap: entered promiscuous mode [ 296.752081][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.762622][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.772575][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.783132][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.793137][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.803587][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.813416][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.823936][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.833773][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.844331][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.854221][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.864677][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.874554][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.885022][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.894868][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.905327][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.915172][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.925664][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.935570][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.946274][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.956162][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.966706][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.130545][T15340] loop3: detected capacity change from 0 to 2048 [ 297.153049][T15344] loop1: detected capacity change from 0 to 4096 [ 297.183027][T14372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.195790][T15347] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4028'. [ 297.209623][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.220329][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.230359][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.240939][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.250785][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.261802][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.271697][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.282177][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.292043][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.302507][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.312353][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.322942][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.332950][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.343429][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.353429][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.363987][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.373850][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.384361][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.394212][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.404719][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.414627][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.425086][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.561867][T14372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.689167][T15340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.726746][T15344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.842592][T14372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.851561][T14372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.860359][T14372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.869140][T14372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.887372][T15360] loop4: detected capacity change from 0 to 512 [ 297.894956][T15360] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.910232][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.937156][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.981994][T15360] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4034: corrupted in-inode xattr: invalid ea_ino [ 298.020241][T15360] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.4034: couldn't read orphan inode 15 (err -117) [ 298.036270][T15360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.056555][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 298.302248][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.551493][T15412] syz.3.4049[15412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.551627][T15412] syz.3.4049[15412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.569585][T15412] syz.3.4049[15412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.660738][T15419] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.749730][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 298.749747][ T29] audit: type=1326 audit(2000000026.550:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.810051][ T29] audit: type=1326 audit(2000000026.550:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.830723][T15433] loop2: detected capacity change from 0 to 512 [ 298.833669][ T29] audit: type=1326 audit(2000000026.550:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.863466][ T29] audit: type=1326 audit(2000000026.550:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.871496][T15433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.887157][ T29] audit: type=1326 audit(2000000026.550:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.887225][ T29] audit: type=1326 audit(2000000026.550:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.4.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395e73def9 code=0x7ffc0000 [ 298.978894][T15433] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 298.986880][T15433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 299.000989][T15433] System zones: 0-1, 15-15, 18-18, 34-34 [ 299.025789][T15433] EXT4-fs (loop2): orphan cleanup on readonly fs [ 299.052317][T15433] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 299.078874][T15433] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 299.093648][T15433] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 299.109395][ T29] audit: type=1326 audit(2000000026.910:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 299.119238][T15433] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4060: bg 0: block 40: padding at end of block bitmap is not set [ 299.147796][ T29] audit: type=1326 audit(2000000026.940:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 299.171771][ T29] audit: type=1326 audit(2000000026.940:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 299.173075][T15433] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 299.232208][T15433] EXT4-fs (loop2): 1 truncate cleaned up [ 299.238408][T15433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.269361][T15452] netlink: 566 bytes leftover after parsing attributes in process `syz.0.4065'. [ 299.284351][T15433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.351746][T15467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4071'. [ 299.427315][T15470] loop2: detected capacity change from 0 to 1024 [ 299.486388][T15479] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4087'. [ 299.501327][T15480] 9pnet_fd: Insufficient options for proto=fd [ 299.511022][T15479] 0ªX¹¦À: renamed from caif0 [ 299.533611][T15479] 0ªX¹¦À: entered allmulticast mode [ 299.538931][T15479] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 300.097052][T15515] syz.2.4102[15515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.097162][T15515] syz.2.4102[15515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.125141][T15515] syz.2.4102[15515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.334831][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.353501][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.385435][T15548] bridge_slave_1: left allmulticast mode [ 300.391339][T15548] bridge_slave_1: left promiscuous mode [ 300.397062][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.409931][T15548] bridge_slave_0: left allmulticast mode [ 300.415688][T15548] bridge_slave_0: left promiscuous mode [ 300.421574][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.480463][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4103'. [ 300.489733][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4103'. [ 300.502437][T15561] loop4: detected capacity change from 0 to 512 [ 300.514455][T15551] bond_slave_0: entered promiscuous mode [ 300.542977][T15551] bond_slave_0: left promiscuous mode [ 300.557906][T15561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.570844][T15561] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.716235][T15561] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 300.752886][T15577] hub 9-0:1.0: USB hub found [ 300.759378][T15577] hub 9-0:1.0: 8 ports detected [ 300.768497][T15582] loop2: detected capacity change from 0 to 512 [ 300.801714][T15582] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.814644][T15582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.826366][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.843789][T15582] EXT4-fs (loop2): 1 truncate cleaned up [ 300.852700][T15582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.929338][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.038492][T15610] loop3: detected capacity change from 0 to 512 [ 301.060538][T15610] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.068076][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 301.084049][T15610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.125728][T15610] EXT4-fs (loop3): 1 truncate cleaned up [ 301.132029][T15610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.185090][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.197008][T15623] loop1: detected capacity change from 0 to 512 [ 301.273809][T15623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.309957][T15623] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.323928][T15639] loop3: detected capacity change from 0 to 512 [ 301.404266][T15639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.439077][T15649] hub 9-0:1.0: USB hub found [ 301.458826][T15649] hub 9-0:1.0: 8 ports detected [ 301.482584][T15639] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.516813][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.553483][T15639] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 301.611865][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.710458][T15674] loop4: detected capacity change from 0 to 512 [ 301.719161][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 301.782804][T15681] loop1: detected capacity change from 0 to 512 [ 301.787777][T15674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.799045][T15681] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.808397][T15681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.842729][T15681] EXT4-fs (loop1): 1 truncate cleaned up [ 301.848861][T15681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.860793][T15674] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.969833][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.983367][T15690] loop3: detected capacity change from 0 to 512 [ 302.073835][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.489139][T15736] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.496432][T15736] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.550641][T15738] bridge_slave_1: left allmulticast mode [ 302.556427][T15738] bridge_slave_1: left promiscuous mode [ 302.562261][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.589500][T15738] bridge_slave_0: left allmulticast mode [ 302.595369][T15738] bridge_slave_0: left promiscuous mode [ 302.601107][T15738] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.796225][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'. [ 303.118949][T15763] syz.0.4171[15763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.119018][T15763] syz.0.4171[15763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.138815][T15763] syz.0.4171[15763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.303921][T15773] loop0: detected capacity change from 0 to 512 [ 305.383363][T15773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.462846][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 305.492210][T15773] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.538084][T15790] loop1: detected capacity change from 0 to 512 [ 305.583537][T15795] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 305.600569][T15793] IPVS: stopping backup sync thread 15795 ... [ 305.623930][T15790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.674324][T15790] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.726515][T15801] loop4: detected capacity change from 0 to 512 [ 305.737689][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.757579][T15773] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 305.787883][T15801] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4186: Invalid inode bitmap blk 4 in block_group 0 [ 305.846141][T14372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.881796][T15801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.993199][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.019885][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 306.019903][ T29] audit: type=1326 audit(2000000033.820:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.4192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dee8ddef9 code=0x0 [ 306.070110][T15820] loop0: detected capacity change from 0 to 1024 [ 306.086647][T15820] EXT4-fs: Ignoring removed orlov option [ 306.093236][T15820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.145519][T15820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.191532][T15832] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.275570][T14372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.352079][T15841] loop3: detected capacity change from 0 to 512 [ 306.422413][T15841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.452369][T15841] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.482463][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4214'. [ 306.515317][T15841] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 306.527630][ T29] audit: type=1326 audit(2000000034.330:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.613514][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.638882][T15861] loop1: detected capacity change from 0 to 512 [ 306.646454][ T29] audit: type=1326 audit(2000000034.350:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d012cc890 code=0x7ffc0000 [ 306.669975][ T29] audit: type=1326 audit(2000000034.350:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.693481][ T29] audit: type=1326 audit(2000000034.350:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.717209][ T29] audit: type=1326 audit(2000000034.350:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.741148][ T29] audit: type=1326 audit(2000000034.350:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.764968][ T29] audit: type=1326 audit(2000000034.430:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.788527][ T29] audit: type=1326 audit(2000000034.430:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.812301][ T29] audit: type=1326 audit(2000000034.430:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6d012cdef9 code=0x7ffc0000 [ 306.837988][T15861] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4216: bg 0: block 5: invalid block bitmap [ 306.863055][T15861] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 306.887399][T15861] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4216: invalid indirect mapped block 3 (level 2) [ 306.918020][T15861] EXT4-fs (loop1): 1 orphan inode deleted [ 306.923856][T15861] EXT4-fs (loop1): 1 truncate cleaned up [ 306.942075][T15861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.998639][T12617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.154589][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.162143][T15875] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.210838][T15875] bridge_slave_1: left allmulticast mode [ 307.217630][T15875] bridge_slave_1: left promiscuous mode [ 307.224223][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.249091][T15875] bridge_slave_0: left allmulticast mode [ 307.254792][T15875] bridge_slave_0: left promiscuous mode [ 307.260476][T15875] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.347667][T15892] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 307.355019][T15881] gre0 speed is unknown, defaulting to 1000 [ 307.415303][T15881] lo speed is unknown, defaulting to 1000 [ 307.467632][T15919] loop3: detected capacity change from 0 to 512 [ 307.541418][T15919] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4222: bg 0: block 5: invalid block bitmap [ 307.588182][T15919] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 307.638105][T15919] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4222: invalid indirect mapped block 3 (level 2) [ 307.696060][T15919] EXT4-fs (loop3): 1 orphan inode deleted [ 307.702167][T15919] EXT4-fs (loop3): 1 truncate cleaned up [ 307.729332][T15919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.813078][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.852025][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4229'. [ 307.879279][T15956] erspan0: entered promiscuous mode [ 307.879332][T15956] macvtap1: entered promiscuous mode [ 307.879445][T15956] macvtap1: entered allmulticast mode [ 307.879460][T15956] erspan0: entered allmulticast mode [ 307.898565][T15956] erspan0: left allmulticast mode [ 307.898634][T15956] erspan0: left promiscuous mode [ 308.008007][T15984] loop4: detected capacity change from 0 to 1024 [ 308.024985][T15984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.156043][T10508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.177409][T15993] gre0 speed is unknown, defaulting to 1000 [ 308.267117][T15993] lo speed is unknown, defaulting to 1000 [ 308.459239][T16042] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4245'. [ 308.488844][T16042] 0ªX¹¦À: renamed from caif0 [ 308.506531][T16042] 0ªX¹¦À: entered allmulticast mode [ 308.512846][T16046] loop0: detected capacity change from 0 to 1024 [ 308.513639][T16042] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.627567][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 308.636653][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 308.652582][T16058] bond_slave_0: entered promiscuous mode [ 308.659400][T16058] bond_slave_0: left promiscuous mode [ 308.663838][T16062] loop1: detected capacity change from 0 to 512 [ 309.133215][T16115] syz.1.4274[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.133336][T16115] syz.1.4274[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.156572][T16115] syz.1.4274[16115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.361258][T16135] loop2: detected capacity change from 0 to 512 [ 309.434954][T16135] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4292: bg 0: block 248: padding at end of block bitmap is not set [ 309.451054][T16135] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.4292: Failed to acquire dquot type 1 [ 309.483886][T16135] EXT4-fs (loop2): 1 truncate cleaned up [ 309.494604][T16135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.529498][T16135] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.628349][T16146] 9pnet_fd: Insufficient options for proto=fd [ 309.657792][T12620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.739355][T16150] netlink: 'syz.4.4288': attribute type 3 has an invalid length. [ 309.866540][T16166] loop4: detected capacity change from 0 to 512 [ 309.876402][T16165] loop3: detected capacity change from 0 to 512 [ 309.889027][T16165] EXT4-fs: Ignoring removed oldalloc option [ 309.912792][T16165] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 309.955310][T16165] EXT4-fs (loop3): Remounting filesystem read-only [ 309.961944][T16165] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 310.018407][T16165] EXT4-fs (loop3): 1 orphan inode deleted [ 310.043299][T16165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.092288][T16165] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 310.118817][T16165] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.380972][T16178] gre0 speed is unknown, defaulting to 1000 [ 310.442297][T16178] lo speed is unknown, defaulting to 1000 [ 310.475214][T16204] syz.3.4304[16204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.475367][T16204] syz.3.4304[16204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.498819][T16204] syz.3.4304[16204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.611503][T16178] chnl_net:caif_netlink_parms(): no params data found [ 310.729557][T16303] loop3: detected capacity change from 0 to 8192 [ 310.840291][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.847471][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.874964][T16178] bridge_slave_0: entered allmulticast mode [ 310.899469][T16178] bridge_slave_0: entered promiscuous mode [ 310.920424][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.927620][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.968880][T16178] bridge_slave_1: entered allmulticast mode [ 310.989469][T16178] bridge_slave_1: entered promiscuous mode [ 311.018618][T16370] loop3: detected capacity change from 0 to 512 [ 311.045306][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.053184][T16370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.067016][T16362] gre0 speed is unknown, defaulting to 1000 [ 311.076553][T16370] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.086598][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.087477][ T3344] IPVS: starting estimator thread 0... [ 311.124067][T16370] Process accounting resumed [ 311.137426][T16362] lo speed is unknown, defaulting to 1000 [ 311.143490][T16370] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 311.208838][T16401] IPVS: using max 2448 ests per chain, 122400 per kthread [ 311.224313][T16178] team0: Port device team_slave_0 added [ 311.239842][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.243245][T16178] team0: Port device team_slave_1 added [ 311.309665][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.316819][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.343176][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.396223][T16469] loop4: detected capacity change from 0 to 1024 [ 311.414586][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.421635][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.448196][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.593237][ T7270] ================================================================== [ 311.601439][ T7270] BUG: KCSAN: data-race in alloc_pid / copy_process [ 311.608041][ T7270] [ 311.610360][ T7270] read-write to 0xffffffff8665d878 of 4 bytes by task 28 on cpu 0: [ 311.618243][ T7270] alloc_pid+0x542/0x6f0 [ 311.622486][ T7270] copy_process+0xe72/0x1f90 [ 311.627075][ T7270] kernel_clone+0x167/0x5e0 [ 311.631581][ T7270] user_mode_thread+0x7d/0xb0 [ 311.636262][ T7270] call_usermodehelper_exec_work+0x41/0x150 [ 311.642169][ T7270] process_scheduled_works+0x483/0x9a0 [ 311.647637][ T7270] worker_thread+0x51d/0x6f0 [ 311.652287][ T7270] kthread+0x1d1/0x210 [ 311.656358][ T7270] ret_from_fork+0x4b/0x60 [ 311.660783][ T7270] ret_from_fork_asm+0x1a/0x30 [ 311.665558][ T7270] [ 311.667913][ T7270] read to 0xffffffff8665d878 of 4 bytes by task 7270 on cpu 1: [ 311.675451][ T7270] copy_process+0x1799/0x1f90 [ 311.680136][ T7270] kernel_clone+0x167/0x5e0 [ 311.684647][ T7270] user_mode_thread+0x7d/0xb0 [ 311.689346][ T7270] call_usermodehelper_exec_work+0x41/0x150 [ 311.695269][ T7270] process_scheduled_works+0x483/0x9a0 [ 311.700751][ T7270] worker_thread+0x51d/0x6f0 [ 311.705437][ T7270] kthread+0x1d1/0x210 [ 311.709616][ T7270] ret_from_fork+0x4b/0x60 [ 311.714076][ T7270] ret_from_fork_asm+0x1a/0x30 [ 311.718945][ T7270] [ 311.721266][ T7270] value changed: 0x80000103 -> 0x80000104 [ 311.727077][ T7270] [ 311.729401][ T7270] Reported by Kernel Concurrency Sanitizer on: [ 311.735558][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: kworker/u8:11 Tainted: G W 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 311.747639][ T7270] Tainted: [W]=WARN [ 311.751473][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 311.761559][ T7270] Workqueue: events_unbound call_usermodehelper_exec_work [ 311.768717][ T7270] ================================================================== [ 311.901249][T16178] hsr_slave_0: entered promiscuous mode [ 311.922190][T16178] hsr_slave_1: entered promiscuous mode [ 311.943150][T16178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.958794][T16178] Cannot create hsr debugfs directory [ 312.107064][T16178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.180887][T16178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.241468][T16178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.301697][T16178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.542344][ T355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.561001][ T355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.581469][ T355] bond0 (unregistering): Released all slaves [ 312.601036][ T355] bond1 (unregistering): (slave team_slave_1): Releasing active interface [ 312.618839][ T355] team_slave_1: left promiscuous mode [ 312.641649][ T355] bond1 (unregistering): Released all slaves [ 312.686834][T16178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.707238][T16178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.723889][T16178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.742855][ T355] hsr_slave_0: left promiscuous mode [ 312.759472][ T355] hsr_slave_1: left promiscuous mode [ 312.771765][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.779275][ T355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.799445][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.807036][ T355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.834934][ T355] veth1_macvtap: left promiscuous mode [ 312.840514][ T355] veth0_macvtap: left promiscuous mode [ 312.846149][ T355] veth1_vlan: left promiscuous mode [ 312.851514][ T355] veth0_vlan: left promiscuous mode [ 313.069129][ T355] team0 (unregistering): Port device team_slave_0 removed [ 313.163801][T16178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.250944][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.277531][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.301735][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.308907][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.339596][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.346687][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.401811][T16178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.521991][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.655965][T16178] veth0_vlan: entered promiscuous mode [ 313.677847][T16178] veth1_vlan: entered promiscuous mode [ 313.704055][T16178] veth0_macvtap: entered promiscuous mode [ 313.721117][T16178] veth1_macvtap: entered promiscuous mode [ 313.743894][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.754685][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.764735][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.775271][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.785339][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.795809][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.805808][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.816307][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.826165][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.836637][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.846480][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.856939][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.866784][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.877287][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.887251][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.897919][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.907766][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.918648][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.928724][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.939237][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.949094][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.959528][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.974113][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.986559][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.997080][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.006987][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.017444][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.027357][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.037898][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.047742][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.058185][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.068087][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.078529][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.088445][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.098881][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.108736][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.119350][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.129269][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.139749][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.149906][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.160762][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.171300][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.181907][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.191839][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.202300][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.215054][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.224349][T16178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.233382][T16178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.242315][T16178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.251085][T16178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0