last executing test programs: 2.848739165s ago: executing program 4 (id=5713): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000001f8d2c9e4ed7621b46c54afd15f095be8f48bac7d77b98b4fe46ac7e35373e8c8f99ae06503a"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2.633940855s ago: executing program 4 (id=5725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") removexattr(0x0, 0x0) 2.512784626s ago: executing program 4 (id=5719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2.455167071s ago: executing program 4 (id=5721): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000010240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@norecovery}, {@data_err_abort}]}, 0xf9, 0x4fa, &(0x7f00000005c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.385298728s ago: executing program 4 (id=5722): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xffff8000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f00000002c0), &(0x7f0000000080)=0x4) 2.36324791s ago: executing program 4 (id=5724): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 972.718129ms ago: executing program 2 (id=5775): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="3f43c5dd65", 0x5}, {&(0x7f00000005c0)="15", 0x1}], 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 914.345145ms ago: executing program 2 (id=5776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 884.352387ms ago: executing program 1 (id=5779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 844.745331ms ago: executing program 2 (id=5782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 801.536245ms ago: executing program 2 (id=5783): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000002c0)={'veth0_vlan\x00', @remote}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 699.028984ms ago: executing program 2 (id=5786): socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f0000000bc0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x36, 0x0}, 0x10) 697.032155ms ago: executing program 1 (id=5787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 663.866608ms ago: executing program 2 (id=5788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 602.788363ms ago: executing program 1 (id=5789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5bc, &(0x7f0000000000)="$eJzs279rNEUYB/Dv7t3t3oFy2ljqwdtY+RbW4Y3KmxCwCIKdoK2NiGAhKNlD0UatbCz8B9KkEKysg+g/IEKIhaCdiIVamJG9X7nE8gojfD7F8jzPzDMzxWw54f+tTAfJ4FZxWNfVOp7+ncxffS5pZ4t8tKr3E14+fXhwNDuumk2tSn7tknq1Tv9pkic3C2e2ir4e5pPTw48+/ezdJl26y5MkXyRdUtr10Ra9+bz516H/rNaL8996+lZebT69Lo9lvIjuZ3XLBoty2j5qPtx5/7O98/mDPijLTSfN9e5J9tdBKaX01/Lk3jIf5berjOrZZubqNj1YHu+mdtE/2uT15i8Ybe327Dc/nmTeLEcGW729i0ny5sVLz1RbawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPeUlUWyn8fHSZUM++zL56tuOWm4rLzQDJf5X9tNuznbO5++/8Fbdd7Ze/37N9776fCX8e9JBrl/+Ehp282819JudQ2T+irJE5Nd9y/rZd9+Zbs8yzzf3vvhqXqQUqbX9VHVf79Kurx43QsAAAAAAAAAAAAAAAAAAAA7enhwNDuuJ+vX9fW6XjJOqlsP3MsfpZT9lOZGdZLku8tUSX5OqbaHmmT6aJL24yargS7ezd8h/wQAAP//eKJe6g==") 488.938634ms ago: executing program 1 (id=5790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 465.510796ms ago: executing program 1 (id=5791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f00000007c0)='eti0\x00\x16\xd2\x90\x06t|\xc8JK\xd7M\x15\xca\x13Vn\xa3+\x85\x8a\xa0\x9b\xa9U\xdbk!\xd9\xa9i\xea0\x93\xc5V\x05\x01\xb706?\xf2\xdf\xd3\x9e\xf5\x7fze.c\xfb\xa27\xed\x90\x1b\x7fE}\xa81\xd5?\xcb\xefC\xac\xac}\xb8\x00\x97\xdf\x1au\x848bk\x02\x9cm\x93\xec\xcf~\x9f\xe0q/\x9b\xc4\xd7k\xf7\xf6\x13\xf5\x12}5l\xf6\xc7\x1aH\x1cMK\xfe2\x92\x19U \xfb`3\xe0\x1am\xd5h\x95E`+\xd2\xcb\xe61\xb2m\xde\xe3\x91\x97\x9bQH>[k\xfc\x89\xb4\xe5l\xd8(\xbc\xe0i=\xec\xb6K\x85;\x9a\x8a!\xfe\xfex\x91\xea\x91\xc3\xa9w\x1a\xaa\x1a\x7f/ZUl=\x18\xef\x8d\x06\xb5\xd1m\xd4\x04\xca\x82\x0e\x17\xfe\xf2\xc5eYaDF\x93\xbbs\xe3\x14\\\x87\xf2\xac\xaa\xea\xf42\xa9\xc6d\x93\b\x9dr\xffc]z\xed\xc2w`\xebA`&\xe1\x82\x92`K\x8bG-\xe6|\xcf-1\xc0_r\x8fX<\xe9\xd6 \x9c\x8e\x90\x19e\x05\xcaz\xc4\xfb*!n\xbc\x81\xe5\n\xe8zx\x80\x97M*\xb5\xd4\xe8\x0er\xef\xbe\x99\x13\x1f\x9aC\xe9yhH\xa8d8\xc9\xa0\x98\"\x9dIV\x86\xdeO\xb5\t\x00\x00\x00\x8ei9\xd5f\x96\xda\xd6ms\xcc\x17\xea\x8e\xddRE\xe7\xf1w\xac\xb2\xb6\'\'\xf6p)\xd9Fj\x8c\x8d\xaa\x88yx?Z\x9ahDk\x99NP*\x00\x00\x00=h\x15rJ\x8c\xed\x85\x9b\xe5v\xafx\xf1\xa6\x10\x1a\xc8r}]\xd3\xd0\xd4\x01J\xc4\x87y\x97\n\xda\x91\xbe\xaa?8\xc7E\x1e?\x9c\x1cG\xe7\xff\x92\b/\xc5\x90\x98\xae\xb5\xb8\x9b9|\xbdo\n{*\xc2\x95\x89\xb29bA\xc6\xd0\xb9?+\xea\x8e\xd9\xfd\xeeC\xf8\xe5\x95,\x9e\t\xf2\xd9\v6\x88]-u{\x85\xd4', 0x42, 0x48, 0x0) mq_timedsend(r2, 0x0, 0xf00, 0x0, 0x0) 447.666708ms ago: executing program 1 (id=5792): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000006780), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 418.45936ms ago: executing program 3 (id=5793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 402.671272ms ago: executing program 3 (id=5794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 382.871904ms ago: executing program 3 (id=5796): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000000)={0x0, 0x0, 0x13580}, 0x0, 0x0) r2 = dup(r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 292.453842ms ago: executing program 3 (id=5797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x7, 0x0, &(0x7f0000000380)=0x0) timer_gettime(r2, &(0x7f00000003c0)) 255.320796ms ago: executing program 3 (id=5798): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="82", 0x1}], 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) close(r0) 190.587871ms ago: executing program 0 (id=5800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x1) ftruncate(r2, 0x800000000000000) 171.892973ms ago: executing program 0 (id=5801): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 98.82926ms ago: executing program 0 (id=5802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 82.659592ms ago: executing program 0 (id=5803): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r0, 0xb01}, 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 58.881654ms ago: executing program 0 (id=5804): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f0000000240)={0x2, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e23, 0x0, @dev}}}, 0x104) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 42.625355ms ago: executing program 0 (id=5805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=5806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) kernel console output (not intermixed with test programs): __nla_validate_parse: 6 callbacks suppressed [ 186.141597][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4977'. [ 186.185832][T15782] loop3: detected capacity change from 0 to 256 [ 186.315564][T15810] bpf_get_probe_write_proto: 2 callbacks suppressed [ 186.315584][T15810] syz.1.4985[15810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.326074][T15810] syz.1.4985[15810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.339271][T15810] syz.1.4985[15810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.367979][T15810] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.434245][T15831] 9pnet: p9_errstr2errno: server reported unknown error @ [ 186.493410][T15844] loop0: detected capacity change from 0 to 512 [ 186.501899][T15844] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4995: corrupted in-inode xattr: invalid ea_ino [ 186.517211][T15844] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.4995: couldn't read orphan inode 15 (err -117) [ 186.530257][T15844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.593882][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.612352][T15862] syz_tun: entered promiscuous mode [ 186.617634][T15862] macvtap1: entered promiscuous mode [ 186.623287][T15862] macvtap1: entered allmulticast mode [ 186.628723][T15862] syz_tun: entered allmulticast mode [ 186.636233][T15862] syz_tun: left allmulticast mode [ 186.641374][T15862] syz_tun: left promiscuous mode [ 186.838009][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5020'. [ 186.849762][T15907] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 186.858558][T15907] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 187.029890][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5031'. [ 187.104038][T15946] bond1: entered promiscuous mode [ 187.109130][T15946] bond1: entered allmulticast mode [ 187.127785][T15946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.143718][T15986] loop0: detected capacity change from 0 to 1024 [ 187.152829][T15946] bond1 (unregistering): Released all slaves [ 187.155625][T15986] EXT4-fs: Ignoring removed orlov option [ 187.164599][T15986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.252742][T15986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.283658][T16039] loop4: detected capacity change from 0 to 512 [ 187.332671][T16039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.347001][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.371865][T16039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.414232][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 187.414249][ T29] audit: type=1400 audit(187.401:35041): avc: denied { listen } for pid=16074 comm="syz.4.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.599625][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.607071][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.614597][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.622060][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.629482][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.636872][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.641980][T16099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.644357][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.660095][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.667504][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.670178][ T29] audit: type=1326 audit(187.651:35042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.674971][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.697853][ T29] audit: type=1326 audit(187.651:35043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.705329][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.728160][ T29] audit: type=1326 audit(187.651:35044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.735549][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.758504][ T29] audit: type=1326 audit(187.651:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.765994][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.789104][ T29] audit: type=1326 audit(187.651:35046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.796551][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.819498][ T29] audit: type=1326 audit(187.651:35047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.826867][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.851194][ T29] audit: type=1326 audit(187.651:35048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.857897][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.881010][ T29] audit: type=1326 audit(187.651:35049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.911760][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.919169][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.926650][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.934172][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.941631][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.946284][ T29] audit: type=1326 audit(187.871:35050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65aba8def9 code=0x7ffc0000 [ 187.949013][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.979415][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.986835][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 187.994431][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.001883][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.009326][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.016755][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.024208][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.031694][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.039151][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.046578][ T2932] hid-generic 0000:04AD:0000.0012: unknown main item tag 0x0 [ 188.054080][T16099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.062413][ T2932] hid-generic 0000:04AD:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 188.234538][T16144] loop1: detected capacity change from 0 to 1024 [ 188.243764][T16144] EXT4-fs: Ignoring removed i_version option [ 188.247779][T16148] loop0: detected capacity change from 0 to 764 [ 188.260488][T16148] Symlink component flag not implemented [ 188.266444][T16148] Symlink component flag not implemented (129) [ 188.340868][T16144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.358796][T16144] EXT4-fs (loop1): shut down requested (0) [ 188.381838][T14601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.442299][T16165] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 188.454376][T16167] loop0: detected capacity change from 0 to 1024 [ 188.461167][T16167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.468482][T16167] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.491947][T16167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.526113][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.568654][T16191] syz.0.5087[16191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.568753][T16191] syz.0.5087[16191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.582380][T16191] syz.0.5087[16191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.604675][T16191] loop0: detected capacity change from 0 to 1024 [ 188.642274][T16191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.672195][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.714455][T16205] bond1: entered promiscuous mode [ 188.719627][T16205] bond1: entered allmulticast mode [ 188.727388][T16205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.760521][T16205] bond1 (unregistering): Released all slaves [ 188.811530][T16283] syz.0.5099[16283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.811620][T16283] syz.0.5099[16283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.823969][T16283] syz.0.5099[16283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.900917][T16295] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.933764][T16298] program syz.1.5106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.979800][T16300] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 189.056749][T16312] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 189.184178][T16323] loop0: detected capacity change from 0 to 512 [ 189.201072][T16323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.229049][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.335801][T16336] syz.3.5122[16336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.567499][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 189.585429][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.592938][T16344] vhci_hcd vhci_hcd.0: Device attached [ 189.602965][T16344] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.612539][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 189.619138][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.626911][T16344] vhci_hcd vhci_hcd.0: Device attached [ 189.648054][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 189.654624][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.662331][T16344] vhci_hcd vhci_hcd.0: Device attached [ 189.673533][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5126'. [ 189.703602][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 189.710238][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.717873][T16344] vhci_hcd vhci_hcd.0: Device attached [ 189.732585][T16358] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 189.739249][T16358] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.746799][T16358] vhci_hcd vhci_hcd.0: Device attached [ 189.754184][T16349] vhci_hcd: connection closed [ 189.754211][T16345] vhci_hcd: connection closed [ 189.754355][T16353] vhci_hcd: connection closed [ 189.759691][T16347] vhci_hcd: connection closed [ 189.768422][ T5430] vhci_hcd: stop threads [ 189.777476][ T5430] vhci_hcd: release socket [ 189.781965][ T5430] vhci_hcd: disconnect device [ 189.786935][T16359] vhci_hcd: connection closed [ 189.793922][ T3343] vhci_hcd: vhci_device speed not set [ 189.801841][T16364] loop4: detected capacity change from 0 to 512 [ 189.808226][ T5430] vhci_hcd: stop threads [ 189.814667][ T5430] vhci_hcd: release socket [ 189.819134][ T5430] vhci_hcd: disconnect device [ 189.825507][T16364] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 189.834016][T16364] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.840757][ T5430] vhci_hcd: stop threads [ 189.845049][ T5430] vhci_hcd: release socket [ 189.849529][ T5430] vhci_hcd: disconnect device [ 189.857831][T16364] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 189.865267][ T5430] vhci_hcd: stop threads [ 189.876706][ T5430] vhci_hcd: release socket [ 189.881192][ T5430] vhci_hcd: disconnect device [ 189.885955][ T3343] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 189.895908][ T3343] usb 7-1: enqueue for inactive port 0 [ 189.901556][ T3343] usb 7-1: enqueue for inactive port 0 [ 189.907130][ T5430] vhci_hcd: stop threads [ 189.909530][T16364] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 189.911443][ T5430] vhci_hcd: release socket [ 189.922494][ T5430] vhci_hcd: disconnect device [ 189.927363][ T3343] usb 7-1: enqueue for inactive port 0 [ 189.934313][T16364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5138: bg 0: block 40: padding at end of block bitmap is not set [ 189.934504][T16375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5133'. [ 189.956651][T16373] loop1: detected capacity change from 0 to 2048 [ 189.964494][T16364] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 189.966348][T16375] 0X: renamed from caif0 [ 189.982113][T16375] 0X: entered allmulticast mode [ 189.985633][T16364] EXT4-fs (loop4): 1 truncate cleaned up [ 189.987396][T16375] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 190.001542][ T3343] vhci_hcd: vhci_device speed not set [ 190.023958][T16373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.025707][T16364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.060262][T16364] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.5138: corrupted xattr block 31: invalid header [ 190.073675][T16364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 190.076149][T16373] Invalid ELF header len 4 [ 190.087279][T16364] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.5138: corrupted xattr block 31: invalid header [ 190.106893][T16364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 190.117238][T14601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.117770][T16364] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.5138: bad symlink. [ 190.170306][T14613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.195624][T16395] netlink: 'syz.1.5141': attribute type 4 has an invalid length. [ 190.210241][T16395] netlink: 'syz.1.5141': attribute type 4 has an invalid length. [ 190.287243][T16409] netlink: 'syz.1.5145': attribute type 5 has an invalid length. [ 190.357021][T16427] ebt_among: dst integrity fail: 102 [ 190.373466][T16418] syzkaller0: entered promiscuous mode [ 190.379092][T16418] syzkaller0: entered allmulticast mode [ 190.554294][T16460] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5166'. [ 190.563777][T16460] 0: renamed from hsr_slave_1 (while UP) [ 190.575033][T16462] loop4: detected capacity change from 0 to 1024 [ 190.583871][T16460] 0: entered allmulticast mode [ 190.589473][T16460] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 190.604862][T16462] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.617006][T16462] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 190.629399][T16462] EXT4-fs (loop4): too many log groups per flexible block group [ 190.637078][T16462] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 190.643997][T16462] EXT4-fs (loop4): mount failed [ 190.696195][T16484] sd 0:0:1:0: device reset [ 190.705279][T16486] netlink: 'syz.0.5177': attribute type 2 has an invalid length. [ 190.713098][T16486] netlink: 'syz.0.5177': attribute type 3 has an invalid length. [ 190.720936][T16486] netlink: 11346 bytes leftover after parsing attributes in process `syz.0.5177'. [ 190.766963][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5181'. [ 191.090518][T16545] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5203'. [ 191.196406][T16566] loop0: detected capacity change from 0 to 512 [ 191.214230][T16570] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5208'. [ 191.225624][T16566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.254389][T16566] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 191.269885][T16559] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5208'. [ 191.292515][T16566] EXT4-fs (loop0): 1 truncate cleaned up [ 191.298662][T16566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.349927][T16566] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.0.5211: path /118/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 191.417989][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.688335][T16604] bpf_get_probe_write_proto: 5 callbacks suppressed [ 191.688355][T16604] syz.2.5228[16604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.696644][T16604] syz.2.5228[16604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.710822][T16604] syz.2.5228[16604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.750440][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5229'. [ 191.752942][T16609] dvmrp5: entered allmulticast mode [ 191.784814][T16609] syz.2.5230[16609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.784888][T16609] syz.2.5230[16609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.798746][T16609] syz.2.5230[16609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.815732][T16613] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 191.835430][T16609] dvmrp5: left allmulticast mode [ 191.871465][T16619] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 192.005336][T16632] loop0: detected capacity change from 0 to 1024 [ 192.056110][T16634] loop1: detected capacity change from 0 to 8192 [ 192.073239][T16632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.106062][T16632] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #15: comm syz.0.5249: corrupted in-inode xattr: bad magic number in in-inode xattr [ 192.145271][T16634] loop1: p2 p3 p4 [ 192.149095][T16634] loop1: p2 start 452985600 is beyond EOD, truncated [ 192.155866][T16634] loop1: p3 size 33554432 extends beyond EOD, truncated [ 192.163770][T16634] loop1: p4 start 8388607 is beyond EOD, truncated [ 192.171171][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.191733][T16655] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 192.294017][T16668] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 192.294017][T16668] program syz.0.5250 not setting count and/or reply_len properly [ 192.421471][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 192.421487][ T29] audit: type=1326 audit(192.411:35239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 192.453283][ T29] audit: type=1326 audit(192.411:35240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 192.476426][ T29] audit: type=1326 audit(192.411:35241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 192.499453][ T29] audit: type=1326 audit(192.411:35242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 192.559802][T16699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.590397][T16704] loop0: detected capacity change from 0 to 256 [ 192.636810][T16711] batadv_slave_0: entered promiscuous mode [ 192.643353][T16711] batadv_slave_0: left promiscuous mode [ 192.677674][ T29] audit: type=1400 audit(192.661:35243): avc: denied { create } for pid=16712 comm="syz.1.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 192.786807][T16732] loop0: detected capacity change from 0 to 1024 [ 192.795973][T16732] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 192.805805][T16732] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 192.817408][T16732] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 192.828044][T16732] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.5272: unexpected bad inode w/o EXT4_IGET_BAD [ 192.843013][T16732] EXT4-fs (loop0): no journal found [ 192.848277][T16732] EXT4-fs (loop0): can't get journal size [ 192.866197][T16732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.888618][T16732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5272: bg 0: block 32: padding at end of block bitmap is not set [ 192.921559][T16761] loop1: detected capacity change from 0 to 512 [ 192.930664][T16761] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5275: bg 0: block 5: invalid block bitmap [ 192.952331][T16761] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 192.970630][T16761] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5275: invalid indirect mapped block 3 (level 2) [ 192.986350][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.023220][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 193.024138][T16761] EXT4-fs (loop1): 1 orphan inode deleted [ 193.037960][T16761] EXT4-fs (loop1): 1 truncate cleaned up [ 193.053793][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 193.064039][T16772] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5279'. [ 193.074841][T16761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.083298][T16772] 1: renamed from c0 (while UP) [ 193.100663][T16772] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 193.116258][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 193.127089][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 193.137193][T16776] netlink: 'syz.0.5279': attribute type 10 has an invalid length. [ 193.145171][T16776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5279'. [ 193.162295][T16776] hsr0: entered promiscuous mode [ 193.167631][T16776] hsr0: entered allmulticast mode [ 193.172741][T16776] hsr_slave_0: entered allmulticast mode [ 193.180412][T16776] bridge0: port 3(hsr0) entered blocking state [ 193.186634][T16776] bridge0: port 3(hsr0) entered disabled state [ 193.196740][T16776] bridge0: port 3(hsr0) entered blocking state [ 193.203068][T16776] bridge0: port 3(hsr0) entered forwarding state [ 193.207637][T14601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.209753][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 193.252821][ T29] audit: type=1326 audit(193.241:35244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.1.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb3d4def9 code=0x7ffc0000 [ 193.298548][ T29] audit: type=1326 audit(193.241:35245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.0.5283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dfe6def9 code=0x7ffc0000 [ 193.321641][ T29] audit: type=1326 audit(193.241:35246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.0.5283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f45dfe6def9 code=0x7ffc0000 [ 193.344613][ T29] audit: type=1326 audit(193.241:35247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.0.5283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dfe6def9 code=0x7ffc0000 [ 193.367705][ T29] audit: type=1326 audit(193.241:35248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.0.5283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dfe6def9 code=0x7ffc0000 [ 193.624576][T16826] hub 9-0:1.0: USB hub found [ 193.629458][T16826] hub 9-0:1.0: 8 ports detected [ 193.674588][T16832] loop1: detected capacity change from 0 to 1024 [ 193.681515][T16832] EXT4-fs: inline encryption not supported [ 193.688017][T16832] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 193.702716][T16832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.734592][T14601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.778540][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811ded3e00: rx timeout, send abort [ 193.786946][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811ded3e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.802381][T16849] loop3: detected capacity change from 0 to 2048 [ 193.880034][T16849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.091343][T16858] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.121177][T16858] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 194.133527][T16858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 194.133527][T16858] [ 194.143230][T16858] EXT4-fs (loop3): Total free blocks count 0 [ 194.149298][T16858] EXT4-fs (loop3): Free/Dirty block details [ 194.155276][T16858] EXT4-fs (loop3): free_blocks=2415919104 [ 194.161098][T16858] EXT4-fs (loop3): dirty_blocks=8192 [ 194.166392][T16858] EXT4-fs (loop3): Block reservation details [ 194.172505][T16858] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 194.182213][T16857] loop1: detected capacity change from 0 to 8192 [ 194.186416][T16849] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 194.239630][T16857] loop1: p1 p2 p3 p4 [ 194.243834][T16857] loop1: p1 size 108922248 extends beyond EOD, truncated [ 194.251489][T16857] loop1: p2 start 861536256 is beyond EOD, truncated [ 194.258214][T16857] loop1: p3 start 851968 is beyond EOD, truncated [ 194.264740][T16857] loop1: p4 size 65536 extends beyond EOD, truncated [ 194.338176][T16879] loop1: detected capacity change from 0 to 128 [ 194.358276][T16879] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.459069][T16887] wireguard0: entered promiscuous mode [ 194.464686][T16887] wireguard0: entered allmulticast mode [ 194.473011][T14601] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.519924][T16906] netem: change failed [ 194.782371][T16934] syz.3.5337[16934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.791915][T16934] syz.3.5337[16934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.815561][T16934] syz.3.5337[16934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.854747][T16939] loop4: detected capacity change from 0 to 128 [ 194.873977][T16939] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.892811][T16942] random: crng reseeded on system resumption [ 194.899582][T16939] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.026231][T16958] hub 9-0:1.0: USB hub found [ 195.038245][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.039360][T16958] hub 9-0:1.0: 8 ports detected [ 195.048732][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.063583][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.074054][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.083900][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.094430][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.104397][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.114878][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.122176][T16974] loop0: detected capacity change from 0 to 512 [ 195.124792][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.141487][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.141722][T16974] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 195.151326][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.151385][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.164679][T16974] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.5351: iget: special inode unallocated [ 195.172594][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.182635][T16974] EXT4-fs (loop0): get root inode failed [ 195.194544][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.205217][T16974] EXT4-fs (loop0): mount failed [ 195.225735][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.236181][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.247280][T16964] batadv_slave_0: entered promiscuous mode [ 195.255004][T16964] macvlan0: entered promiscuous mode [ 195.260968][T16964] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 195.268631][T16964] Cannot create hsr debugfs directory [ 195.319825][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x7 [ 195.327275][ T3340] hid-generic 0000:0000:0000.0013: ignoring exceeding usage max [ 195.338919][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.347061][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.354653][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.362079][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.369498][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.376903][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.384455][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.391934][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.399451][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.406920][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.414356][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.421846][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.429393][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.436797][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.444231][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.451733][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.459107][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.466576][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.474001][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.481506][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.488907][ T3340] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.500609][ T3340] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.549789][T17011] loop1: detected capacity change from 0 to 128 [ 195.560400][T17011] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.590768][T17013] loop4: detected capacity change from 0 to 128 [ 195.620763][T17024] macvlan0: entered allmulticast mode [ 195.626211][T17024] veth1_vlan: entered allmulticast mode [ 195.635873][T17024] pim6reg: entered allmulticast mode [ 195.653536][T17031] netlink: 'syz.4.5373': attribute type 10 has an invalid length. [ 195.663356][T17031] veth0_macvtap: left promiscuous mode [ 195.672088][T17031] veth0_macvtap: entered promiscuous mode [ 195.679161][T17031] team0: Device macvtap0 failed to register rx_handler [ 195.689097][T17031] veth0_macvtap: left promiscuous mode [ 195.697916][T17024] veth1_vlan: left allmulticast mode [ 195.723368][T17024] macvlan0 (unregistering): left allmulticast mode [ 195.743062][T17049] IPVS: Error joining to the multicast group [ 195.764750][T17053] 9pnet: p9_errstr2errno: server reported unknown error @ [ 195.912550][T17084] syz.3.5394[17084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.041731][T17103] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3976 [ 196.077701][T17105] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 196.125962][T17113] loop4: detected capacity change from 0 to 128 [ 196.188607][T17122] netlink: 'syz.4.5407': attribute type 3 has an invalid length. [ 196.316537][T17134] loop0: detected capacity change from 0 to 1024 [ 196.324156][T17133] loop1: detected capacity change from 0 to 1024 [ 196.332829][T17133] EXT4-fs: Ignoring removed i_version option [ 196.339107][T17134] EXT4-fs: Ignoring removed orlov option [ 196.344908][T17134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.361574][T17133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.375857][T17134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 196.386147][T17134] System zones: 0-1, 3-12 [ 196.391090][T17134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.430767][T14601] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /212/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 196.454262][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.457517][T14601] EXT4-fs (loop1): Remounting filesystem read-only [ 196.649828][T14601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.722076][ T331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.880372][ T331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.002699][ T331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.453425][ T331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.739595][ T331] bridge_slave_1: left allmulticast mode [ 197.745352][ T331] bridge_slave_1: left promiscuous mode [ 197.751048][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.844376][ T331] bridge_slave_0: left allmulticast mode [ 197.850234][ T331] bridge_slave_0: left promiscuous mode [ 197.855929][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.243827][T17166] loop4: detected capacity change from 0 to 512 [ 198.250785][T17166] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.259876][T17166] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5421: corrupted in-inode xattr: invalid ea_ino [ 198.273959][T17166] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.5421: couldn't read orphan inode 15 (err -117) [ 198.286858][T17166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.313844][ T331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.327282][T14613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.336545][ T331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.346959][ T331] bond0 (unregistering): Released all slaves [ 198.355907][T17180] loop4: detected capacity change from 0 to 128 [ 198.365186][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 198.365201][ T29] audit: type=1326 audit(198.359:35333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.403942][ T29] audit: type=1326 audit(198.369:35334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.412508][T17174] syzkaller0: entered promiscuous mode [ 198.426478][ T29] audit: type=1326 audit(198.369:35335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.426514][ T29] audit: type=1326 audit(198.369:35336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.432004][T17174] syzkaller0: entered allmulticast mode [ 198.454585][ T29] audit: type=1326 audit(198.369:35337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.515791][ T29] audit: type=1326 audit(198.489:35338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.538355][ T29] audit: type=1326 audit(198.499:35339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.560990][ T29] audit: type=1326 audit(198.499:35340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bfd8def9 code=0x7ffc0000 [ 198.598584][ T29] audit: type=1400 audit(198.579:35341): avc: denied { ioctl } for pid=17195 comm="syz.4.5425" path="socket:[52625]" dev="sockfs" ino=52625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.682312][ T331] hsr_slave_0: left promiscuous mode [ 198.691413][ T331] hsr_slave_1: left promiscuous mode [ 198.698830][ T29] audit: type=1400 audit(198.679:35342): avc: denied { search } for pid=17228 comm="syz.3.5429" name="/" dev="configfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.722767][ T331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.730316][ T331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.739748][ T331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.747167][ T331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.769362][ T331] veth1_macvtap: left promiscuous mode [ 198.774924][ T331] veth0_macvtap: left promiscuous mode [ 198.780496][ T331] veth1_vlan: left promiscuous mode [ 198.785773][ T331] veth0_vlan: left promiscuous mode [ 198.795441][T17231] loop4: detected capacity change from 0 to 8192 [ 198.909958][ T331] pim6reg (unregistering): left allmulticast mode [ 199.000645][ T331] team0 (unregistering): Port device team_slave_1 removed [ 199.033491][ T331] team0 (unregistering): Port device team_slave_0 removed [ 199.219885][T17318] loop3: detected capacity change from 0 to 512 [ 199.242083][T17318] EXT4-fs: Ignoring removed orlov option [ 199.244864][T17162] chnl_net:caif_netlink_parms(): no params data found [ 199.255875][T17318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.277303][T17318] EXT4-fs (loop3): orphan cleanup on readonly fs [ 199.301757][T17318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5438: bg 0: block 248: padding at end of block bitmap is not set [ 199.327916][T17318] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.5438: Failed to acquire dquot type 1 [ 199.358736][T17162] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.366008][T17162] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.382511][T17162] bridge_slave_0: entered allmulticast mode [ 199.392310][T17318] EXT4-fs (loop3): 1 truncate cleaned up [ 199.398148][T17162] bridge_slave_0: entered promiscuous mode [ 199.406155][T17318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.413869][T17162] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.425686][T17162] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.435869][T17318] EXT4-fs: Ignoring removed orlov option [ 199.449100][T17318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.457175][T17162] bridge_slave_1: entered allmulticast mode [ 199.467881][T17318] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.5438: Abort forced by user [ 199.471111][T17162] bridge_slave_1: entered promiscuous mode [ 199.518669][T17318] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 199.556386][T17318] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 199.559779][T17162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.604943][T17162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.616058][T14612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.655975][T17162] team0: Port device team_slave_0 added [ 199.677320][T17162] team0: Port device team_slave_1 added [ 199.722910][T17162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.729926][T17162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.756017][T17162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.774066][T17162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.781110][T17162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.807133][T17162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.850637][T17162] hsr_slave_0: entered promiscuous mode [ 199.860122][T17162] hsr_slave_1: entered promiscuous mode [ 199.866757][T17162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.881075][T17162] Cannot create hsr debugfs directory [ 200.136616][T17706] loop4: detected capacity change from 0 to 128 [ 200.158371][T17706] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.197391][T14613] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.204722][T17162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.216894][T17162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.234837][T17162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.242929][T17733] loop3: detected capacity change from 0 to 1024 [ 200.252179][T17733] EXT4-fs: Ignoring removed i_version option [ 200.259568][T17162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.266733][T17739] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 200.276549][T17733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.335719][T14612] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /186/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 200.372442][T17162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.382924][T14612] EXT4-fs (loop3): Remounting filesystem read-only [ 200.397047][T17162] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.425018][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.432115][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.455514][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.462615][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.566979][T17162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.581048][T14612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.604824][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.657225][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.677469][T17162] veth0_vlan: entered promiscuous mode [ 200.687619][T17162] veth1_vlan: entered promiscuous mode [ 200.697674][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.719089][T17162] veth0_macvtap: entered promiscuous mode [ 200.727807][T17162] veth1_macvtap: entered promiscuous mode [ 200.739089][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.749659][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.759503][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.770048][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.779864][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.790344][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.800182][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.810687][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.820543][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.831055][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.840942][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.851460][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.861275][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.871830][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.883207][T17162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.896012][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.910811][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.921325][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.931227][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.941804][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.951678][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.962161][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.972043][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.982499][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.992423][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.003085][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.012920][T17162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.023334][T17162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.034323][T17162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.051954][T17162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.060706][T17162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.069425][T17162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.078129][T17162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.158699][T17871] loop0: detected capacity change from 0 to 1024 [ 201.165485][ T50] bridge_slave_1: left allmulticast mode [ 201.171294][ T50] bridge_slave_1: left promiscuous mode [ 201.177021][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.177057][T17871] EXT4-fs: Ignoring removed i_version option [ 201.191330][ T50] bridge_slave_0: left allmulticast mode [ 201.197031][ T50] bridge_slave_0: left promiscuous mode [ 201.202903][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.211937][T17871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.254911][T14603] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /158/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.277113][T14603] EXT4-fs (loop0): Remounting filesystem read-only [ 201.295255][T14918] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.342060][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.352830][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.363326][ T50] bond0 (unregistering): Released all slaves [ 201.373695][T17793] chnl_net:caif_netlink_parms(): no params data found [ 201.469404][ T50] hsr_slave_0: left promiscuous mode [ 201.483368][ T50] hsr_slave_1: left promiscuous mode [ 201.489771][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.497377][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.505004][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.512718][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.522336][ T50] veth1_macvtap: left promiscuous mode [ 201.527838][ T50] veth0_macvtap: left promiscuous mode [ 201.533479][ T50] veth1_vlan: left promiscuous mode [ 201.538961][ T50] veth0_vlan: left promiscuous mode [ 201.633917][ T50] team0 (unregistering): Port device team_slave_1 removed [ 201.644640][ T50] team0 (unregistering): Port device team_slave_0 removed [ 201.688722][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.695928][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.704058][T17793] bridge_slave_0: entered allmulticast mode [ 201.713447][T17793] bridge_slave_0: entered promiscuous mode [ 201.734647][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.741971][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.749534][T17793] bridge_slave_1: entered allmulticast mode [ 201.756022][T17793] bridge_slave_1: entered promiscuous mode [ 201.797995][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.808986][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.841848][T17793] team0: Port device team_slave_0 added [ 201.848564][T17793] team0: Port device team_slave_1 added [ 201.877466][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.884688][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.910764][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.924350][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.931343][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.957316][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.991241][T17793] hsr_slave_0: entered promiscuous mode [ 201.998684][T17793] hsr_slave_1: entered promiscuous mode [ 202.004899][T17793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.007877][T18116] loop4: detected capacity change from 0 to 164 [ 202.020567][T17793] Cannot create hsr debugfs directory [ 202.037668][T18116] bio_check_eod: 10210 callbacks suppressed [ 202.037686][T18116] syz.4.5487: attempt to access beyond end of device [ 202.037686][T18116] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 202.066503][T18116] syz.4.5487: attempt to access beyond end of device [ 202.066503][T18116] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 202.152558][T18170] netlink: 'syz.1.5490': attribute type 2 has an invalid length. [ 202.283302][T17989] chnl_net:caif_netlink_parms(): no params data found [ 202.312562][T18333] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 202.356681][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.363866][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.371121][T17989] bridge_slave_0: entered allmulticast mode [ 202.377692][T17989] bridge_slave_0: entered promiscuous mode [ 202.384567][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.391850][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.399023][T17989] bridge_slave_1: entered allmulticast mode [ 202.405492][T17989] bridge_slave_1: entered promiscuous mode [ 202.432104][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.443057][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.464464][T17989] team0: Port device team_slave_0 added [ 202.473667][T17989] team0: Port device team_slave_1 added [ 202.495941][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.502974][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.528988][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.544103][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.551186][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.577164][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.602495][T17793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.623371][T17793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.636025][T17989] hsr_slave_0: entered promiscuous mode [ 202.643211][T17989] hsr_slave_1: entered promiscuous mode [ 202.649252][T17989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.656854][T17989] Cannot create hsr debugfs directory [ 202.667627][T17793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.686669][T17793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.730650][T18530] bpf_get_probe_write_proto: 2 callbacks suppressed [ 202.730684][T18530] syz.1.5504[18530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.738953][T18530] syz.1.5504[18530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.750528][T18530] syz.1.5504[18530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.765258][T18530] serio: Serial port ptm0 [ 202.805104][T17989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.837431][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.850605][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.860396][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.867530][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.902607][T17989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.923999][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.931188][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.968668][T17989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.006004][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.033296][T17989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.099140][T17793] veth0_vlan: entered promiscuous mode [ 203.108510][T17989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.124364][T17989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.138942][T17989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.141812][T18605] loop1: detected capacity change from 0 to 2048 [ 203.149570][T18607] loop4: detected capacity change from 0 to 2048 [ 203.161706][T17989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.171145][T17793] veth1_vlan: entered promiscuous mode [ 203.177910][T18605] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 203.186323][T18605] System zones: 0-7 [ 203.192262][ T329] bridge_slave_1: left allmulticast mode [ 203.192287][T18605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.197937][ T329] bridge_slave_1: left promiscuous mode [ 203.198044][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.224029][ T329] bridge_slave_0: left allmulticast mode [ 203.229938][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.239885][T18607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.252005][T17162] EXT4-fs error (device loop1): __ext4_iget:4952: inode #17: block 1803188595: comm syz-executor: invalid block [ 203.255015][T17162] EXT4-fs error (device loop1): __ext4_iget:4952: inode #17: block 1803188595: comm syz-executor: invalid block [ 203.268613][T18607] Invalid ELF header len 4 [ 203.300853][T14613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.340062][ T329] geneve1 (unregistering): left allmulticast mode [ 203.347920][ T329] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 203.359663][ T329] macvlan2 (unregistering): left promiscuous mode [ 203.369741][ T329] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 203.377992][ T329] bridge0 (unregistering): left promiscuous mode [ 203.531571][ T329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.540429][ T329] bond_slave_0: left promiscuous mode [ 203.547383][ T329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.556538][ T329] bond_slave_1: left promiscuous mode [ 203.563372][ T329] bond0 (unregistering): Released all slaves [ 203.588172][T17793] veth0_macvtap: entered promiscuous mode [ 203.598567][T17793] veth1_macvtap: entered promiscuous mode [ 203.611900][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.622515][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.632394][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.642880][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.652709][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.663171][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.673091][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.683552][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.693368][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.703833][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.713765][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.724249][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.734177][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.744786][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.755476][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.765935][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.776427][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.786280][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.796847][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.806758][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.817203][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.827035][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.837648][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.847516][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.858005][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.867837][T17793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.878368][T17793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.889143][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.901845][ T329] tipc: Left network mode [ 203.908023][T17793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.916946][T17793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.925827][T17793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.934551][T17793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.965991][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.977793][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.990178][ T329] hsr_slave_0: left promiscuous mode [ 203.995838][ T329] hsr_slave_1: left promiscuous mode [ 204.006332][ T329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.013901][ T329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.030894][ T329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.038354][ T329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.049712][ T329] veth1_macvtap: left promiscuous mode [ 204.055298][ T329] veth0_macvtap: left promiscuous mode [ 204.060912][ T329] veth1_vlan: left promiscuous mode [ 204.066134][ T329] veth0_vlan: left promiscuous mode [ 204.152493][ T329] team0 (unregistering): Port device team_slave_1 removed [ 204.163337][ T329] team0 (unregistering): Port device team_slave_0 removed [ 204.211041][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.218126][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.229407][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.236482][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.305222][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.335753][T18650] loop4: detected capacity change from 0 to 1024 [ 204.344855][T18650] EXT4-fs: Ignoring removed i_version option [ 204.372888][T18650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.405929][T14613] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /192/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 204.406750][T17989] veth0_vlan: entered promiscuous mode [ 204.433360][T14613] EXT4-fs (loop4): Remounting filesystem read-only [ 204.440604][T17989] veth1_vlan: entered promiscuous mode [ 204.472201][T17989] veth0_macvtap: entered promiscuous mode [ 204.478918][T15777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.479655][T17989] veth1_macvtap: entered promiscuous mode [ 204.497789][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.508279][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.518285][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.528752][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.538601][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.549095][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.559007][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.569571][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.579453][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.589897][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.599773][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.610250][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.620095][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.630884][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.641922][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.666456][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.676975][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.686845][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.697335][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.707230][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.717811][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.727700][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.738164][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.748003][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.758437][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.768357][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.778800][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.790017][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.808358][T17989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.817281][T17989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.826212][T17989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.834976][T17989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.894058][T18676] __nla_validate_parse: 9 callbacks suppressed [ 204.894073][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 204.911119][T18676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.957142][T18684] loop0: detected capacity change from 0 to 128 [ 204.966891][T18682] loop3: detected capacity change from 0 to 512 [ 204.975504][T18684] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.991464][T18684] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.000890][T18682] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 205.009076][T18682] EXT4-fs (loop3): orphan cleanup on readonly fs [ 205.027804][T18682] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.045057][ T5430] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.056871][T18682] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 205.075189][T18682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5525: bg 0: block 40: padding at end of block bitmap is not set [ 205.092980][T18682] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 205.120304][T18682] EXT4-fs (loop3): 1 truncate cleaned up [ 205.126600][T18682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.138128][T18677] chnl_net:caif_netlink_parms(): no params data found [ 205.144415][T18682] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.5525: corrupted xattr block 31: invalid header [ 205.163097][T18682] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 205.172202][T18682] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.5525: corrupted xattr block 31: invalid header [ 205.187921][T18682] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 205.197008][T18682] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.5525: bad symlink. [ 205.224001][T17793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.242409][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.249698][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.256941][T18677] bridge_slave_0: entered allmulticast mode [ 205.263782][T18677] bridge_slave_0: entered promiscuous mode [ 205.271604][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.278783][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.286024][T18677] bridge_slave_1: entered allmulticast mode [ 205.292707][T18677] bridge_slave_1: entered promiscuous mode [ 205.328216][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.339304][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.351211][T18888] serio: Serial port ptm0 [ 205.363104][T18677] team0: Port device team_slave_0 added [ 205.369939][T18677] team0: Port device team_slave_1 added [ 205.387757][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.394898][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.420896][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.432635][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.439877][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.465851][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.497297][T18677] hsr_slave_0: entered promiscuous mode [ 205.503375][T18677] hsr_slave_1: entered promiscuous mode [ 205.509865][T18677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.511279][T17162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.517440][T18677] Cannot create hsr debugfs directory [ 205.538064][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.622527][T18677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.644796][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.673799][T18677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.723491][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.766343][T18677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.803032][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.816401][T18998] chnl_net:caif_netlink_parms(): no params data found [ 205.845086][T18677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.885595][T18998] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.892789][T18998] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.900411][T18998] bridge_slave_0: entered allmulticast mode [ 205.906761][T18998] bridge_slave_0: entered promiscuous mode [ 205.917529][T18998] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.924918][T18998] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.932297][T18998] bridge_slave_1: entered allmulticast mode [ 205.938630][T18998] bridge_slave_1: entered promiscuous mode [ 205.968925][T18998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.981005][T18998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.990479][ T50] bridge_slave_1: left allmulticast mode [ 205.996165][ T50] bridge_slave_1: left promiscuous mode [ 206.002027][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.012683][ T50] bridge_slave_0: left allmulticast mode [ 206.018441][ T50] bridge_slave_0: left promiscuous mode [ 206.024360][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.132005][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.142573][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.152856][ T50] bond0 (unregistering): Released all slaves [ 206.196939][T18998] team0: Port device team_slave_0 added [ 206.203558][T18998] team0: Port device team_slave_1 added [ 206.236547][ T50] hsr_slave_0: left promiscuous mode [ 206.242462][ T50] hsr_slave_1: left promiscuous mode [ 206.248461][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.255997][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.263803][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.271522][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.280938][ T50] veth1_macvtap: left promiscuous mode [ 206.286422][ T50] veth0_macvtap: left promiscuous mode [ 206.292075][ T50] veth1_vlan: left promiscuous mode [ 206.297386][ T50] veth0_vlan: left promiscuous mode [ 206.383305][ T50] team0 (unregistering): Port device team_slave_1 removed [ 206.395081][ T50] team0 (unregistering): Port device team_slave_0 removed [ 206.432876][T18677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.442586][T18677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.457667][T18998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.464650][T18998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.490852][T18998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.504135][T18677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.513844][T18998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.520830][T18998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.546825][T18998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.561424][T18677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.596119][T18998] hsr_slave_0: entered promiscuous mode [ 206.602249][T18998] hsr_slave_1: entered promiscuous mode [ 206.608212][T18998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.616104][T18998] Cannot create hsr debugfs directory [ 206.696996][T18677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.741187][T18677] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.766964][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.774145][ T5430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.803495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.810722][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.839101][T19233] chnl_net:caif_netlink_parms(): no params data found [ 206.900512][T19233] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.907594][T19233] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.914882][T19233] bridge_slave_0: entered allmulticast mode [ 206.922448][T19233] bridge_slave_0: entered promiscuous mode [ 206.939515][T19233] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.946673][T19233] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.954097][T19233] bridge_slave_1: entered allmulticast mode [ 206.960951][T19233] bridge_slave_1: entered promiscuous mode [ 206.998912][T19233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.018139][T18998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.040761][T19233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.062829][T18998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.071828][T18998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.086606][T19233] team0: Port device team_slave_0 added [ 207.097849][T19611] dvmrp5: entered allmulticast mode [ 207.103726][T18998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.106334][T19611] syz.0.5542[19611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.110794][T19611] syz.0.5542[19611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.122487][T19611] syz.0.5542[19611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.136554][T19233] team0: Port device team_slave_1 added [ 207.177597][T19233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.184668][T19233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.210834][T19233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.223584][T19611] dvmrp5: left allmulticast mode [ 207.234340][T19233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.241363][T19233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.267325][T19233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.279863][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.341316][T19233] hsr_slave_0: entered promiscuous mode [ 207.351864][T19233] hsr_slave_1: entered promiscuous mode [ 207.359377][T19233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.367032][T19233] Cannot create hsr debugfs directory [ 207.378975][T19695] loop0: detected capacity change from 0 to 1024 [ 207.392733][T19695] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 207.401091][T18998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.424927][T19695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.451941][T19695] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 207.454012][T18998] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.481826][T17989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.521523][T19761] loop0: detected capacity change from 0 to 512 [ 207.534664][T19761] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.543804][T19761] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 207.553509][T19761] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 207.570368][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.586115][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.593224][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.605806][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.612902][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.625752][T19588] chnl_net:caif_netlink_parms(): no params data found [ 207.713179][T18677] veth0_vlan: entered promiscuous mode [ 207.724673][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.763044][T19233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.790871][T19588] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.798007][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.805392][T19588] bridge_slave_0: entered allmulticast mode [ 207.812376][T19588] bridge_slave_0: entered promiscuous mode [ 207.824658][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.837069][T19588] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.844284][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.846487][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 207.846503][ T29] audit: type=1400 audit(207.839:35379): avc: denied { create } for pid=19938 comm="syz.0.5552" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.851614][T19588] bridge_slave_1: entered allmulticast mode [ 207.869209][ T29] audit: type=1400 audit(207.849:35380): avc: denied { write } for pid=19938 comm="syz.0.5552" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.884692][T19588] bridge_slave_1: entered promiscuous mode [ 207.905947][ T29] audit: type=1400 audit(207.849:35381): avc: denied { open } for pid=19938 comm="syz.0.5552" path="/18/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.934130][ T29] audit: type=1400 audit(207.849:35382): avc: denied { ioctl } for pid=19938 comm="syz.0.5552" path="/18/file0" dev="tmpfs" ino=110 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.959047][ T29] audit: type=1400 audit(207.909:35383): avc: denied { unlink } for pid=17989 comm="syz-executor" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.984081][T18677] veth1_vlan: entered promiscuous mode [ 208.006816][T19233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.030475][T19588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.041350][T19588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.062539][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.077682][T18677] veth0_macvtap: entered promiscuous mode [ 208.104527][T19233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.118874][T19588] team0: Port device team_slave_0 added [ 208.126018][T19588] team0: Port device team_slave_1 added [ 208.149512][T18677] veth1_macvtap: entered promiscuous mode [ 208.164356][T18998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.176553][T19588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.183590][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.209762][T19588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.221354][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.231905][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.241761][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.252220][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.262208][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.272724][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.282609][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.293100][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.303097][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.313924][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.323938][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.334442][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.344303][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.354727][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.370682][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.396937][T19588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.403981][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.430190][T19588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.447989][T19233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.463815][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.474499][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.484425][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.494865][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.504710][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.515228][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.525104][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.535546][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.545391][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.555980][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.565950][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.576483][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.590770][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.600558][T18677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.609352][T18677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.618068][T18677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.626821][T18677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.711320][T19588] hsr_slave_0: entered promiscuous mode [ 208.725255][T19588] hsr_slave_1: entered promiscuous mode [ 208.738580][T19588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.750398][T19588] Cannot create hsr debugfs directory [ 208.756103][ T36] bridge_slave_1: left allmulticast mode [ 208.761828][ T36] bridge_slave_1: left promiscuous mode [ 208.767594][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.777413][ T29] audit: type=1400 audit(208.769:35384): avc: denied { sqpoll } for pid=20109 comm="syz.0.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.779697][ T36] bridge_slave_0: left allmulticast mode [ 208.802380][ T36] bridge_slave_0: left promiscuous mode [ 208.808045][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.830509][ T29] audit: type=1400 audit(208.819:35385): avc: denied { getopt } for pid=20109 comm="syz.0.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.902057][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.914410][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.925279][ T36] bond0 (unregistering): Released all slaves [ 208.941625][T20113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.972575][T19233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.004929][ T29] audit: type=1400 audit(208.989:35386): avc: denied { watch watch_reads } for pid=20143 comm="syz.0.5569" path="/33/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.029097][T20144] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5568'. [ 209.039263][T20144] 0X: renamed from caif0 [ 209.046072][T20144] 0X: entered allmulticast mode [ 209.051362][T20144] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 209.067072][T19233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.085425][T18998] veth0_vlan: entered promiscuous mode [ 209.094949][ T29] audit: type=1326 audit(209.079:35387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.0.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea7d7def9 code=0x7ffc0000 [ 209.111453][T20165] loop0: detected capacity change from 0 to 128 [ 209.118234][ T29] audit: type=1326 audit(209.079:35388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.0.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7feea7d7def9 code=0x7ffc0000 [ 209.129037][T20165] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.166991][ T36] hsr_slave_0: left promiscuous mode [ 209.175782][ T36] hsr_slave_1: left promiscuous mode [ 209.184401][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.192066][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.196467][T17989] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.208952][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.216529][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.229021][ T36] veth1_macvtap: left promiscuous mode [ 209.234643][ T36] veth0_macvtap: left promiscuous mode [ 209.240378][ T36] veth1_vlan: left promiscuous mode [ 209.245627][ T36] veth0_vlan: left promiscuous mode [ 209.247960][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.260376][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.287635][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.306365][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.364634][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.373742][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5575'. [ 209.424139][ T36] team0 (unregistering): Port device team_slave_1 removed [ 209.437385][ T36] team0 (unregistering): Port device team_slave_0 removed [ 209.501412][T19233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.515725][T18998] veth1_vlan: entered promiscuous mode [ 209.526448][T19233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.585267][T18998] veth0_macvtap: entered promiscuous mode [ 209.605360][T18998] veth1_macvtap: entered promiscuous mode [ 209.628562][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.639075][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.649001][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.659448][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.669531][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.680001][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.689828][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.700401][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.710262][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.720720][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.730573][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.741025][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.751121][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.761699][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.773778][T18998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.792138][T19233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.804926][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.815556][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.825550][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.836222][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.846149][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.856614][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.866501][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.877034][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.886905][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.897578][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.907406][T18998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.918024][T18998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.929951][T18998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.950467][T19233] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.962516][T18998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.971321][T18998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.980195][T18998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.988907][T18998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.002723][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.009850][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.026084][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.033192][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.139570][T20281] syz.0.5593[20281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.139728][T19233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.142011][T20281] syz.0.5593[20281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.159227][T20281] syz.0.5593[20281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.204354][T19588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.229776][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 210.230303][T19588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.249547][T19588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.256345][T20301] loop1: detected capacity change from 0 to 512 [ 210.268905][T19588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.271874][T20280] syz.0.5593 (20280) used greatest stack depth: 4248 bytes left [ 210.287764][T20301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.317312][T20308] syz.0.5595[20308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.317372][T20308] syz.0.5595[20308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.328066][T19588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.356600][T19233] veth0_vlan: entered promiscuous mode [ 210.372046][T19588] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.373150][T18998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 210.389073][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.395759][T20308] syz.0.5595[20308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.396152][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.417021][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.424190][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.438239][T19233] veth1_vlan: entered promiscuous mode [ 210.473258][T20317] random: crng reseeded on system resumption [ 210.473337][T19233] veth0_macvtap: entered promiscuous mode [ 210.504651][T19233] veth1_macvtap: entered promiscuous mode [ 210.517868][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.528462][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.538446][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.548898][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.558822][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.569264][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.579076][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.589534][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.599362][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.609800][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.619640][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.630203][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.640138][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.650592][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.660436][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.670873][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.684131][T19233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.715546][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.726071][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.735994][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.746470][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.756429][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.767123][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.777025][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.787554][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.797513][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.807994][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.818162][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.828710][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.838701][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.849222][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.862920][T19233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.871920][T19233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.880702][T19233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.889431][T19233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.898205][T19233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.946490][T19588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.001407][T20344] serio: Serial port ptm0 [ 211.057247][T19588] veth0_vlan: entered promiscuous mode [ 211.068798][T19588] veth1_vlan: entered promiscuous mode [ 211.103192][T19588] veth0_macvtap: entered promiscuous mode [ 211.126009][T19588] veth1_macvtap: entered promiscuous mode [ 211.138437][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.148952][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.158821][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.169290][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.179142][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.189767][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.199685][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.210283][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.220302][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.230770][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.240621][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.251081][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.260922][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.271556][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.281435][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.291902][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.301720][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.312168][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.325079][T19588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.333895][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.344543][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.354458][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.364895][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.374731][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.385204][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.395193][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.405645][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.415491][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.425951][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.435940][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.446398][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.456255][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.466719][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.476595][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.487045][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.499421][T19588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.520581][T19588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.529495][T19588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.538219][T19588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.547059][T19588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.660885][T20390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5624'. [ 211.710971][T20400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.719978][T20400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.730140][T20404] sd 0:0:1:0: device reset [ 211.782212][T20413] loop2: detected capacity change from 0 to 512 [ 211.789363][T20413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.801710][T20413] EXT4-fs (loop2): 1 truncate cleaned up [ 211.807922][T20413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.838087][T19233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.878761][T20429] loop2: detected capacity change from 0 to 512 [ 211.885710][T20429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.893949][T20429] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 211.901934][T20429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=3802c01c, mo2=0002] [ 211.910652][T20429] System zones: 1-12 [ 211.914706][T20429] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 211.924274][T20429] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 211.933516][T20429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.946915][T20434] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5638'. [ 211.957745][T20431] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5638'. [ 211.967773][T20429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5637'. [ 211.987129][T19233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.993761][T20436] syz.1.5640[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.996402][T20436] syz.1.5640[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.007997][T20436] syz.1.5640[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.068716][T20448] loop2: detected capacity change from 0 to 1024 [ 212.087751][T20448] EXT4-fs: Ignoring removed i_version option [ 212.099071][T20450] loop1: detected capacity change from 0 to 764 [ 212.108662][T20448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.126446][T20448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 212.141632][T20448] EXT4-fs (loop2): Remounting filesystem read-only [ 212.148849][T20448] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 212.166731][T19233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.291991][T20474] xt_TCPMSS: Only works on TCP SYN packets [ 212.451474][T20492] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 212.543343][T20508] loop2: detected capacity change from 0 to 4096 [ 212.552888][T20508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.584193][T19233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.589077][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5670'. [ 212.654421][T20525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20525 comm=syz.0.5673 [ 212.726928][T20535] bond0: option mode: unable to set because the bond device has slaves [ 212.895139][T20552] loop2: detected capacity change from 0 to 512 [ 212.909569][T20552] EXT4-fs: Ignoring removed bh option [ 212.916320][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5687'. [ 212.937220][T20552] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5686: corrupted in-inode xattr: invalid ea_ino [ 212.952296][T20552] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.5686: couldn't read orphan inode 15 (err -117) [ 212.965422][T20552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.047825][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5688'. [ 213.181207][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 213.181239][ T29] audit: type=1326 audit(213.159:35460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.210472][ T29] audit: type=1326 audit(213.159:35461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.233875][ T29] audit: type=1326 audit(213.159:35462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.256843][ T29] audit: type=1326 audit(213.159:35463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.279935][ T29] audit: type=1326 audit(213.159:35464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.303149][ T29] audit: type=1326 audit(213.169:35465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.326340][ T29] audit: type=1326 audit(213.169:35466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.349418][ T29] audit: type=1326 audit(213.169:35467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.372511][ T29] audit: type=1326 audit(213.169:35468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 213.395534][ T29] audit: type=1326 audit(213.169:35469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac5fdef9 code=0x7ffc0000 [ 214.031840][T20641] bond1: entered promiscuous mode [ 214.035048][T20597] coredump: 31(syz.4.5692): written to core: VMAs: 28, size 91054080; core: 62095990 bytes, pos 91062272 [ 214.036933][T20641] bond1: entered allmulticast mode [ 214.053685][T20641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.066334][T20641] bond1 (unregistering): Released all slaves [ 214.213615][T20718] loop1: detected capacity change from 0 to 512 [ 214.222901][T20718] EXT4-fs: Ignoring removed orlov option [ 214.229122][T20718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.267252][T20718] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.277175][T20718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5712: bg 0: block 248: padding at end of block bitmap is not set [ 214.293214][T20718] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.5712: Failed to acquire dquot type 1 [ 214.305260][T20718] EXT4-fs (loop1): 1 truncate cleaned up [ 214.313951][T20718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.333256][T20718] EXT4-fs: Ignoring removed orlov option [ 214.349411][T20718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.365501][T20718] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.5712: Abort forced by user [ 214.386139][T20718] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 214.403573][T20718] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 214.426905][T18998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.449080][T20749] loop4: detected capacity change from 0 to 1024 [ 214.457333][T20749] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 214.467059][T20749] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 214.485685][T20749] EXT4-fs (loop4): invalid journal inode [ 214.491476][T20749] EXT4-fs (loop4): can't get journal size [ 214.522668][T20749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.524839][T19233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.557739][T18677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.631680][T20778] loop4: detected capacity change from 0 to 512 [ 214.650823][T20771] syzkaller0: entered promiscuous mode [ 214.656416][T20771] syzkaller0: entered allmulticast mode [ 215.207441][T20913] loop3: detected capacity change from 0 to 512 [ 215.223736][T20913] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.237862][T20913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.259837][T20913] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5743: corrupted in-inode xattr: e_value out of bounds [ 215.301485][T20913] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5743: couldn't read orphan inode 15 (err -117) [ 215.751875][T20982] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 215.761455][T20982] SELinux: failed to load policy [ 216.022908][T21040] loop2: detected capacity change from 0 to 512 [ 216.115270][T21068] SELinux: policydb version -544360880 does not match my version range 15-33 [ 216.124400][T21068] SELinux: failed to load policy [ 216.236968][T21088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5780'. [ 216.261191][T21088] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 216.273763][T21092] loop0: detected capacity change from 0 to 1024 [ 216.286222][T21098] veth0_vlan: entered allmulticast mode [ 216.300151][T21092] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 216.346180][T21098] : renamed from vlan0 [ 216.414583][T21120] syz.2.5788[21120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.414698][T21120] syz.2.5788[21120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.427060][T21120] syz.2.5788[21120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.488450][T21129] loop1: detected capacity change from 0 to 2048 [ 216.550214][T21129] loop1: p3 < > p4 < > [ 216.554413][T21129] loop1: partition table partially beyond EOD, truncated [ 216.562060][T21129] loop1: p3 start 4284289 is beyond EOD, truncated [ 216.642872][T21120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.659514][T21120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.826139][T21173] random: crng reseeded on system resumption [ 216.907339][ T3343] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 216.915159][ T3343] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 216.922876][ T3343] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 216.939290][ T3343] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 217.082110][T20855] ================================================================== [ 217.090248][T20855] BUG: KCSAN: data-race in alloc_pid / copy_process [ 217.096881][T20855] [ 217.099208][T20855] read-write to 0xffffffff8665d878 of 4 bytes by task 20824 on cpu 0: [ 217.107369][T20855] alloc_pid+0x542/0x6f0 [ 217.111636][T20855] copy_process+0xe72/0x1f90 [ 217.116244][T20855] kernel_clone+0x167/0x5e0 [ 217.120775][T20855] user_mode_thread+0x7d/0xb0 [ 217.125471][T20855] call_usermodehelper_exec_work+0x41/0x150 [ 217.131421][T20855] process_scheduled_works+0x483/0x9a0 [ 217.136903][T20855] worker_thread+0x51d/0x6f0 [ 217.141509][T20855] kthread+0x1d1/0x210 [ 217.145588][T20855] ret_from_fork+0x4b/0x60 [ 217.150024][T20855] ret_from_fork_asm+0x1a/0x30 [ 217.154804][T20855] [ 217.157129][T20855] read to 0xffffffff8665d878 of 4 bytes by task 20855 on cpu 1: [ 217.164765][T20855] copy_process+0x1799/0x1f90 [ 217.169465][T20855] kernel_clone+0x167/0x5e0 [ 217.173999][T20855] user_mode_thread+0x7d/0xb0 [ 217.178695][T20855] call_usermodehelper_exec_work+0x41/0x150 [ 217.184612][T20855] process_scheduled_works+0x483/0x9a0 [ 217.190087][T20855] worker_thread+0x51d/0x6f0 [ 217.194681][T20855] kthread+0x1d1/0x210 [ 217.198754][T20855] ret_from_fork+0x4b/0x60 [ 217.203189][T20855] ret_from_fork_asm+0x1a/0x30 [ 217.207975][T20855] [ 217.210298][T20855] value changed: 0x800000ff -> 0x80000100 [ 217.216017][T20855] [ 217.218342][T20855] Reported by Kernel Concurrency Sanitizer on: [ 217.224497][T20855] CPU: 1 UID: 0 PID: 20855 Comm: kworker/u8:30 Tainted: G W 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 217.236662][T20855] Tainted: [W]=WARN [ 217.240459][T20855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.250513][T20855] Workqueue: events_unbound call_usermodehelper_exec_work [ 217.257647][T20855] ==================================================================