last executing test programs: 2.324631653s ago: executing program 2 (id=7317): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x81, 0x0, 0x1, 0x69}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) 2.283241269s ago: executing program 2 (id=7318): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @random="4894826645f8", @val={@void}, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="46d588477cc4", @dev, @link_local, @loopback}}}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7fffff, 0x10, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230305000700600000000200002075"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000980)={'macvtap0\x00', &(0x7f0000000340)=@ethtool_dump}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x26) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x20001f00) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 2.202628241s ago: executing program 2 (id=7319): socket(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) socket(0x840000000002, 0x3, 0xff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r12 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40088a01, &(0x7f0000000000)=0x100) r13 = socket$inet(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2.169253056s ago: executing program 4 (id=7322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000dc0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0xffffffffffffffca}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 2.141552601s ago: executing program 4 (id=7324): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) tee(r0, r3, 0xfffffffffffffc01, 0x0) 1.302936579s ago: executing program 2 (id=7330): io_uring_setup(0x11df, &(0x7f0000000440)={0x0, 0x0, 0x200, 0x0, 0x3}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x802800, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x1, 0x124b, &(0x7f0000001880)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") quotactl$Q_GETINFO(0x0, &(0x7f0000000040)=@sg0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0xb14c) writev(r7, &(0x7f0000001580)=[{&(0x7f0000000140)='T', 0x1}], 0x1) 1.274826154s ago: executing program 4 (id=7332): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @printk]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\b\x00\x00\x00\x00\x00', &(0x7f0000000380)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0), 0x54}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) fsopen(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_procfs$userns(0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r3, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x200004, 0x5}, 0x48) 1.097803991s ago: executing program 1 (id=7336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x4}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) close(0xffffffffffffffff) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x40000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x40000002, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x20, 0x46, 0x0, @broadcast}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380), 0xc, 0x0}, 0x0) 939.761005ms ago: executing program 1 (id=7337): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x81, 0x0, 0x1, 0x69}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) 840.69172ms ago: executing program 1 (id=7338): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 788.000988ms ago: executing program 1 (id=7339): r0 = socket(0x1, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/218, 0xda}], 0x1}}], 0x2, 0x10063, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 771.204861ms ago: executing program 2 (id=7340): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1b"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 761.396362ms ago: executing program 1 (id=7341): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x40, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @remote}, 0x10) 749.799404ms ago: executing program 1 (id=7342): socket(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) socket(0x840000000002, 0x3, 0xff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r12 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40088a01, &(0x7f0000000000)=0x100) r13 = socket$inet(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 626.056393ms ago: executing program 2 (id=7343): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) tee(r0, r3, 0xfffffffffffffc01, 0x0) 393.176429ms ago: executing program 0 (id=7345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 391.751899ms ago: executing program 4 (id=7346): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 317.6975ms ago: executing program 0 (id=7347): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 290.552805ms ago: executing program 0 (id=7349): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 219.021266ms ago: executing program 0 (id=7350): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @random="4894826645f8", @val={@void}, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="46d588477cc4", @dev, @link_local, @loopback}}}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7fffff, 0x10, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230305000700600000000200002075"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000980)={'macvtap0\x00', &(0x7f0000000340)=@ethtool_dump}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x26) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x20001f00) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 206.397018ms ago: executing program 4 (id=7351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 193.05597ms ago: executing program 3 (id=7352): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x40, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @remote}, 0x10) 173.979593ms ago: executing program 3 (id=7353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffe90}}]}, 0x4c}}, 0x0) 159.726095ms ago: executing program 0 (id=7354): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000670000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008fb0000b70300000000002b640000000600000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) pipe2(&(0x7f0000000040), 0x0) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fbc000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000a00cc"], 0x44}}, 0x0) 152.689886ms ago: executing program 4 (id=7355): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffff3e) sendmsg$nl_route_sched(r3, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x24, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r4, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3fffffff, 0x0, "23fcb273b504badcdb525893bdfe7da40ef521"}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 117.409842ms ago: executing program 3 (id=7356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x0, 0x8}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xb67, 0x35, 0x5, 0x1}}]}]}}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xc0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x2, 0x7, 0x101, 0x0, 0x0, {0x4, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffeffffffff}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 48.113552ms ago: executing program 3 (id=7357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x3, &(0x7f0000000300)=@gcm_128={{}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x4) 21.805496ms ago: executing program 3 (id=7358): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 1.754449ms ago: executing program 0 (id=7359): timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x15, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000880)={[{@noload}, {@grpid}, {@discard}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@noacl}, {@mblk_io_submit}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@data_writeback}, {@resgid}], [{@obj_type={'obj_type', 0x3d, '&'}}, {@euid_lt}], 0x2c}, 0x2, 0x511, &(0x7f00000002c0)="$eJzs3U1vVFUfAPD/nbaUPtCnfXh840UZRWOjkdLyunABRBM2JiYag8vaFoIUMLQm0DRSjIHEhYb4AVB3Jn4CV7oxalxo3ErcGhNiugFdmDF35s4w7e2009JpU/r7JTM9595z7znn3nuYe86ZOwSwYRXTtyRia0T8GhE9lejsBMXKn7szU8N/zUwNJ1EqvfZnUk53Z2ZquJq0ut2WLNJXiCh8kMTOfLad45cnzw6NjY1ezBb0TxSy0Lmh06OnR88PHjlyYH/X4UODB5dVr0/mxNMy3dnx3oVd20+8eeOV4ZM33vr+y7S8pWx9fT0qesvvm5rOsS23pBjF2ceyzjNN73d96K4LJ+3pe2HtCkPT0qs2PV0d5fbfE23lWEVPvPz+mhYOaKlSqVTqzC2tfZZNl+olSWWDUulqCXgAJLHWJQDWRvWD/s5M2lOdGs73gx9st49FuQeU1vtu9qqsaS/3YIu9lb5RR4vyfygiTk7/ffNkTN+MecchAABW1tfHIq4fr9x3VF+VNYV4pC7df7O5od6I+F9EbIuI/2f3Lw9HlNM+GhGP1W3T3cQsQHFOPH//83NXFqi/XV0x6f3fi9nc1uz7v1rJe9uyWHe5/h3JqTNjo/uyY9IXHZ1pfCC/69qw2jcv/fJxo/yL1fu/7JXmn/69l6LwR/ucAbqRoYmh+6131e2r5QN7JV//JNqTaihie0TsWMb+02N25rkvdjVaP6v+aT1z9f+o8c7bl1GgOUqfRTxbOf/TMaf+kc3/JeX5yXPv9I9fnnzhTP385MDhQ4MH+zfH2Oi+/upVkffDT9dezYK5bsQC57/aNFo6kZae///Me/3XZi5701BtvnZ86Xlcu3W9YZ9mudf/puT1crg6P3tpaGLi4kDEpmQ6v3zw3raXhrpmpU/r37dn/va/LeKfT7PtdkZEehE/HhFPRMTurOxPRsRTEbFngfp/d/zptxt1IRevf2ul9R9Z0vlvFDj6Y8T8q9rOfvtVLuMPi7n6d0Sj83+gHOrLlowMTWxerF4LlbQ+cN8HEAAAANaB3RGxNZLC3mygaWsUCnv3RmypjaCMTzx/6sK750cqzwj0RkehOtLVUzceOpCNDafxdKvBuni6fn953LhUKiVdaTztv491r23VYcPb0qD9p37PP9ICPGiWNI/W6Ik2YF2a2/5vNb3lyn8hA1hdK/A9GmCd0v5h42q6/bfqKThgzczX/q9E3F2DogCrbL72/0ZuydFVKQuwuvT/YeNafvv3ZQBY73z+w4bU1EPyywhsOzF+efJ4lsncNEl7azJtHCjEwr8C0BtRXVK9p1l4h78VIu63YJ3lQNuK1rRr1jktzJtmc6xEXlFYNE37En6IYXUDhRbtuTPuXUhNb5VutMjVW7vYrlQDk60+UOVG8HntHwr/nQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBO/RsAAP//r1TNOQ==") openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x105101}, 0x18) set_mempolicy(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x800) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) mlockall(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x8) 0s ago: executing program 3 (id=7360): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x180}, 0x48) kernel console output (not intermixed with test programs): 1400 audit(2000000054.610:15720): avc: denied { write } for pid=9223 comm="syz.4.6723" path="socket:[88411]" dev="sockfs" ino=88411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 337.562911][ T29] audit: type=1400 audit(2000000054.630:15721): avc: denied { setopt } for pid=9223 comm="syz.4.6723" lport=34473 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 337.719920][ T9251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 337.780587][ T9271] syzkaller1: entered promiscuous mode [ 337.786234][ T9271] syzkaller1: entered allmulticast mode [ 337.810326][ T9275] __nla_validate_parse: 3 callbacks suppressed [ 337.810371][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6735'. [ 337.995695][ T9293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 338.050930][ T3088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.063754][ T9305] loop3: detected capacity change from 0 to 512 [ 338.077841][ T9305] EXT4-fs: Ignoring removed bh option [ 338.086201][ T9305] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz.3.6744: invalid block [ 338.098235][ T9305] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.6744: couldn't read orphan inode 15 (err -117) [ 338.112094][ T9305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.113292][ T3088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.143781][ T9305] ref_ctr going negative. vaddr: 0x20002082, curr val: -11067, delta: 1 [ 338.152258][ T9305] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888111581500 [ 338.189392][ T3088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.206384][ T6707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.238352][ T9343] syzkaller1: entered promiscuous mode [ 338.243835][ T9343] syzkaller1: entered allmulticast mode [ 338.254291][ T3088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.305619][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 338.356471][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.363635][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.383561][ T9294] bridge_slave_0: entered allmulticast mode [ 338.390533][ T9294] bridge_slave_0: entered promiscuous mode [ 338.399706][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.406869][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.414182][ T9294] bridge_slave_1: entered allmulticast mode [ 338.422083][ T9294] bridge_slave_1: entered promiscuous mode [ 338.458568][ T3088] bridge_slave_1: left allmulticast mode [ 338.464330][ T3088] bridge_slave_1: left promiscuous mode [ 338.470025][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.480334][ T3088] bridge_slave_0: left allmulticast mode [ 338.486104][ T3088] bridge_slave_0: left promiscuous mode [ 338.491824][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.617206][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.626106][ T3088] bond_slave_0: left promiscuous mode [ 338.633045][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.642103][ T3088] bond_slave_1: left promiscuous mode [ 338.649012][ T3088] bond0 (unregistering): Released all slaves [ 338.658287][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.669673][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.678948][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6753'. [ 338.688003][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6753'. [ 338.709719][ T9538] loop3: detected capacity change from 0 to 512 [ 338.717949][ T9538] EXT4-fs: Ignoring removed bh option [ 338.726571][ T9294] team0: Port device team_slave_0 added [ 338.726939][ T9538] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz.3.6757: invalid block [ 338.733289][ T9294] team0: Port device team_slave_1 added [ 338.744153][ T9538] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.6757: couldn't read orphan inode 15 (err -117) [ 338.762761][ T9538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.776395][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.783357][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.809351][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.820138][ T9538] ref_ctr going negative. vaddr: 0x20002082, curr val: -11067, delta: 1 [ 338.821282][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.828548][ T9538] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888111581500 [ 338.835476][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.872396][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.886074][ T3088] hsr_slave_0: left promiscuous mode [ 338.892244][ T3088] hsr_slave_1: left promiscuous mode [ 338.898269][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.899136][ T6707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.907034][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.926313][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.933894][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.947071][ T3088] veth1_macvtap: left promiscuous mode [ 338.952767][ T3088] veth0_macvtap: left promiscuous mode [ 338.958362][ T3088] veth1_vlan: left promiscuous mode [ 338.963631][ T3088] veth0_vlan: left promiscuous mode [ 339.079383][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 339.090903][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 339.165550][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6758'. [ 339.181458][ T9594] batadv0: entered promiscuous mode [ 339.191873][ T9594] macvtap1: entered promiscuous mode [ 339.198118][ T9594] macvtap1: entered allmulticast mode [ 339.204884][ T9594] batadv0: entered allmulticast mode [ 339.232181][ T9602] loop0: detected capacity change from 0 to 512 [ 339.244037][ T9594] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 339.256882][ T29] audit: type=1400 audit(2000000056.290:15722): avc: denied { write } for pid=9589 comm="syz.0.6759" name="xfrm_stat" dev="proc" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 339.426338][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6758'. [ 339.447191][ T9596] batadv0: left allmulticast mode [ 339.452425][ T9596] batadv0: left promiscuous mode [ 339.473754][ T9596] macvtap1: left promiscuous mode [ 339.478903][ T9596] macvtap1: left allmulticast mode [ 339.655113][ T9294] hsr_slave_0: entered promiscuous mode [ 339.661419][ T9294] hsr_slave_1: entered promiscuous mode [ 339.672476][ T9294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.688551][ T9294] Cannot create hsr debugfs directory [ 339.708296][ T9655] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 339.717645][ T9655] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 339.870625][ T9722] loop3: detected capacity change from 0 to 512 [ 339.920082][ T9722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.941668][ T9722] ext4 filesystem being mounted at /root/syzkaller.3dbwRa/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.955413][ T29] audit: type=1326 audit(2000000057.030:15723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.1.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eef6eab29 code=0x7ffc0000 [ 339.979078][ T29] audit: type=1326 audit(2000000057.030:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.1.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eef6eab29 code=0x7ffc0000 [ 340.024301][ T29] audit: type=1326 audit(2000000057.030:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.1.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eef6eab29 code=0x7ffc0000 [ 340.048074][ T29] audit: type=1326 audit(2000000057.060:15726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.1.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eef6eab29 code=0x7ffc0000 [ 340.071622][ T29] audit: type=1326 audit(2000000057.060:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.1.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eef6eab29 code=0x7ffc0000 [ 340.141752][ T9622] chnl_net:caif_netlink_parms(): no params data found [ 340.162373][ T9722] netlink: 'syz.3.6771': attribute type 4 has an invalid length. [ 340.249045][ T6707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.271394][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.278616][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.285933][ T9622] bridge_slave_0: entered allmulticast mode [ 340.286594][ T9908] loop0: detected capacity change from 0 to 164 [ 340.292468][ T9622] bridge_slave_0: entered promiscuous mode [ 340.307657][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.314778][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.322244][ T9622] bridge_slave_1: entered allmulticast mode [ 340.330633][ T9622] bridge_slave_1: entered promiscuous mode [ 340.340319][ T9908] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 340.363900][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.386809][ T9294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.397050][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.406375][ T9294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.440926][ T9294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.454157][ T9622] team0: Port device team_slave_0 added [ 340.460704][ T9294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.475695][ T9622] team0: Port device team_slave_1 added [ 340.529487][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.561703][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.618560][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.625655][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.651814][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.677057][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.684060][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.710509][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.818595][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.825730][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.837748][ T9622] hsr_slave_0: entered promiscuous mode [ 340.844158][ T9622] hsr_slave_1: entered promiscuous mode [ 340.850296][ T9622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.857932][ T9622] Cannot create hsr debugfs directory [ 340.875891][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.883057][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.997002][ T9622] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.013503][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.046205][ T9622] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.088831][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 341.088845][ T29] audit: type=1326 audit(2000000058.160:16073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.3.6798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe86d116b29 code=0x0 [ 341.176106][ T9622] bond0: (slave netdevsim1): Releasing backup interface [ 341.185646][ T9622] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.207058][ T9294] veth0_vlan: entered promiscuous mode [ 341.218147][ T9294] veth1_vlan: entered promiscuous mode [ 341.239992][ T9622] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.252697][ T9294] veth0_macvtap: entered promiscuous mode [ 341.261418][ T9294] veth1_macvtap: entered promiscuous mode [ 341.272393][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.282990][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.292856][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.303300][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.313154][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.323669][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.333509][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.343963][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.353911][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.364366][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.376509][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.385522][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.396058][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.406071][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.416500][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.426337][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.436995][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.446965][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.457574][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.467474][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.477927][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.482953][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.503871][ T9294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.512730][ T9294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.521503][ T9294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.530307][ T9294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.572139][ T9622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.585990][ T9622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.595707][ T9622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.616415][ T9622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.678941][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6805'. [ 341.710508][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.725329][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.735491][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.742756][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.763863][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.770991][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.789979][ T29] audit: type=1400 audit(2000000058.860:16074): avc: denied { ioctl } for pid=10204 comm="syz.0.6810" path="socket:[90238]" dev="sockfs" ino=90238 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.802579][T10207] loop4: detected capacity change from 0 to 128 [ 341.818761][ T9622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.831683][ T9622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.925205][ T9622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.959749][T10225] loop3: detected capacity change from 0 to 128 [ 341.974334][T10224] loop0: detected capacity change from 0 to 512 [ 342.030030][ T9622] veth0_vlan: entered promiscuous mode [ 342.040850][ T9622] veth1_vlan: entered promiscuous mode [ 342.056368][T10224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.065205][ T9622] veth0_macvtap: entered promiscuous mode [ 342.080118][ T9622] veth1_macvtap: entered promiscuous mode [ 342.082929][T10224] ext4 filesystem being mounted at /root/syzkaller.QcyItS/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.091141][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.109439][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.119333][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.129938][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.139861][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.150347][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.160215][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.170661][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.180510][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.191025][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.201064][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.211535][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.222866][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.233252][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.243750][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.253595][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.264143][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.274155][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.284609][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.294415][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.304971][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.314806][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.325255][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.335098][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.345622][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.356879][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.364293][T10224] netlink: 'syz.0.6816': attribute type 4 has an invalid length. [ 342.373986][ T9622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.382837][ T9622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.391612][ T9622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.400537][ T9622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.446724][ T8259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.473242][T10248] loop2: detected capacity change from 0 to 1764 [ 342.566493][T10260] loop4: detected capacity change from 0 to 2048 [ 342.574188][T10260] EXT4-fs: Ignoring removed orlov option [ 342.598785][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6829'. [ 342.621440][T10278] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 0, id = 0 [ 342.642635][T10260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.694291][T10260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 342.702140][T10290] loop3: detected capacity change from 0 to 128 [ 342.721951][T10276] loop2: detected capacity change from 0 to 8192 [ 342.728610][T10260] EXT4-fs (loop4): Remounting filesystem read-only [ 342.751492][T10293] loop0: detected capacity change from 0 to 1764 [ 342.765885][ T9294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.884485][ T29] audit: type=1400 audit(2000000059.950:16075): avc: denied { listen } for pid=10310 comm="syz.0.6840" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.051107][T10334] loop4: detected capacity change from 0 to 512 [ 343.059561][T10338] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 343.096286][T10334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.124746][T10350] loop1: detected capacity change from 0 to 128 [ 343.132616][T10334] ext4 filesystem being mounted at /root/syzkaller.NNkjU3/13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.193042][T10334] netlink: 'syz.4.6850': attribute type 4 has an invalid length. [ 343.235420][ T9294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.307705][T10375] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 343.603948][T10436] loop3: detected capacity change from 0 to 128 [ 343.750408][T10459] tipc: Started in network mode [ 343.755410][T10459] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 343.765044][T10459] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0002 [ 343.773121][T10459] tipc: Enabled bearer , priority 10 [ 343.825925][T10469] netlink: 'syz.2.6894': attribute type 10 has an invalid length. [ 343.852656][T10469] batman_adv: batadv0: Adding interface: team0 [ 343.859239][T10469] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 343.955044][T10489] tipc: Started in network mode [ 343.959965][T10489] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 343.969170][T10489] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0003 [ 343.977403][T10489] tipc: Enabled bearer , priority 10 [ 344.055724][T10508] bridge0: port 3(team0) entered blocking state [ 344.062135][T10508] bridge0: port 3(team0) entered disabled state [ 344.069860][T10508] team0: entered allmulticast mode [ 344.069942][T10504] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.075072][T10508] team_slave_0: entered allmulticast mode [ 344.089817][T10508] team_slave_1: entered allmulticast mode [ 344.097416][T10508] team0: entered promiscuous mode [ 344.102538][T10508] team_slave_0: entered promiscuous mode [ 344.108546][T10508] team_slave_1: entered promiscuous mode [ 344.114681][T10508] bridge0: port 3(team0) entered blocking state [ 344.121002][T10508] bridge0: port 3(team0) entered forwarding state [ 344.171286][T10520] tipc: Started in network mode [ 344.176304][T10520] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 344.185752][T10520] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0004 [ 344.193794][T10520] tipc: Enabled bearer , priority 10 [ 344.258376][T10532] loop3: detected capacity change from 0 to 256 [ 344.265929][T10532] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 344.384658][T10550] loop0: detected capacity change from 0 to 512 [ 344.393343][T10550] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.400144][T10550] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 344.410586][T10550] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 344.428515][T10555] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.437524][T10550] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 344.448023][T10550] EXT4-fs (loop0): 1 truncate cleaned up [ 344.454092][T10550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.475324][ T8259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.540431][ T29] audit: type=1326 audit(2000000061.610:16076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.4.6934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90f2f8db29 code=0x0 [ 344.573448][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6935'. [ 344.884525][ T913] tipc: Node number set to 1 [ 344.958979][T10605] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 345.083498][T10614] loop2: detected capacity change from 0 to 256 [ 345.090171][T10614] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 345.094487][ T913] tipc: Node number set to 1 [ 345.221634][T10634] netlink: 'syz.2.6953': attribute type 10 has an invalid length. [ 345.305474][ T913] tipc: Node number set to 1 [ 345.399182][T10649] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 345.586614][T10682] loop3: detected capacity change from 0 to 512 [ 345.595510][T10682] EXT4-fs (loop3): orphan cleanup on readonly fs [ 345.602144][T10682] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 345.612607][T10682] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.627934][T10682] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 345.635403][T10682] EXT4-fs (loop3): 1 truncate cleaned up [ 345.641580][T10682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.663059][ T6707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.721568][T10689] loop3: detected capacity change from 0 to 128 [ 345.969755][ T29] audit: type=1400 audit(2000000063.040:16077): avc: denied { getopt } for pid=10702 comm="syz.3.6977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 346.135910][T10711] loop3: detected capacity change from 0 to 8192 [ 346.153195][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6984'. [ 346.253424][ T29] audit: type=1326 audit(2000000063.320:16078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.279906][ T29] audit: type=1326 audit(2000000063.320:16079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.303812][ T29] audit: type=1326 audit(2000000063.320:16080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.327503][ T29] audit: type=1326 audit(2000000063.320:16081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.351346][ T29] audit: type=1326 audit(2000000063.320:16082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.388232][ T29] audit: type=1326 audit(2000000063.360:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.411868][ T29] audit: type=1326 audit(2000000063.360:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.435762][ T29] audit: type=1326 audit(2000000063.360:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafd7c9b29 code=0x7ffc0000 [ 346.459968][ T29] audit: type=1326 audit(2000000063.420:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feafd7cb947 code=0x7ffc0000 [ 346.483495][ T29] audit: type=1326 audit(2000000063.420:16087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.0.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feafd7cb8bc code=0x7ffc0000 [ 346.575777][T10751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6998'. [ 346.670307][T10766] loop3: detected capacity change from 0 to 8192 [ 346.711195][T10770] loop2: detected capacity change from 0 to 512 [ 346.730728][T10770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 346.752517][T10770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 346.765050][T10770] System zones: 1-12 [ 346.780427][T10770] EXT4-fs (loop2): orphan cleanup on readonly fs [ 346.841440][T10770] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7004: bg 0: block 361: padding at end of block bitmap is not set [ 346.868785][T10770] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 346.879133][T10770] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.7004: attempt to clear invalid blocks 33619980 len 1 [ 346.893147][T10770] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7004: invalid indirect mapped block 1811939328 (level 0) [ 346.909580][T10770] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7004: invalid indirect mapped block 2 (level 2) [ 346.923101][T10770] EXT4-fs (loop2): 1 truncate cleaned up [ 346.930744][T10770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 347.196162][ T4563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.258125][ T4563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.269488][T10783] chnl_net:caif_netlink_parms(): no params data found [ 347.310421][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.318413][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.325748][T10783] bridge_slave_0: entered allmulticast mode [ 347.332227][T10783] bridge_slave_0: entered promiscuous mode [ 347.343147][ T4563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.354734][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.361903][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.369852][T10783] bridge_slave_1: entered allmulticast mode [ 347.376339][T10783] bridge_slave_1: entered promiscuous mode [ 347.403173][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.421052][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.442201][ T4563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.479677][T10783] team0: Port device team_slave_0 added [ 347.497066][T10783] team0: Port device team_slave_1 added [ 347.520798][T10993] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 347.573284][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.580408][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.606541][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.647628][ T4563] bridge_slave_1: left allmulticast mode [ 347.653311][ T4563] bridge_slave_1: left promiscuous mode [ 347.659062][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.671897][ T4563] bridge_slave_0: left allmulticast mode [ 347.677849][ T4563] bridge_slave_0: left promiscuous mode [ 347.683761][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.844380][T10764] syz.2.7004 (10764) used greatest stack depth: 7184 bytes left [ 347.855948][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 347.870291][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.886231][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.896969][ T4563] bond0 (unregistering): Released all slaves [ 347.905520][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.912568][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.938524][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.973277][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 347.980754][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 347.988262][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 347.995678][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.003259][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.010680][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.018127][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.025660][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.033060][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.040615][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.048152][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.055583][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.062992][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.070432][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.077888][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.085406][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.092870][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.100333][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.107865][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.115396][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.122906][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.130449][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.137950][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.145392][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.152794][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.153189][T11101] loop2: detected capacity change from 0 to 512 [ 348.160240][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.173939][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.181419][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.189109][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.196657][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.204114][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.206929][T11101] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.211675][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.220709][T11101] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 348.228098][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.228185][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.252167][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.259566][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.267038][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.274429][ T913] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 348.284854][ T913] hid-generic 0000:C9C2:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 348.285688][T10783] hsr_slave_0: entered promiscuous mode [ 348.300826][T10783] hsr_slave_1: entered promiscuous mode [ 348.308112][T10783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.317463][T10783] Cannot create hsr debugfs directory [ 348.335335][ T4563] tipc: Disabling bearer [ 348.340644][ T4563] tipc: Left network mode [ 348.366598][T11116] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 348.395369][ T4563] IPVS: stopping backup sync thread 10278 ... [ 348.450225][ T4563] hsr_slave_0: left promiscuous mode [ 348.467507][ T4563] hsr_slave_1: left promiscuous mode [ 348.477157][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.484701][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.497516][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.498981][T11192] loop2: detected capacity change from 0 to 736 [ 348.505185][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.514366][T11194] syz.0.7034[11194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.520524][T11194] syz.0.7034[11194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.532360][ T4563] veth1_macvtap: left promiscuous mode [ 348.546812][T11192] rock: directory entry would overflow storage [ 348.549269][ T4563] veth0_macvtap: left promiscuous mode [ 348.555430][T11192] rock: sig=0x3b10, size=4, remaining=3 [ 348.566586][ T4563] veth1_vlan: left promiscuous mode [ 348.572073][ T4563] veth0_vlan: left promiscuous mode [ 348.680636][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 348.697100][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 348.706350][T11202] loop2: detected capacity change from 0 to 512 [ 348.717418][T11202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 348.764522][T11202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 348.791619][T11202] System zones: 1-12 [ 348.813304][T11202] EXT4-fs (loop2): orphan cleanup on readonly fs [ 348.822159][T11202] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7035: bg 0: block 361: padding at end of block bitmap is not set [ 348.840590][T11202] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 348.875280][T11202] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.7035: attempt to clear invalid blocks 33619980 len 1 [ 348.895249][T11202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7035: invalid indirect mapped block 1811939328 (level 0) [ 348.924962][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.932402][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.939846][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.947283][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.954979][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.962414][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.969934][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.977355][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.984813][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.992234][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 348.999644][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.007051][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.014495][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.021933][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.029442][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.036857][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.044333][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.051900][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.059436][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.066930][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.074503][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.081957][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.089405][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.096863][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.104288][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.111836][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.115737][T11202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7035: invalid indirect mapped block 2 (level 2) [ 349.119300][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.139830][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.147388][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.154950][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.157941][T11202] EXT4-fs (loop2): 1 truncate cleaned up [ 349.162372][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.175524][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.180771][T11202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 349.182912][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.202361][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.209788][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.209979][T11228] loop3: detected capacity change from 0 to 512 [ 349.217365][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.217394][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.231271][T11228] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.238450][ T9] hid-generic 0000:C9C2:0000.0004: unknown main item tag 0x0 [ 349.255043][T11228] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (800) [ 349.274691][ T9] hid-generic 0000:C9C2:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 349.361361][T11241] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 349.383813][T10783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.408741][T10783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.465723][T10783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.488619][T10783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.531302][T11270] ip6tnl1: entered allmulticast mode [ 349.583811][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.606445][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.620739][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.628053][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.645534][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.652716][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.727944][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.808000][T10783] veth0_vlan: entered promiscuous mode [ 349.818254][T10783] veth1_vlan: entered promiscuous mode [ 349.845669][T10783] veth0_macvtap: entered promiscuous mode [ 349.856967][T10783] veth1_macvtap: entered promiscuous mode [ 349.863042][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 349.868697][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.882482][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.892356][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.902855][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.912788][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.923347][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.933294][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.943816][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.953885][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.964383][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.974246][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.984733][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.996774][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.009651][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.020281][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.030214][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.040695][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.050552][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.061071][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.071014][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.081530][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.091436][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.101949][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.111793][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.122374][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.133609][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.149307][T10783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.158388][T10783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.167210][T10783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.176097][T10783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.211152][T11307] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 350.232004][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.239648][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.247210][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.254677][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.262131][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.269795][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.277325][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.284822][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.292239][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.299774][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.307391][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.314870][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.322381][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.329833][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.337329][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.344781][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.352237][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.359676][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.367095][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.374493][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.381940][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.389368][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.396808][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.404208][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.411654][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.419197][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.426770][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.434175][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.441612][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.446076][T11318] loop0: detected capacity change from 0 to 128 [ 350.449082][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.462747][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.468798][T11318] EXT4-fs: Ignoring removed nobh option [ 350.470188][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.480516][T11318] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.483085][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.496689][T11318] ext4 filesystem being mounted at /root/syzkaller.QcyItS/130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.502495][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.522334][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.529779][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.537198][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.544610][ T3161] hid-generic 0000:C9C2:0000.0005: unknown main item tag 0x0 [ 350.557613][ T3161] hid-generic 0000:C9C2:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 350.606978][T11332] ip6tnl1: entered allmulticast mode [ 350.614555][T11318] loop0: detected capacity change from 128 to 0 [ 350.622190][T11326] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #12: comm syz.0.7059: corrupted xattr block 18: invalid header [ 350.644672][T11326] syz.0.7059: attempt to access beyond end of device [ 350.644672][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 350.658225][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 350.698494][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 350.714197][T11326] syz.0.7059: attempt to access beyond end of device [ 350.714197][T11326] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 350.733780][T11326] syz.0.7059: attempt to access beyond end of device [ 350.733780][T11326] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 350.747329][T11326] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #12: block 36: comm syz.0.7059: unable to read itable block [ 350.764286][T11326] syz.0.7059: attempt to access beyond end of device [ 350.764286][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 350.774071][T11353] loop1: detected capacity change from 0 to 512 [ 350.777616][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 350.811247][T11353] FAT-fs (loop1): bogus sectors per cluster 69 [ 350.813454][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 350.817637][T11353] FAT-fs (loop1): Can't find a valid FAT filesystem [ 350.824266][T11326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 350.842393][T11326] syz.0.7059: attempt to access beyond end of device [ 350.842393][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 350.855755][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 350.866253][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 350.873180][T11326] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #12: comm syz.0.7059: mark_inode_dirty error [ 350.887170][T11326] syz.0.7059: attempt to access beyond end of device [ 350.887170][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 350.900564][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 350.912907][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 350.920082][T11326] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.7059: Error while async write back metadata [ 350.930756][T11364] loop1: detected capacity change from 0 to 256 [ 350.933127][T11326] syz.0.7059: attempt to access beyond end of device [ 350.933127][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 350.952304][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 350.960323][T11364] FAT-fs (loop1): Directory bread(block 64) failed [ 350.967886][T11364] FAT-fs (loop1): Directory bread(block 65) failed [ 350.974230][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 350.976418][T11364] FAT-fs (loop1): Directory bread(block 66) failed [ 350.986556][T11326] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.7059: Error while async write back metadata [ 350.988327][T11364] FAT-fs (loop1): Directory bread(block 67) failed [ 351.000783][T11326] syz.0.7059: attempt to access beyond end of device [ 351.000783][T11326] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 351.009937][T11364] FAT-fs (loop1): Directory bread(block 68) failed [ 351.020021][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 351.028132][T11364] FAT-fs (loop1): Directory bread(block 69) failed [ 351.035599][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 351.041484][T11364] FAT-fs (loop1): Directory bread(block 70) failed [ 351.055915][T11364] FAT-fs (loop1): Directory bread(block 71) failed [ 351.059423][T11326] syz.0.7059: attempt to access beyond end of device [ 351.059423][T11326] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 351.081716][T11326] syz.0.7059: attempt to access beyond end of device [ 351.081716][T11326] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 351.093279][T11364] FAT-fs (loop1): Directory bread(block 72) failed [ 351.097615][T11326] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #12: block 36: comm syz.0.7059: unable to read itable block [ 351.105103][T11364] FAT-fs (loop1): Directory bread(block 73) failed [ 351.121057][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 351.131432][T11372] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 351.141280][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 351.148234][T11326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 351.160115][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 351.168580][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 351.175458][T11326] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.7059: mark_inode_dirty error [ 351.186864][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 351.211575][T11326] EXT4-fs (loop0): I/O error while writing superblock [ 351.227144][T11326] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.7059: Error while async write back metadata [ 351.240281][T11326] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 351.289571][T11364] Trying to write to read-only block-device loop1 [ 351.320477][T10783] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 351.328182][T10783] FAT-fs (loop1): Filesystem has been set read-only [ 351.338370][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 351.338428][ T29] audit: type=1326 audit(2000000068.410:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.344341][ T8259] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 351.345146][ T29] audit: type=1326 audit(2000000068.420:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.407654][ T29] audit: type=1326 audit(2000000068.480:16185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.431372][ T29] audit: type=1326 audit(2000000068.480:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.459680][ T29] audit: type=1326 audit(2000000068.530:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.501327][ T29] audit: type=1326 audit(2000000068.570:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 351.525049][ T29] audit: type=1326 audit(2000000068.570:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc28f733ba7 code=0x7ffc0000 [ 351.548640][ T29] audit: type=1326 audit(2000000068.570:16190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc28f6d8559 code=0x7ffc0000 [ 351.572367][ T29] audit: type=1326 audit(2000000068.570:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc28f733ba7 code=0x7ffc0000 [ 351.595949][ T29] audit: type=1326 audit(2000000068.570:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.2.7082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc28f6d8559 code=0x7ffc0000 [ 351.721653][T11408] loop4: detected capacity change from 0 to 256 [ 351.739361][T11408] FAT-fs (loop4): Directory bread(block 64) failed [ 351.746800][T11408] FAT-fs (loop4): Directory bread(block 65) failed [ 351.753843][T11408] FAT-fs (loop4): Directory bread(block 66) failed [ 351.760579][T11408] FAT-fs (loop4): Directory bread(block 67) failed [ 351.767725][T11408] FAT-fs (loop4): Directory bread(block 68) failed [ 351.774295][T11408] FAT-fs (loop4): Directory bread(block 69) failed [ 351.782402][T11408] FAT-fs (loop4): Directory bread(block 70) failed [ 351.791203][T11408] FAT-fs (loop4): Directory bread(block 71) failed [ 351.799794][T11408] FAT-fs (loop4): Directory bread(block 72) failed [ 351.806762][T11408] FAT-fs (loop4): Directory bread(block 73) failed [ 351.844501][ T2663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.845096][T11412] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 351.882975][T11408] Trying to write to read-only block-device loop4 [ 351.905205][ T9294] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 351.912829][ T9294] FAT-fs (loop4): Filesystem has been set read-only [ 351.963480][ T2663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.028922][ T2663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.115133][ T2663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.189853][T11417] chnl_net:caif_netlink_parms(): no params data found [ 352.202331][ T2663] team0: left allmulticast mode [ 352.207251][ T2663] team_slave_0: left allmulticast mode [ 352.212725][ T2663] team_slave_1: left allmulticast mode [ 352.218571][ T2663] team0: left promiscuous mode [ 352.223453][ T2663] team_slave_0: left promiscuous mode [ 352.228987][ T2663] team_slave_1: left promiscuous mode [ 352.234652][ T2663] bridge0: port 3(team0) entered disabled state [ 352.252491][ T2663] bridge_slave_1: left allmulticast mode [ 352.258209][ T2663] bridge_slave_1: left promiscuous mode [ 352.263894][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.273351][ T2663] bridge_slave_0: left allmulticast mode [ 352.279046][ T2663] bridge_slave_0: left promiscuous mode [ 352.284722][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.306645][T11543] loop3: detected capacity change from 0 to 128 [ 352.317050][T11543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.331381][T11543] ext4 filesystem being mounted at /root/syzkaller.3dbwRa/187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.375917][ T6707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.488315][ T2663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.497257][ T2663] bond_slave_0: left promiscuous mode [ 352.504719][ T2663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.513708][ T2663] bond_slave_1: left promiscuous mode [ 352.520966][ T2663] bond0 (unregistering): Released all slaves [ 352.595482][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.602617][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.616710][T11417] bridge_slave_0: entered allmulticast mode [ 352.624388][T11417] bridge_slave_0: entered promiscuous mode [ 352.644492][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.651597][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.658882][T11417] bridge_slave_1: entered allmulticast mode [ 352.667503][T11417] bridge_slave_1: entered promiscuous mode [ 352.684037][ T2663] hsr_slave_0: left promiscuous mode [ 352.689821][ T2663] hsr_slave_1: left promiscuous mode [ 352.696594][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.703994][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.712242][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.719729][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.731140][ T2663] veth1_macvtap: left promiscuous mode [ 352.737442][ T2663] veth0_macvtap: left promiscuous mode [ 352.744065][ T2663] veth1_vlan: left promiscuous mode [ 352.749841][ T2663] veth0_vlan: left promiscuous mode [ 352.847642][ T2663] team0 (unregistering): Port device team_slave_1 removed [ 352.859303][ T2663] team0 (unregistering): Port device team_slave_0 removed [ 352.907610][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.920378][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.946412][T11681] loop3: detected capacity change from 0 to 256 [ 352.955568][T11417] team0: Port device team_slave_0 added [ 352.965589][T11417] team0: Port device team_slave_1 added [ 352.973071][T11681] FAT-fs (loop3): Directory bread(block 64) failed [ 352.980701][T11681] FAT-fs (loop3): Directory bread(block 65) failed [ 352.989205][T11681] FAT-fs (loop3): Directory bread(block 66) failed [ 352.996894][T11681] FAT-fs (loop3): Directory bread(block 67) failed [ 353.003464][T11681] FAT-fs (loop3): Directory bread(block 68) failed [ 353.010196][T11681] FAT-fs (loop3): Directory bread(block 69) failed [ 353.017373][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.017481][T11681] FAT-fs (loop3): Directory bread(block 70) failed [ 353.024337][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.032694][T11681] FAT-fs (loop3): Directory bread(block 71) failed [ 353.056882][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.060119][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.064760][T11681] FAT-fs (loop3): Directory bread(block 72) failed [ 353.073985][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.074013][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.083103][T11681] FAT-fs (loop3): Directory bread(block 73) failed [ 353.155539][T11417] hsr_slave_0: entered promiscuous mode [ 353.161704][T11417] hsr_slave_1: entered promiscuous mode [ 353.167928][T11417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.175729][T11417] Cannot create hsr debugfs directory [ 353.218413][T11681] Trying to write to read-only block-device loop3 [ 353.242053][ T6707] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 353.249749][ T6707] FAT-fs (loop3): Filesystem has been set read-only [ 353.295073][T11548] chnl_net:caif_netlink_parms(): no params data found [ 353.349364][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.356575][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.363869][T11548] bridge_slave_0: entered allmulticast mode [ 353.370528][T11548] bridge_slave_0: entered promiscuous mode [ 353.377498][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.384747][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.392020][T11548] bridge_slave_1: entered allmulticast mode [ 353.398486][T11548] bridge_slave_1: entered promiscuous mode [ 353.407879][ T2663] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.433552][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.444315][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.467742][T11548] team0: Port device team_slave_0 added [ 353.474991][T11548] team0: Port device team_slave_1 added [ 353.510808][ T2663] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.527580][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.534588][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.560885][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.576241][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.583196][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.609173][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.644806][ T2663] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.702611][T11548] hsr_slave_0: entered promiscuous mode [ 353.709856][T11548] hsr_slave_1: entered promiscuous mode [ 353.716200][T11548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.723926][T11548] Cannot create hsr debugfs directory [ 353.733889][ T2663] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.807466][T11417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.820828][T11417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.837307][T11417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.838556][T12097] loop2: detected capacity change from 0 to 4096 [ 353.857257][T11417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.876136][T12097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.905004][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.921061][ T2663] bridge_slave_1: left allmulticast mode [ 353.927041][ T2663] bridge_slave_1: left promiscuous mode [ 353.932778][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.940559][ T2663] bridge_slave_0: left allmulticast mode [ 353.946383][ T2663] bridge_slave_0: left promiscuous mode [ 353.952103][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.063674][T12173] loop2: detected capacity change from 0 to 512 [ 354.072003][T12173] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 354.087337][ T2663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.098898][T12173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 354.107155][T12173] System zones: 1-12 [ 354.111253][T12173] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.117894][ T2663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.129081][T12173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7122: bg 0: block 361: padding at end of block bitmap is not set [ 354.129124][ T2663] bond0 (unregistering): Released all slaves [ 354.164527][T12173] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 354.204549][T11417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.220192][T11417] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.230203][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.237332][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.246039][T12173] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.7122: attempt to clear invalid blocks 33619980 len 1 [ 354.281640][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.288431][T12173] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7122: invalid indirect mapped block 1811939328 (level 0) [ 354.288747][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.305472][T12173] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7122: invalid indirect mapped block 2 (level 2) [ 354.328250][T12173] EXT4-fs (loop2): 1 truncate cleaned up [ 354.343163][T12173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 354.428995][ T2663] hsr_slave_0: left promiscuous mode [ 354.452213][ T2663] hsr_slave_1: left promiscuous mode [ 354.460624][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.468344][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.478691][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.486311][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.509145][ T2663] veth1_macvtap: left promiscuous mode [ 354.514836][ T2663] veth0_macvtap: left promiscuous mode [ 354.520439][ T2663] veth1_vlan: left promiscuous mode [ 354.525771][ T2663] veth0_vlan: left promiscuous mode [ 354.639643][ T2663] team0 (unregistering): Port device team_slave_1 removed [ 354.650879][ T2663] team0 (unregistering): Port device team_slave_0 removed [ 354.723036][T12045] chnl_net:caif_netlink_parms(): no params data found [ 354.759493][T11417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.819451][T12045] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.826673][T12045] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.836684][T12045] bridge_slave_0: entered allmulticast mode [ 354.855405][T12045] bridge_slave_0: entered promiscuous mode [ 354.889002][T12045] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.896206][T12045] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.903834][T12045] bridge_slave_1: entered allmulticast mode [ 354.911334][T12045] bridge_slave_1: entered promiscuous mode [ 354.926588][T11548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.935430][T11548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.952986][T12045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.965027][T11548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.982281][T12045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.996472][T11548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.090540][T11417] veth0_vlan: entered promiscuous mode [ 355.099334][T11417] veth1_vlan: entered promiscuous mode [ 355.132671][T11417] veth0_macvtap: entered promiscuous mode [ 355.155891][T12045] team0: Port device team_slave_0 added [ 355.166028][T12045] team0: Port device team_slave_1 added [ 355.219347][T11417] veth1_macvtap: entered promiscuous mode [ 355.232774][T12045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.240095][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.266194][T12045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.284142][T11548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.297322][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.307905][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.317844][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.328366][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.338233][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.348750][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.358630][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.369106][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.378929][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.389430][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.402317][T11417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.410251][T12045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.417286][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.443275][T12045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.466539][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 355.488979][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.499538][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.509441][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.519948][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.529836][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.540271][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.550404][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.561104][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.571875][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.582323][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.593354][T11417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.610355][T12045] hsr_slave_0: entered promiscuous mode [ 355.617055][T12045] hsr_slave_1: entered promiscuous mode [ 355.623070][T12045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.633153][T12045] Cannot create hsr debugfs directory [ 355.646844][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7126'. [ 355.663733][T11548] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.680433][ T2663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.696297][T11417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.705084][T11417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.713888][T11417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.722717][T11417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.739113][T26461] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.746191][T26461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.779860][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.786966][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.850263][T11548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.860814][T11548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.957212][T12045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.002383][T11548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.017487][T12045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.046301][T12410] chnl_net:caif_netlink_parms(): no params data found [ 356.082216][T12045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.145214][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.152475][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.160023][T12410] bridge_slave_0: entered allmulticast mode [ 356.166791][T12410] bridge_slave_0: entered promiscuous mode [ 356.174419][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.181603][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.189660][T12410] bridge_slave_1: entered allmulticast mode [ 356.196721][T12410] bridge_slave_1: entered promiscuous mode [ 356.206288][T12045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.241265][T12410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.252150][T12410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.268688][ T2663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.312992][T12410] team0: Port device team_slave_0 added [ 356.329848][ T2663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.346430][T12410] team0: Port device team_slave_1 added [ 356.390008][ T2663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.401483][T12791] netlink: 'syz.2.7134': attribute type 10 has an invalid length. [ 356.409902][T12791] hsr0: entered promiscuous mode [ 356.420523][T12791] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.432820][T12791] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 356.464650][T12791] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 356.477165][T12791] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 356.486045][T12410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.493076][T12410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.519142][T12410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.534690][T12410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.541693][T12410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.567640][T12410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.587207][T12045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.610575][T12045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.619864][T12045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.642386][T12045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.674016][T11548] veth0_vlan: entered promiscuous mode [ 356.710078][T12410] hsr_slave_0: entered promiscuous mode [ 356.716521][T12410] hsr_slave_1: entered promiscuous mode [ 356.722487][T12410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.730473][T12410] Cannot create hsr debugfs directory [ 356.736418][ T2663] bridge_slave_1: left allmulticast mode [ 356.742175][ T2663] bridge_slave_1: left promiscuous mode [ 356.748085][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.756884][ T2663] bridge_slave_0: left allmulticast mode [ 356.762682][ T2663] bridge_slave_0: left promiscuous mode [ 356.768442][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.776794][ T2663] bridge_slave_1: left allmulticast mode [ 356.782473][ T2663] bridge_slave_1: left promiscuous mode [ 356.788163][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.796024][ T2663] bridge_slave_0: left allmulticast mode [ 356.801832][ T2663] bridge_slave_0: left promiscuous mode [ 356.807948][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.026803][ T2663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.037444][ T2663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.048099][ T2663] bond0 (unregistering): Released all slaves [ 357.058033][ T2663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.068732][ T2663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.079302][ T2663] bond0 (unregistering): Released all slaves [ 357.102902][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7145'. [ 357.114217][T11548] veth1_vlan: entered promiscuous mode [ 357.181510][ T2663] tipc: Disabling bearer [ 357.186933][ T2663] tipc: Left network mode [ 357.215927][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.228450][T11548] veth0_macvtap: entered promiscuous mode [ 357.243536][T12045] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.265706][ T2663] IPVS: stopping backup sync thread 11307 ... [ 357.267788][T11548] veth1_macvtap: entered promiscuous mode [ 357.291898][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.298994][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.327093][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.334281][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.383042][ T2663] hsr_slave_0: left promiscuous mode [ 357.398704][ T2663] hsr_slave_1: left promiscuous mode [ 357.418362][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.425874][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.438063][T12979] loop0: detected capacity change from 0 to 512 [ 357.451316][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.458848][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.468905][T12979] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 357.488699][ T2663] hsr_slave_0: left promiscuous mode [ 357.503250][T12979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 357.511441][ T2663] hsr_slave_1: left promiscuous mode [ 357.515195][T12979] System zones: 1-12 [ 357.521172][T12979] EXT4-fs (loop0): orphan cleanup on readonly fs [ 357.528375][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.535872][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.536446][T12979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7154: bg 0: block 361: padding at end of block bitmap is not set [ 357.560753][T12979] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 357.570184][ T2663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.573898][T12979] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.7154: attempt to clear invalid blocks 33619980 len 1 [ 357.577808][ T2663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.593466][T12979] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.7154: invalid indirect mapped block 1811939328 (level 0) [ 357.614334][T12979] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.7154: invalid indirect mapped block 2 (level 2) [ 357.633656][ T2663] veth1_macvtap: left promiscuous mode [ 357.639372][ T2663] veth0_macvtap: left promiscuous mode [ 357.645005][ T2663] veth1_vlan: left promiscuous mode [ 357.650290][ T2663] veth0_vlan: left promiscuous mode [ 357.662145][T12979] EXT4-fs (loop0): 1 truncate cleaned up [ 357.669114][ T2663] veth1_macvtap: left promiscuous mode [ 357.669171][T12979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 357.674632][ T2663] veth0_macvtap: left promiscuous mode [ 357.692085][ T2663] veth1_vlan: left promiscuous mode [ 357.697429][ T2663] veth0_vlan: left promiscuous mode [ 357.854753][ T2663] team0 (unregistering): Port device team_slave_1 removed [ 357.867374][ T2663] team0 (unregistering): Port device team_slave_0 removed [ 357.970876][ T2663] team0 (unregistering): Port device team_slave_1 removed [ 357.983163][ T2663] team0 (unregistering): Port device team_slave_0 removed [ 358.048002][T12982] bridge_slave_1: left allmulticast mode [ 358.053702][T12982] bridge_slave_1: left promiscuous mode [ 358.059514][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.086682][T12045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.097203][T12045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.109296][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.119787][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.129751][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.140298][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.150328][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.160836][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.170712][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.181331][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.193026][T11548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.238118][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.248698][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.258650][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.269313][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.279238][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.289682][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.299523][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.309981][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.326289][T11548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.345742][T11548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.354555][T11548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.363347][T11548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.372178][T11548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.415258][T13001] loop2: detected capacity change from 0 to 1764 [ 358.427554][T11417] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 358.468738][T12045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.512868][T12410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.524983][T12410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.539350][T12410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.550612][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 358.550631][ T29] audit: type=1400 audit(2000000075.620:16427): avc: denied { create } for pid=13028 comm="syz.0.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 358.597912][T12410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.710709][T12410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.726196][T12045] veth0_vlan: entered promiscuous mode [ 358.746834][T12045] veth1_vlan: entered promiscuous mode [ 358.763441][T12410] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.796805][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.803918][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.825237][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.832332][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.855134][T12045] veth0_macvtap: entered promiscuous mode [ 358.863957][T12045] veth1_macvtap: entered promiscuous mode [ 358.877881][T12410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.888482][T12410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.931761][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.942323][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.952244][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.962817][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.972653][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.983135][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.993097][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.003556][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.013548][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.024201][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.047820][T13072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13072 comm=syz.4.7175 [ 359.055404][T12045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.086662][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.097243][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.107102][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.117554][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.127429][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.137880][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.147896][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.161098][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.172176][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.184119][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.207496][T12045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.215028][T13072] bridge_slave_1: left allmulticast mode [ 359.220764][T13072] bridge_slave_1: left promiscuous mode [ 359.226523][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.262302][T12410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.292590][T12045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.301430][T12045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.310305][T12045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.319632][T12045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.439279][T13099] loop2: detected capacity change from 0 to 256 [ 359.488286][T12410] veth0_vlan: entered promiscuous mode [ 359.501800][ T29] audit: type=1326 audit(2000000076.570:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.525496][ T29] audit: type=1326 audit(2000000076.570:16429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.562089][T12410] veth1_vlan: entered promiscuous mode [ 359.577079][ T29] audit: type=1326 audit(2000000076.570:16430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.598582][T12410] veth0_macvtap: entered promiscuous mode [ 359.600876][ T29] audit: type=1326 audit(2000000076.600:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.610334][T12410] veth1_macvtap: entered promiscuous mode [ 359.630215][ T29] audit: type=1326 audit(2000000076.610:16432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.659562][ T29] audit: type=1326 audit(2000000076.610:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.672706][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.683170][ T29] audit: type=1326 audit(2000000076.620:16434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28f73cb29 code=0x7ffc0000 [ 359.683206][ T29] audit: type=1326 audit(2000000076.630:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc28f733ba7 code=0x7ffc0000 [ 359.693703][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.717332][ T29] audit: type=1326 audit(2000000076.630:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc28f6d8559 code=0x7ffc0000 [ 359.774712][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.785214][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.795587][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.806362][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.816221][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.826685][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.836767][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.847411][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.857553][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.868371][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.888988][T12410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.899910][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.910440][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.920420][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.931031][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.941119][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.951854][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.961969][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.972477][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.982415][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.985403][T13128] loop0: detected capacity change from 0 to 256 [ 359.993190][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.009833][T12410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.020491][T12410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.034016][T12410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.047486][T13128] FAT-fs (loop0): Directory bread(block 64) failed [ 360.054036][T13128] FAT-fs (loop0): Directory bread(block 65) failed [ 360.065544][T12410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.074310][T12410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.083145][T12410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.092026][T12410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.099341][T13128] FAT-fs (loop0): Directory bread(block 66) failed [ 360.120891][T13128] FAT-fs (loop0): Directory bread(block 67) failed [ 360.141413][T13128] FAT-fs (loop0): Directory bread(block 68) failed [ 360.152092][T13128] FAT-fs (loop0): Directory bread(block 69) failed [ 360.161290][T13128] FAT-fs (loop0): Directory bread(block 70) failed [ 360.168039][T13128] FAT-fs (loop0): Directory bread(block 71) failed [ 360.179749][T13147] loop3: detected capacity change from 0 to 128 [ 360.186987][T13144] loop4: detected capacity change from 0 to 256 [ 360.205256][T13128] FAT-fs (loop0): Directory bread(block 72) failed [ 360.232649][T13128] FAT-fs (loop0): Directory bread(block 73) failed [ 360.287303][T13128] bio_check_eod: 31 callbacks suppressed [ 360.287318][T13128] syz.0.7192: attempt to access beyond end of device [ 360.287318][T13128] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 360.325847][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7200'. [ 360.562138][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'. [ 360.713027][T13193] loop4: detected capacity change from 0 to 1764 [ 360.738675][T13194] loop3: detected capacity change from 0 to 512 [ 360.778401][T13194] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 360.809554][T13194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 360.867138][T13194] System zones: 1-12 [ 360.886472][T13194] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 360.950702][T13194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 361.366732][T13228] loop2: detected capacity change from 0 to 132 [ 361.695243][T13236] smc: net device wg0 applied user defined pnetid SYZ0 [ 361.702940][T13236] 9pnet_fd: Insufficient options for proto=fd [ 361.895804][T12045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 362.005808][T13291] loop4: detected capacity change from 0 to 256 [ 362.027224][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7254'. [ 362.036285][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7254'. [ 362.099584][T13301] loop1: detected capacity change from 0 to 512 [ 362.685722][T13329] loop3: detected capacity change from 0 to 256 [ 362.708215][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7267'. [ 362.717195][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7267'. [ 362.878710][T13353] loop2: detected capacity change from 0 to 512 [ 362.890011][T13353] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.7278: attempt to clear invalid blocks 1 len 1 [ 362.903874][T13353] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7278: bg 0: block 343: padding at end of block bitmap is not set [ 362.922463][T13353] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 362.932428][ T4563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.013864][T13353] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7278: invalid indirect mapped block 1819239214 (level 0) [ 363.032562][T13353] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7278: invalid indirect mapped block 1819239214 (level 1) [ 363.049794][T13353] EXT4-fs (loop2): 1 truncate cleaned up [ 363.055956][T13353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.080927][T13361] loop4: detected capacity change from 0 to 256 [ 363.090950][ T4563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.110268][T13351] 9pnet_fd: Insufficient options for proto=fd [ 363.117986][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.159706][ T4563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.218455][ T4563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.308555][ T4563] bridge_slave_1: left allmulticast mode [ 363.314249][ T4563] bridge_slave_1: left promiscuous mode [ 363.319954][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.351037][ T4563] bridge_slave_0: left allmulticast mode [ 363.356808][ T4563] bridge_slave_0: left promiscuous mode [ 363.362529][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.641346][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.699264][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.723448][T13419] loop3: detected capacity change from 0 to 512 [ 363.734419][ T4563] bond0 (unregistering): Released all slaves [ 363.768971][T13419] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 363.827219][T13419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 363.840540][T13419] System zones: 1-12 [ 363.846785][T13419] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 363.857173][T13419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 363.934211][ T4563] hsr_slave_0: left promiscuous mode [ 363.948795][ T4563] hsr_slave_1: left promiscuous mode [ 363.956620][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.964128][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.972100][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.979905][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.014205][ T4563] veth1_macvtap: left promiscuous mode [ 364.019888][ T4563] veth0_macvtap: left promiscuous mode [ 364.025645][ T4563] veth1_vlan: left promiscuous mode [ 364.030945][ T4563] veth0_vlan: left promiscuous mode [ 364.072626][T12045] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 364.083679][T12045] CPU: 0 PID: 12045 Comm: syz-executor Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 364.095574][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 364.105647][T12045] Call Trace: [ 364.108929][T12045] [ 364.111866][T12045] dump_stack_lvl+0xf2/0x150 [ 364.116489][T12045] dump_stack+0x15/0x20 [ 364.120692][T12045] dump_header+0x83/0x2d0 [ 364.125035][T12045] oom_kill_process+0x33e/0x4c0 [ 364.129897][T12045] out_of_memory+0x9af/0xbe0 [ 364.134572][T12045] mem_cgroup_out_of_memory+0x13e/0x190 [ 364.140134][T12045] try_charge_memcg+0x745/0xcd0 [ 364.145092][T12045] ? _raw_spin_unlock+0x26/0x50 [ 364.150022][T12045] ? radix_tree_lookup+0xf9/0x150 [ 364.155068][T12045] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 364.161207][T12045] __read_swap_cache_async+0x2b9/0x520 [ 364.166765][T12045] swap_cluster_readahead+0x380/0x3f0 [ 364.172231][T12045] swapin_readahead+0xe2/0x7a0 [ 364.177104][T12045] ? __filemap_get_folio+0x420/0x5b0 [ 364.182406][T12045] ? swap_cache_get_folio+0x6e/0x210 [ 364.187714][T12045] do_swap_page+0x3bc/0x1840 [ 364.192319][T12045] ? mtree_range_walk+0xc8/0x460 [ 364.197278][T12045] ? __rcu_read_lock+0x36/0x50 [ 364.202145][T12045] handle_mm_fault+0x809/0x2a80 [ 364.207016][T12045] ? mas_walk+0x204/0x320 [ 364.211368][T12045] exc_page_fault+0x3b9/0x650 [ 364.216172][T12045] asm_exc_page_fault+0x26/0x30 [ 364.221056][T12045] RIP: 0033:0x7fbd5f0edac5 [ 364.225483][T12045] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 7e da 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 364.245107][T12045] RSP: 002b:00007ffd5b323388 EFLAGS: 00010246 [ 364.251177][T12045] RAX: 0000000000000000 RBX: 000000000000002f RCX: 00007fbd5f0edac3 [ 364.259206][T12045] RDX: 00007ffd5b3233a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.267180][T12045] RBP: 00007ffd5b32341c R08: 0000000039d650be R09: 7fffffffffffffff [ 364.275156][T12045] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 364.283279][T12045] R13: 0000000000058d81 R14: 0000000000058c68 R15: 00007ffd5b323480 [ 364.291304][T12045] [ 364.294364][T12045] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 364.304708][T12045] memory+swap: usage 295884kB, limit 9007199254740988kB, failcnt 0 [ 364.312702][T12045] kmem: usage 282900kB, limit 9007199254740988kB, failcnt 0 [ 364.320878][T12045] Memory cgroup stats for /syz3: [ 364.363876][T12045] cache 20480 [ 364.372234][T12045] rss 4096 [ 364.375288][T12045] shmem 0 [ 364.378238][T12045] mapped_file 0 [ 364.381710][T12045] dirty 0 [ 364.384776][T12045] writeback 0 [ 364.388207][T12045] workingset_refault_anon 130 [ 364.392972][T12045] workingset_refault_file 976 [ 364.397738][T12045] swap 655360 [ 364.401117][T12045] swapcached 8192 [ 364.405043][T12045] pgpgin 253950 [ 364.408526][T12045] pgpgout 253941 [ 364.412089][T12045] pgfault 370716 [ 364.415675][T12045] pgmajfault 531 [ 364.419238][T12045] inactive_anon 12288 [ 364.423304][T12045] active_anon 0 [ 364.427132][T12045] inactive_file 16384 [ 364.431381][T12045] active_file 8192 [ 364.435172][T12045] unevictable 0 [ 364.438674][T12045] hierarchical_memory_limit 314572800 [ 364.444055][T12045] hierarchical_memsw_limit 9223372036854771712 [ 364.450296][T12045] total_cache 20480 [ 364.454108][T12045] total_rss 4096 [ 364.457688][T12045] total_shmem 0 [ 364.461153][T12045] total_mapped_file 0 [ 364.465176][T12045] total_dirty 0 [ 364.468769][T12045] total_writeback 0 [ 364.472621][T12045] total_workingset_refault_anon 130 [ 364.477873][T12045] total_workingset_refault_file 976 [ 364.483081][T12045] total_swap 655360 [ 364.486961][T12045] total_swapcached 8192 [ 364.491149][T12045] total_pgpgin 253950 [ 364.495207][T12045] total_pgpgout 253941 [ 364.499284][T12045] total_pgfault 370716 [ 364.503370][T12045] total_pgmajfault 531 [ 364.508170][T12045] total_inactive_anon 12288 [ 364.512697][T12045] total_active_anon 0 [ 364.517221][T12045] total_inactive_file 16384 [ 364.521760][T12045] total_active_file 8192 [ 364.526034][T12045] total_unevictable 0 [ 364.530027][T12045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7293,pid=13417,uid=0 [ 364.545118][T12045] Memory cgroup out of memory: Killed process 13417 (syz.3.7293) total-vm:82932kB, anon-rss:524kB, file-rss:9396kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 364.670711][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 364.681231][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 364.691633][T12045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 364.761489][T13546] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.769092][T13546] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 364.795773][T13362] chnl_net:caif_netlink_parms(): no params data found [ 364.823980][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7308'. [ 364.833242][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7308'. [ 364.879393][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7311'. [ 365.060593][T13362] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.068089][T13362] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.179185][T13362] bridge_slave_0: entered allmulticast mode [ 365.232516][T13362] bridge_slave_0: entered promiscuous mode [ 365.239523][T13362] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.246703][T13362] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.254000][T13362] bridge_slave_1: entered allmulticast mode [ 365.260536][T13362] bridge_slave_1: entered promiscuous mode [ 365.263634][T13623] loop2: detected capacity change from 0 to 2048 [ 365.305048][T13362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.315910][T13362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.339484][T13362] team0: Port device team_slave_0 added [ 365.342839][T13623] loop2: p2 p3 p7 [ 365.348056][T13362] team0: Port device team_slave_1 added [ 365.378172][T13362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.385250][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.411376][T13362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.422850][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7314'. [ 365.432377][T13362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.439356][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.465305][T13362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.505619][T13362] hsr_slave_0: entered promiscuous mode [ 365.511755][T13362] hsr_slave_1: entered promiscuous mode [ 365.517921][T13362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.525555][T13362] Cannot create hsr debugfs directory [ 365.634845][T13807] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.642264][T13807] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 365.708262][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7321'. [ 365.736424][T13820] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7322'. [ 365.754312][T13824] loop3: detected capacity change from 0 to 512 [ 365.849553][T13362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.858640][T13362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.867832][T13362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.878853][T13362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.892682][T13362] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.899787][T13362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.907117][T13362] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.914170][T13362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.946559][T13362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.957392][T26460] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.965889][T26460] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.981774][T13362] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.996187][T26461] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.003305][T26461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.012199][T26461] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.019369][T26461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.042572][T13362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.095756][T13362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.166315][T13362] veth0_vlan: entered promiscuous mode [ 366.177883][T13362] veth1_vlan: entered promiscuous mode [ 366.194055][T13362] veth0_macvtap: entered promiscuous mode [ 366.201592][T13362] veth1_macvtap: entered promiscuous mode [ 366.212751][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.223404][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.233263][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.243753][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.253575][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.264083][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.273976][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.284463][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.294693][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.305184][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.315126][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.325731][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.338797][T13362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.349836][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.360308][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.370159][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.380655][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.390568][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.401057][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.410999][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.421530][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.431648][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.444872][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.457577][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.468550][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.480525][T13362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.486696][T13860] netlink: 'syz.1.7326': attribute type 2 has an invalid length. [ 366.496298][T13362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.505379][T13362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.514107][T13362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.522950][T13362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.531112][T13864] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.542403][T13864] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 366.602953][T13870] netem: change failed [ 366.714322][T13872] loop2: detected capacity change from 0 to 8192 [ 366.839327][T13872] loop2: detected capacity change from 0 to 2048 [ 366.897307][T13891] loop3: detected capacity change from 0 to 512 [ 366.908324][T13872] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.989753][T13872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.054722][T13891] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 367.070354][T13872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7330: bg 0: block 234: padding at end of block bitmap is not set [ 367.097921][T13872] EXT4-fs (loop2): Remounting filesystem read-only [ 367.122043][ T9622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.188487][T13891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 367.197396][T13891] System zones: 1-12 [ 367.201463][T13891] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 367.209997][T13891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 367.484176][T13923] netem: change failed [ 367.536455][T13926] loop4: detected capacity change from 0 to 2048 [ 367.598234][T13926] loop4: p2 p3 p7 [ 367.605723][T12045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 367.691854][T13939] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.701697][T13939] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 367.746720][T13952] __nla_validate_parse: 1 callbacks suppressed [ 367.746741][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 367.791795][T13954] batadv0: entered promiscuous mode [ 367.801975][T13954] batadv0: left promiscuous mode [ 367.829356][T13960] netem: change failed [ 367.896145][ T4563] ================================================================== [ 367.905203][ T4563] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 367.915053][ T4563] [ 367.917737][ T4563] write to 0xffff888107678d21 of 1 bytes by task 13966 on cpu 1: [ 367.926863][ T4563] tty_set_termios+0x480/0x8b0 [ 367.931741][ T4563] set_termios+0x497/0x4e0 [ 367.936267][ T4563] tty_mode_ioctl+0x391/0x5d0 [ 367.941056][ T4563] n_tty_ioctl_helper+0x8d/0x240 [ 367.946020][ T4563] n_tty_ioctl+0xfd/0x200 [ 367.950386][ T4563] tty_ioctl+0x886/0xbe0 [ 367.954654][ T4563] __se_sys_ioctl+0xd3/0x150 [ 367.959272][ T4563] __x64_sys_ioctl+0x43/0x50 [ 367.963984][ T4563] x64_sys_call+0x1581/0x2d70 [ 367.968692][ T4563] do_syscall_64+0xc9/0x1c0 [ 367.973270][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.979192][ T4563] [ 367.981559][ T4563] read to 0xffff888107678d21 of 1 bytes by task 4563 on cpu 0: [ 367.989114][ T4563] n_tty_receive_char_flow_ctrl+0x22/0x1a0 [ 367.994945][ T4563] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 368.000514][ T4563] tty_port_default_lookahead_buf+0x8a/0xc0 [ 368.006421][ T4563] flush_to_ldisc+0x31c/0x410 [ 368.011109][ T4563] process_scheduled_works+0x483/0x9a0 [ 368.016580][ T4563] worker_thread+0x526/0x720 [ 368.021180][ T4563] kthread+0x1d1/0x210 [ 368.025266][ T4563] ret_from_fork+0x4b/0x60 [ 368.029690][ T4563] ret_from_fork_asm+0x1a/0x30 [ 368.034470][ T4563] [ 368.036818][ T4563] value changed: 0x11 -> 0xdb [ 368.041491][ T4563] [ 368.043808][ T4563] Reported by Kernel Concurrency Sanitizer on: [ 368.049958][ T4563] CPU: 0 PID: 4563 Comm: kworker/u8:7 Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 368.061684][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.071746][ T4563] Workqueue: events_unbound flush_to_ldisc [ 368.077569][ T4563] ================================================================== [ 368.176321][T13975] loop0: detected capacity change from 0 to 512 [ 368.189136][T13975] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 368.204097][T13975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 368.212920][T13975] System zones: 1-12 [ 368.217758][T13975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 368.228029][T13975] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7359: bg 0: block 361: padding at end of block bitmap is not set [ 368.245540][T13975] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 368.256179][T13975] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.7359: attempt to clear invalid blocks 33619980 len 1 [ 368.270446][T13975] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.7359: invalid indirect mapped block 1811939328 (level 0) [ 368.286933][T13975] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.7359: invalid indirect mapped block 2 (level 2) [ 368.300818][T13975] EXT4-fs (loop0): 1 truncate cleaned up [ 368.309801][T13975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 368.863559][T13974] syz.0.7359 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 368.877703][T13974] CPU: 0 PID: 13974 Comm: syz.0.7359 Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 368.889358][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.899422][T13974] Call Trace: [ 368.902725][T13974] [ 368.905667][T13974] dump_stack_lvl+0xf2/0x150 [ 368.910345][T13974] dump_stack+0x15/0x20 [ 368.914607][T13974] dump_header+0x83/0x2d0 [ 368.918980][T13974] oom_kill_process+0x33e/0x4c0 [ 368.923911][T13974] out_of_memory+0x9af/0xbe0 [ 368.928532][T13974] mem_cgroup_out_of_memory+0x13e/0x190 [ 368.934090][T13974] try_charge_memcg+0x745/0xcd0 [ 368.938949][T13974] ? get_page_from_freelist+0x1a2a/0x1a70 [ 368.944695][T13974] obj_cgroup_charge_pages+0xbd/0x1d0 [ 368.950111][T13974] __memcg_kmem_charge_page+0x9d/0x170 [ 368.955652][T13974] __alloc_pages_noprof+0x1bc/0x360 [ 368.960883][T13974] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 368.966271][T13974] alloc_pages_noprof+0xe1/0x100 [ 368.971218][T13974] __vmalloc_node_range_noprof+0x719/0xef0 [ 368.977095][T13974] kvmalloc_node_noprof+0x121/0x170 [ 368.982462][T13974] ? ip_set_alloc+0x1f/0x30 [ 368.987096][T13974] ip_set_alloc+0x1f/0x30 [ 368.991504][T13974] hash_netiface_create+0x273/0x730 [ 368.996720][T13974] ? __nla_parse+0x40/0x60 [ 369.001207][T13974] ? __pfx_hash_netiface_create+0x10/0x10 [ 369.006973][T13974] ip_set_create+0x359/0x8a0 [ 369.011595][T13974] ? memchr+0x1/0x50 [ 369.015499][T13974] ? __nla_parse+0x40/0x60 [ 369.019956][T13974] nfnetlink_rcv_msg+0x4a9/0x570 [ 369.024999][T13974] netlink_rcv_skb+0x12c/0x230 [ 369.029866][T13974] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 369.035379][T13974] nfnetlink_rcv+0x16c/0x15b0 [ 369.040129][T13974] ? skb_release_data+0x583/0x5a0 [ 369.045187][T13974] ? kmem_cache_free+0xd8/0x280 [ 369.050111][T13974] ? nlmon_xmit+0x51/0x60 [ 369.054526][T13974] ? __kfree_skb+0x102/0x150 [ 369.059159][T13974] ? consume_skb+0x57/0x180 [ 369.063670][T13974] ? nlmon_xmit+0x51/0x60 [ 369.068058][T13974] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 369.073431][T13974] ? __dev_queue_xmit+0xb21/0x1e50 [ 369.078542][T13974] ? ref_tracker_free+0x3a5/0x410 [ 369.083584][T13974] ? __netlink_deliver_tap+0x495/0x4c0 [ 369.089055][T13974] netlink_unicast+0x58d/0x660 [ 369.093826][T13974] netlink_sendmsg+0x5ca/0x6e0 [ 369.098699][T13974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.104121][T13974] __sock_sendmsg+0x140/0x180 [ 369.108863][T13974] ____sys_sendmsg+0x312/0x410 [ 369.113632][T13974] __sys_sendmsg+0x1e9/0x280 [ 369.118316][T13974] ? futex_wait+0x18e/0x1c0 [ 369.122858][T13974] __x64_sys_sendmsg+0x46/0x50 [ 369.127624][T13974] x64_sys_call+0xb25/0x2d70 [ 369.132271][T13974] do_syscall_64+0xc9/0x1c0 [ 369.136781][T13974] ? clear_bhb_loop+0x55/0xb0 [ 369.141502][T13974] ? clear_bhb_loop+0x55/0xb0 [ 369.146196][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.152142][T13974] RIP: 0033:0x7f9d8c9bcb29 [ 369.156691][T13974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.176344][T13974] RSP: 002b:00007f9d8bc3e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.184818][T13974] RAX: ffffffffffffffda RBX: 00007f9d8cb4afa0 RCX: 00007f9d8c9bcb29 [ 369.192801][T13974] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 369.200822][T13974] RBP: 00007f9d8ca3d756 R08: 0000000000000000 R09: 0000000000000000 [ 369.208795][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.217310][T13974] R13: 000000000000000b R14: 00007f9d8cb4afa0 R15: 00007fff26786528 [ 369.225303][T13974] [ 369.229281][T13974] memory: usage 307200kB, limit 307200kB, failcnt 248 [ 369.236382][T13974] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 369.244334][T13974] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 369.251644][T13974] Memory cgroup stats for /syz0: [ 369.252810][T13974] cache 24576 [ 369.261179][T13974] rss 0 [ 369.263932][T13974] shmem 0 [ 369.266953][T13974] mapped_file 3280896 [ 369.270927][T13974] dirty 0 [ 369.274025][T13974] writeback 0 [ 369.277350][T13974] workingset_refault_anon 144 [ 369.282028][T13974] workingset_refault_file 339 [ 369.286749][T13974] swap 450560 [ 369.290033][T13974] swapcached 4096 [ 369.293741][T13974] pgpgin 277907 [ 369.297215][T13974] pgpgout 277900 [ 369.300752][T13974] pgfault 390368 [ 369.304297][T13974] pgmajfault 111 [ 369.307851][T13974] inactive_anon 4096 [ 369.311837][T13974] active_anon 0 [ 369.315300][T13974] inactive_file 20480 [ 369.319276][T13974] active_file 4096 [ 369.322993][T13974] unevictable 0 [ 369.326455][T13974] hierarchical_memory_limit 314572800 [ 369.331906][T13974] hierarchical_memsw_limit 9223372036854771712 [ 369.338096][T13974] total_cache 24576 [ 369.341898][T13974] total_rss 0 [ 369.345196][T13974] total_shmem 0 [ 369.348849][T13974] total_mapped_file 3280896 [ 369.353382][T13974] total_dirty 0 [ 369.356890][T13974] total_writeback 0 [ 369.360688][T13974] total_workingset_refault_anon 144 [ 369.365901][T13974] total_workingset_refault_file 339 [ 369.371100][T13974] total_swap 450560 [ 369.375008][T13974] total_swapcached 4096 [ 369.379165][T13974] total_pgpgin 277907 [ 369.383203][T13974] total_pgpgout 277900 [ 369.387369][T13974] total_pgfault 390368 [ 369.391467][T13974] total_pgmajfault 111 [ 369.395548][T13974] total_inactive_anon 4096 [ 369.399959][T13974] total_active_anon 0 [ 369.403928][T13974] total_inactive_file 20480 [ 369.408436][T13974] total_active_file 4096 [ 369.412664][T13974] total_unevictable 0 [ 369.416715][T13974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7359,pid=13973,uid=0 [ 369.431671][T13974] Memory cgroup out of memory: Killed process 13973 (syz.0.7359) total-vm:86004kB, anon-rss:580kB, file-rss:12572kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 369.720475][T13362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.