last executing test programs: 4.149397401s ago: executing program 4 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 3.757525064s ago: executing program 1 (id=1688): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x3ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 3.68762305s ago: executing program 1 (id=1690): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100}}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10, 0x0}, 0x0) 3.652415643s ago: executing program 1 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 3.502630436s ago: executing program 1 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 3.362559787s ago: executing program 1 (id=1705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RAUTH(r2, 0x0, 0x0) 2.450631554s ago: executing program 1 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x327, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 1.220265048s ago: executing program 0 (id=1747): r0 = socket(0x11, 0x800000003, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mkdir(0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@getsa={0x28, 0x15, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @empty}}}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf7d7aab387824cb6}]}}}]}, 0x8c}}, 0x0) 1.143401734s ago: executing program 0 (id=1751): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, 0x0, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000002940)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 1.07983612s ago: executing program 0 (id=1754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffeab, 0x0, 0x0}, &(0x7f0000000000)=0x40) 476.2245ms ago: executing program 4 (id=1682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed0000040008"], 0x250}}, 0x0) 442.571373ms ago: executing program 4 (id=1768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 406.878446ms ago: executing program 3 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) 406.533016ms ago: executing program 4 (id=1772): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 381.562408ms ago: executing program 4 (id=1774): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r1, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 355.780371ms ago: executing program 4 (id=1776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 353.557001ms ago: executing program 3 (id=1777): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x69cd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 221.500182ms ago: executing program 0 (id=1780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 203.248673ms ago: executing program 0 (id=1781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 166.945916ms ago: executing program 2 (id=1782): unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x555) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/176) 163.917097ms ago: executing program 3 (id=1783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}}, 0x0) 139.181519ms ago: executing program 2 (id=1784): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 122.16769ms ago: executing program 0 (id=1785): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n p2 p3 p4 < p5 > [ 106.817872][ T6811] loop2: p2 size 458752 extends beyond EOD, truncated [ 106.826125][ T6811] loop2: p3 start 4284289 is beyond EOD, truncated [ 106.836102][ T6811] loop2: p5 size 458752 extends beyond EOD, truncated [ 106.869761][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 106.927056][ T6828] program syz.3.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.930200][ T6825] loop1: detected capacity change from 0 to 2048 [ 106.964435][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.084074][ T6392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.232261][ T6848] loop1: detected capacity change from 0 to 256 [ 107.239368][ T6848] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.251943][ T6848] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.251992][ T6850] loop2: detected capacity change from 0 to 2048 [ 107.328158][ T6850] loop2: p2 p3 p7 [ 107.347207][ C1] operation not supported error, dev loop2, sector 600 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 107.377226][ T6854] sd 0:0:1:0: device reset [ 107.431418][ T6862] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1147'. [ 107.440697][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 107.565058][ T6886] loop2: detected capacity change from 0 to 512 [ 107.628656][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.642322][ T6886] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.669967][ T6886] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #13: comm syz.2.1152: corrupted xattr block 63: invalid header [ 107.689415][ T6886] EXT4-fs (loop2): Remounting filesystem read-only [ 107.696017][ T6886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=13 [ 107.720859][ T6886] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 107.732635][ T6886] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 107.772569][ T6345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.913290][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 108.017785][ T6941] loop4: detected capacity change from 0 to 512 [ 108.037452][ T6941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.087419][ T6941] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.113222][ T6941] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #13: comm syz.4.1166: corrupted xattr block 63: invalid header [ 108.166078][ T6941] EXT4-fs (loop4): Remounting filesystem read-only [ 108.172772][ T6941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=13 [ 108.215703][ T6941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 108.241999][ T6941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 108.274873][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.395194][ T6974] loop4: detected capacity change from 0 to 512 [ 108.439689][ T6974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.452440][ T6974] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.454119][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 108.535893][ T6991] loop1: detected capacity change from 0 to 512 [ 108.537984][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.544235][ T6991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.580347][ T6991] EXT4-fs (loop1): 1 truncate cleaned up [ 108.586583][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.638078][ T6392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.650510][ T7004] loop2: detected capacity change from 0 to 2048 [ 108.668624][ T7004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.805995][ T6345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.450242][ T7038] loop4: detected capacity change from 0 to 512 [ 109.458490][ T7038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.470899][ T7038] EXT4-fs (loop4): 1 truncate cleaned up [ 109.478399][ T7038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.514574][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.548922][ T7051] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 109.558895][ T7050] IPVS: stopping master sync thread 7051 ... [ 109.603247][ T7058] loop3: detected capacity change from 0 to 2048 [ 109.621200][ T7058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.626673][ T7065] loop4: detected capacity change from 0 to 256 [ 109.654109][ T7065] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.680870][ T7065] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.769128][ T3647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.769443][ T7073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 109.793786][ T7076] syz.1.1219[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.793872][ T7076] syz.1.1219[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.805707][ T7076] syz.1.1219[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.836585][ T7081] loop2: detected capacity change from 0 to 512 [ 109.855288][ T7081] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.868728][ T7085] loop3: detected capacity change from 0 to 2048 [ 109.879145][ T7081] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1222: corrupted in-inode xattr: invalid ea_ino [ 109.893016][ T7081] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1222: couldn't read orphan inode 15 (err -117) [ 109.907846][ T7081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.932539][ T7085] loop3: p2 p3 p7 [ 109.988544][ C0] operation not supported error, dev loop3, sector 600 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 109.991979][ T6345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.024829][ T7099] loop4: detected capacity change from 0 to 2048 [ 110.056310][ T7103] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 110.068912][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.134222][ T7118] netlink: 'syz.0.1236': attribute type 3 has an invalid length. [ 110.225599][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.272225][ T7133] loop4: detected capacity change from 0 to 2048 [ 110.339713][ T7133] loop4: p2 p3 p7 [ 110.377200][ C0] operation not supported error, dev loop4, sector 600 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 110.424172][ T7160] bond1: entered promiscuous mode [ 110.429351][ T7160] bond1: entered allmulticast mode [ 110.434807][ T7160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.447154][ T7160] bond1 (unregistering): Released all slaves [ 110.569096][ T7180] SELinux: failed to load policy [ 110.591132][ T7184] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1267'. [ 111.073394][ T3399] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 111.081146][ T3399] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 111.089480][ T3399] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 111.099742][ T3399] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 111.144270][ T7276] loop4: detected capacity change from 0 to 512 [ 111.171701][ T7276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.186679][ T7276] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.218768][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.246357][ T7290] No such timeout policy "syz1" [ 111.277580][ T7294] tipc: Started in network mode [ 111.282597][ T7294] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 111.292049][ T7294] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 111.300148][ T7294] tipc: Enabled bearer , priority 10 [ 111.352589][ T7306] loop4: detected capacity change from 0 to 1024 [ 111.377085][ T7306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.393925][ T7306] EXT4-fs error (device loop4): ext4_lookup:1813: inode #14: comm syz.4.1294: iget: immutable or append flags not allowed on symlinks [ 111.411692][ T7306] EXT4-fs (loop4): Remounting filesystem read-only [ 111.421049][ T7306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 111.424245][ T7318] loop1: detected capacity change from 0 to 1024 [ 111.432740][ T7306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 111.445472][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 111.445488][ T29] audit: type=1400 audit(1729515179.849:3751): avc: denied { setattr } for pid=7305 comm="syz.4.1294" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.476611][ T7318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.496182][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.519961][ T7318] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 111.538889][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1297'. [ 111.542845][ T7318] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 257 with error 28 [ 111.560349][ T7318] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.560349][ T7318] [ 111.570355][ T7318] EXT4-fs (loop1): Total free blocks count 0 [ 111.576396][ T7318] EXT4-fs (loop1): Free/Dirty block details [ 111.582956][ T7318] EXT4-fs (loop1): free_blocks=68451041280 [ 111.588880][ T7318] EXT4-fs (loop1): dirty_blocks=272 [ 111.594115][ T7318] EXT4-fs (loop1): Block reservation details [ 111.600161][ T7318] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 111.768381][ T29] audit: type=1400 audit(1729515180.159:3752): avc: denied { execmem } for pid=7367 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.787972][ T29] audit: type=1400 audit(1729515180.159:3753): avc: denied { bind } for pid=7371 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.808313][ T29] audit: type=1400 audit(1729515180.159:3754): avc: denied { setopt } for pid=7371 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.831115][ T6392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.890061][ T7380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1304'. [ 111.902436][ T7377] loop1: detected capacity change from 0 to 2048 [ 111.950017][ T7377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.027132][ T29] audit: type=1400 audit(1729515180.429:3755): avc: denied { mount } for pid=7391 comm="syz.0.1308" name="/" dev="ramfs" ino=18247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.059720][ T29] audit: type=1326 audit(1729515180.449:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2076dff9 code=0x7ffc0000 [ 112.083259][ T29] audit: type=1326 audit(1729515180.449:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2076dff9 code=0x7ffc0000 [ 112.106926][ T29] audit: type=1326 audit(1729515180.459:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2076dff9 code=0x7ffc0000 [ 112.130442][ T29] audit: type=1326 audit(1729515180.459:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2076dff9 code=0x7ffc0000 [ 112.153954][ T29] audit: type=1326 audit(1729515180.459:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2076dff9 code=0x7ffc0000 [ 112.182389][ T24] hid-generic 0003:0004:0001.0004: item fetching failed at offset 2/5 [ 112.193539][ T24] hid-generic 0003:0004:0001.0004: probe with driver hid-generic failed with error -22 [ 112.214878][ T6392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.238395][ T7402] vlan2: entered allmulticast mode [ 112.271468][ T7401] ebtables: ebtables: counters copy to user failed while replacing table [ 112.328601][ T7416] loop1: detected capacity change from 0 to 1024 [ 112.336416][ T7416] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 112.336715][ T7412] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 112.368585][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.426267][ T6392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.426747][ T9] tipc: Node number set to 1 [ 112.460726][ T7427] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1323'. [ 112.472279][ T7431] loop1: detected capacity change from 0 to 512 [ 112.490789][ T7433] loop3: detected capacity change from 0 to 2048 [ 112.498995][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.513847][ T7431] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.518290][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'. [ 112.700319][ T7461] bond1: entered promiscuous mode [ 112.705419][ T7461] bond1: entered allmulticast mode [ 112.710788][ T7461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.730655][ T7461] bond1 (unregistering): Released all slaves [ 112.748933][ T7470] netlink: 566 bytes leftover after parsing attributes in process `syz.2.1343'. [ 112.783875][ T7474] tipc: Started in network mode [ 112.788939][ T7474] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 112.798401][ T7474] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 112.806554][ T7474] tipc: Enabled bearer , priority 10 [ 113.121804][ T7520] loop4: detected capacity change from 0 to 1024 [ 113.130747][ T7520] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.137888][ T7521] loop2: detected capacity change from 0 to 2048 [ 113.149022][ T7521] EXT4-fs: Ignoring removed orlov option [ 113.155650][ T7520] JBD2: no valid journal superblock found [ 113.161501][ T7520] EXT4-fs (loop4): Could not load journal inode [ 113.215972][ T7527] 9pnet: p9_errstr2errno: server reported unknown error sŧ6z [ 113.267356][ T7533] ip_vti0: entered promiscuous mode [ 113.272709][ T7533] vlan2: entered promiscuous mode [ 113.277880][ T7533] vlan2: entered allmulticast mode [ 113.283227][ T7533] ip_vti0: entered allmulticast mode [ 113.903178][ T7573] loop2: detected capacity change from 0 to 4096 [ 113.911943][ T7573] EXT4-fs: Ignoring removed nobh option [ 113.916544][ T9] tipc: Node number set to 1 [ 113.917632][ T7573] EXT4-fs: Ignoring removed i_version option [ 113.932308][ T7577] block device autoloading is deprecated and will be removed. [ 114.015929][ T6877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.101133][ T6877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.168975][ T6877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.198612][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 114.243897][ T7609] loop2: detected capacity change from 0 to 512 [ 114.269098][ T6877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.270768][ T7609] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.323143][ T7613] loop0: detected capacity change from 0 to 2048 [ 114.333332][ T7609] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1400: corrupted inode contents [ 114.349326][ T7609] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1400: mark_inode_dirty error [ 114.364668][ T7609] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1400: corrupted inode contents [ 114.388631][ T7613] loop0: p3 < > p4 < > [ 114.392894][ T7613] loop0: partition table partially beyond EOD, truncated [ 114.400055][ T7613] loop0: p3 start 4284289 is beyond EOD, truncated [ 114.559062][ T6877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.579498][ T6877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.590935][ T6877] bond0 (unregistering): Released all slaves [ 114.617042][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.625723][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.669855][ T6877] hsr_slave_0: left promiscuous mode [ 114.676551][ T6877] hsr_slave_1: left promiscuous mode [ 114.686698][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.694453][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.706538][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.714204][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.731255][ T6877] veth1_macvtap: left promiscuous mode [ 114.736878][ T6877] veth0_macvtap: left promiscuous mode [ 114.742448][ T6877] veth1_vlan: left promiscuous mode [ 114.747820][ T6877] veth0_vlan: left promiscuous mode [ 114.852697][ T7651] loop1: detected capacity change from 0 to 1024 [ 114.860520][ T6877] team0 (unregistering): Port device team_slave_1 removed [ 114.871370][ T6877] team0 (unregistering): Port device team_slave_0 removed [ 114.912592][ T7595] chnl_net:caif_netlink_parms(): no params data found [ 114.946497][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1418'. [ 114.983865][ T7656] erspan0: entered promiscuous mode [ 114.993054][ T7656] erspan0: left promiscuous mode [ 115.030820][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.038053][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.045379][ T7595] bridge_slave_0: entered allmulticast mode [ 115.052032][ T7595] bridge_slave_0: entered promiscuous mode [ 115.065729][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.073131][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.080458][ T7595] bridge_slave_1: entered allmulticast mode [ 115.087298][ T7595] bridge_slave_1: entered promiscuous mode [ 115.129665][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.152966][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.193953][ T7595] team0: Port device team_slave_0 added [ 115.199699][ T7680] netlink: 'syz.2.1428': attribute type 3 has an invalid length. [ 115.225493][ T7595] team0: Port device team_slave_1 added [ 115.253080][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.260144][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.286187][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.302387][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.309553][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.335607][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.375732][ T7595] hsr_slave_0: entered promiscuous mode [ 115.382058][ T7595] hsr_slave_1: entered promiscuous mode [ 115.388729][ T7595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.396349][ T7595] Cannot create hsr debugfs directory [ 115.571751][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1437'. [ 115.596268][ T7703] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1438'. [ 115.605625][ T7703] netlink: 'syz.2.1438': attribute type 9 has an invalid length. [ 115.613390][ T7703] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1438'. [ 115.622470][ T7703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1438'. [ 115.656718][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 115.732371][ T7595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.741481][ T7595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.751009][ T7595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.761705][ T7595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.809532][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.824546][ T7595] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.835652][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.842875][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.855025][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.862173][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.891774][ T7595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.902293][ T7595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.934482][ T7723] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 115.942647][ T7723] bridge0: port 3(team0) entered blocking state [ 115.949283][ T7723] bridge0: port 3(team0) entered disabled state [ 115.955795][ T7723] team0: entered allmulticast mode [ 115.961036][ T7723] team_slave_0: entered allmulticast mode [ 115.967025][ T7723] team_slave_1: entered allmulticast mode [ 115.974380][ T7723] team0: entered promiscuous mode [ 115.979458][ T7723] team_slave_0: entered promiscuous mode [ 115.985309][ T7723] team_slave_1: entered promiscuous mode [ 115.991439][ T7723] bridge0: port 3(team0) entered blocking state [ 115.998144][ T7723] bridge0: port 3(team0) entered forwarding state [ 116.040732][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.152824][ T7741] loop4: detected capacity change from 0 to 4096 [ 116.159638][ T7741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.175438][ T7595] veth0_vlan: entered promiscuous mode [ 116.184178][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.1452: corrupted inode contents [ 116.197370][ T7741] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.1452: mark_inode_dirty error [ 116.210135][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.1452: corrupted inode contents [ 116.210219][ T7595] veth1_vlan: entered promiscuous mode [ 116.230205][ T7741] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.1452: mark_inode_dirty error [ 116.236228][ T7595] veth0_macvtap: entered promiscuous mode [ 116.251112][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.1452: corrupted inode contents [ 116.254296][ T7595] veth1_macvtap: entered promiscuous mode [ 116.276248][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.286806][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.296773][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.307222][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.317084][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.327620][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.337450][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.347935][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.358922][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.366564][ T7741] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.1452: mark_inode_dirty error [ 116.370863][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.378382][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.1452: corrupted inode contents [ 116.388717][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.402693][ T7741] EXT4-fs error (device loop4): ext4_truncate:4208: inode #15: comm syz.4.1452: mark_inode_dirty error [ 116.410239][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.423193][ T7741] EXT4-fs error (device loop4) in ext4_setattr:5523: Corrupt filesystem [ 116.432303][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432324][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.443486][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.1452: corrupted inode contents [ 116.450527][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.450547][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.450569][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.485945][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 116.485987][ T29] audit: type=1400 audit(1729515184.879:3891): avc: denied { ioctl } for pid=7756 comm="syz.1.1456" path="socket:[21018]" dev="sockfs" ino=21018 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.494878][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.502998][ T29] audit: type=1400 audit(1729515184.879:3892): avc: denied { write } for pid=7756 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.510745][ T7595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.569540][ T7595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.578305][ T7595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.587055][ T7595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.605320][ T29] audit: type=1400 audit(1729515184.999:3893): avc: denied { rename } for pid=7739 comm="syz.4.1452" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.641810][ T29] audit: type=1400 audit(1729515185.039:3894): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.eLsV9J/syz-tmp" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 116.666303][ T29] audit: type=1400 audit(1729515185.039:3895): avc: denied { mount } for pid=7595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.688602][ T29] audit: type=1400 audit(1729515185.039:3896): avc: denied { mount } for pid=7595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.710683][ T29] audit: type=1400 audit(1729515185.039:3897): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.eLsV9J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 116.737750][ T29] audit: type=1400 audit(1729515185.039:3898): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.eLsV9J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 116.767173][ T29] audit: type=1400 audit(1729515185.169:3899): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 116.793231][ T5631] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 116.808593][ T5631] EXT4-fs unmount: 10 callbacks suppressed [ 116.808610][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.825667][ T7767] geneve0: entered allmulticast mode [ 116.829039][ T29] audit: type=1400 audit(1729515185.229:3900): avc: denied { read } for pid=7768 comm="syz.3.1392" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.018415][ T7790] loop4: detected capacity change from 0 to 8192 [ 117.027158][ T7790] vfat: Unknown parameter '00000000000000000006' [ 117.074819][ T7797] loop3: detected capacity change from 0 to 2048 [ 117.098090][ T7797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.113457][ T7797] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.133041][ T7797] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 117.145605][ T7797] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.145605][ T7797] [ 117.155567][ T7797] EXT4-fs (loop3): Total free blocks count 0 [ 117.161664][ T7797] EXT4-fs (loop3): Free/Dirty block details [ 117.167613][ T7797] EXT4-fs (loop3): free_blocks=2415919104 [ 117.173384][ T7797] EXT4-fs (loop3): dirty_blocks=16 [ 117.178628][ T7797] EXT4-fs (loop3): Block reservation details [ 117.184635][ T7797] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 117.189464][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.199638][ T7805] geneve0: entered allmulticast mode [ 117.199652][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.239132][ T7797] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 117.284020][ T7814] loop2: detected capacity change from 0 to 256 [ 117.295321][ T7816] loop3: detected capacity change from 0 to 512 [ 117.298629][ T7814] FAT-fs (loop2): Directory bread(block 64) failed [ 117.308577][ T7814] FAT-fs (loop2): Directory bread(block 65) failed [ 117.309598][ T7816] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.315688][ T7814] FAT-fs (loop2): Directory bread(block 66) failed [ 117.352851][ T7816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.365464][ T7814] FAT-fs (loop2): Directory bread(block 67) failed [ 117.372253][ T7814] FAT-fs (loop2): Directory bread(block 68) failed [ 117.380136][ T7814] FAT-fs (loop2): Directory bread(block 69) failed [ 117.390017][ T7814] FAT-fs (loop2): Directory bread(block 70) failed [ 117.397163][ T7814] FAT-fs (loop2): Directory bread(block 71) failed [ 117.404079][ T7814] FAT-fs (loop2): Directory bread(block 72) failed [ 117.410922][ T7816] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1480: corrupted inode contents [ 117.423055][ T7814] FAT-fs (loop2): Directory bread(block 73) failed [ 117.430214][ T7816] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1480: mark_inode_dirty error [ 117.443127][ T7816] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1480: corrupted inode contents [ 117.472904][ T7595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.494670][ T6889] kworker/u8:34: attempt to access beyond end of device [ 117.494670][ T6889] loop2: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 117.509633][ T6889] kworker/u8:34: attempt to access beyond end of device [ 117.509633][ T6889] loop2: rw=1, sector=1352, nr_sectors = 96 limit=256 [ 117.548932][ T7836] EXT4-fs warning (device sda1): ext4_group_extend:1870: need to use ext2online to resize further [ 117.764084][ T7841] __nla_validate_parse: 2 callbacks suppressed [ 117.764104][ T7841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1491'. [ 117.798513][ T7843] geneve0: entered allmulticast mode [ 117.862418][ T7849] xt_CT: No such helper "pptp" [ 117.887116][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 117.905516][ T7864] loop2: detected capacity change from 0 to 1024 [ 117.932128][ T7864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.958689][ T7871] EXT4-fs warning (device sda1): ext4_group_extend:1870: need to use ext2online to resize further [ 118.012970][ T7877] loop4: detected capacity change from 0 to 128 [ 118.151454][ T6345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.166266][ T6883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.205510][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 118.226071][ T7903] hsr_slave_1 (unregistering): left promiscuous mode [ 118.252748][ T6883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.298131][ T7916] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 118.318758][ T7922] loop4: detected capacity change from 0 to 128 [ 118.330575][ T6883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.342966][ T7922] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.364783][ T7922] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.426312][ T7929] geneve0: entered allmulticast mode [ 118.456564][ T7922] loop4: detected capacity change from 128 to 0 [ 118.463719][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.463719][ T7922] loop4: rw=12288, sector=36, nr_sectors = 2 limit=0 [ 118.465624][ T6883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.477599][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.477599][ T7922] loop4: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 118.501238][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.501238][ T7922] loop4: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 118.515207][ T7922] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #12: block 36: comm syz.4.1534: unable to read itable block [ 118.528451][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 118.537922][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.537922][ T7922] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 118.551295][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.575532][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.582510][ T7922] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 118.605877][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.605877][ T7922] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 118.619299][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.627707][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.628951][ T6883] bridge_slave_1: left allmulticast mode [ 118.634504][ T7922] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #12: comm syz.4.1534: mark_inode_dirty error [ 118.634599][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.634599][ T7922] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 118.640249][ T6883] bridge_slave_1: left promiscuous mode [ 118.640384][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.651559][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.689256][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.696225][ T7922] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1534: Error while async write back metadata [ 118.708983][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.708983][ T7922] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 118.715268][ T6883] bridge_slave_0: left allmulticast mode [ 118.722347][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.722429][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.722448][ T7922] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1534: Error while async write back metadata [ 118.728160][ T6883] bridge_slave_0: left promiscuous mode [ 118.736596][ T7922] syz.4.1534: attempt to access beyond end of device [ 118.736596][ T7922] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 118.743290][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.755675][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.790282][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.797253][ T7922] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #12: block 36: comm syz.4.1534: unable to read itable block [ 118.810249][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.819150][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.826045][ T7922] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 118.863333][ T6883] ip_vti0: left allmulticast mode [ 118.895260][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 118.921721][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 118.928719][ T7922] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.1534: mark_inode_dirty error [ 118.980336][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 119.022523][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 119.045932][ T7922] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1534: Error while async write back metadata [ 119.074797][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.085917][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 119.097125][ T7922] EXT4-fs (loop4): I/O error while writing superblock [ 119.104045][ T7922] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1534: Error while async write back metadata [ 119.116857][ T7922] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 119.116872][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.136846][ T6883] bond0 (unregistering): Released all slaves [ 119.177335][ T5631] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 119.217421][ T6883] tipc: Disabling bearer [ 119.222789][ T6883] tipc: Left network mode [ 119.259866][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 119.346043][ T6883] hsr_slave_0: left promiscuous mode [ 119.353978][ T6883] hsr_slave_1: left promiscuous mode [ 119.363139][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.370839][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.378515][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.385974][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.397733][ T6883] veth1_macvtap: left promiscuous mode [ 119.403451][ T6883] veth0_macvtap: left promiscuous mode [ 119.409036][ T6883] veth1_vlan: left promiscuous mode [ 119.414312][ T6883] veth0_vlan: left promiscuous mode [ 119.491208][ T7966] sd 0:0:1:0: device reset [ 119.678915][ T6883] team0 (unregistering): Port device team_slave_1 removed [ 119.700456][ T6883] team0 (unregistering): Port device team_slave_0 removed [ 119.778598][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.785890][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.800002][ T7913] bridge_slave_0: entered allmulticast mode [ 119.810940][ T7913] bridge_slave_0: entered promiscuous mode [ 119.838990][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.846103][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.863476][ T7913] bridge_slave_1: entered allmulticast mode [ 119.871887][ T7913] bridge_slave_1: entered promiscuous mode [ 119.910579][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.922375][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.950985][ T7913] team0: Port device team_slave_0 added [ 119.958464][ T7913] team0: Port device team_slave_1 added [ 119.984396][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.991441][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.017421][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.063484][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.070546][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.096526][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.143183][ T7997] Cannot find add_set index 0 as target [ 120.180434][ T7913] hsr_slave_0: entered promiscuous mode [ 120.190769][ T7913] hsr_slave_1: entered promiscuous mode [ 120.201687][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.214810][ T7913] Cannot create hsr debugfs directory [ 120.226425][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 120.246511][ T6883] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.333200][ T6883] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.383670][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.390796][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.399711][ T7972] bridge_slave_0: entered allmulticast mode [ 120.406313][ T7972] bridge_slave_0: entered promiscuous mode [ 120.418606][ T6883] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.439107][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.446377][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.453692][ T7972] bridge_slave_1: entered allmulticast mode [ 120.462081][ T7972] bridge_slave_1: entered promiscuous mode [ 120.479962][ T6883] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.501766][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.513648][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.539763][ T7972] team0: Port device team_slave_0 added [ 120.546381][ T7972] team0: Port device team_slave_1 added [ 120.564957][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.572020][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.599085][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.625961][ T6883] team0: left allmulticast mode [ 120.630889][ T6883] team_slave_0: left allmulticast mode [ 120.636376][ T6883] team_slave_1: left allmulticast mode [ 120.641991][ T6883] team0: left promiscuous mode [ 120.646887][ T6883] team_slave_0: left promiscuous mode [ 120.652547][ T6883] team_slave_1: left promiscuous mode [ 120.658329][ T6883] bridge0: port 3(team0) entered disabled state [ 120.669552][ T6883] bridge_slave_1: left allmulticast mode [ 120.675247][ T6883] bridge_slave_1: left promiscuous mode [ 120.680934][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.688860][ T6883] bridge_slave_0: left allmulticast mode [ 120.694547][ T6883] bridge_slave_0: left promiscuous mode [ 120.700265][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.813003][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.824467][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.838485][ T6883] bond0 (unregistering): Released all slaves [ 120.848437][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.855417][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.881658][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.917222][ T6883] tipc: Disabling bearer [ 120.922631][ T6883] tipc: Left network mode [ 120.940556][ T7972] hsr_slave_0: entered promiscuous mode [ 120.954358][ T7972] hsr_slave_1: entered promiscuous mode [ 120.968306][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.977365][ T7972] Cannot create hsr debugfs directory [ 121.002768][ T8030] loop1: detected capacity change from 0 to 2048 [ 121.006249][ T6883] hsr_slave_0: left promiscuous mode [ 121.024376][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.031909][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.040405][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.047944][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.055553][ T8030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.069058][ T6883] veth1_vlan: left promiscuous mode [ 121.073612][ T8030] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.074333][ T6883] veth0_vlan: left promiscuous mode [ 121.074562][ T8030] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 121.106845][ T8030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.106845][ T8030] [ 121.116551][ T8030] EXT4-fs (loop1): Total free blocks count 0 [ 121.122644][ T8030] EXT4-fs (loop1): Free/Dirty block details [ 121.128737][ T8030] EXT4-fs (loop1): free_blocks=2415919104 [ 121.134481][ T8030] EXT4-fs (loop1): dirty_blocks=16 [ 121.139666][ T8030] EXT4-fs (loop1): Block reservation details [ 121.145693][ T8030] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 121.153257][ T8048] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 121.253677][ T6883] team0 (unregistering): Port device team_slave_1 removed [ 121.265168][ T6883] team0 (unregistering): Port device team_slave_0 removed [ 121.403255][ T7913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.419248][ T7913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.434758][ T7913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.444045][ T7913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.518129][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.529810][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.539853][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.547123][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.572734][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.579927][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.602352][ T7913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.612858][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.665460][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.733468][ T7972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.742450][ T7972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.751822][ T7972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.763564][ T7972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.778347][ T7913] veth0_vlan: entered promiscuous mode [ 121.790124][ T7913] veth1_vlan: entered promiscuous mode [ 121.813800][ T7913] veth0_macvtap: entered promiscuous mode [ 121.822411][ T7913] veth1_macvtap: entered promiscuous mode [ 121.839481][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.850130][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.860022][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.870478][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.880334][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.890795][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.901605][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.914561][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.925216][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.935071][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.945491][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.955540][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.966277][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.977455][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.987041][ T7913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.995766][ T7913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.004621][ T7913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.013357][ T7913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.025364][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.045739][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.056601][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.063819][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.083978][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.091124][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.123612][ T7972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.134086][ T7972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.204511][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.347520][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 122.347560][ T29] audit: type=1326 audit(1729515190.749:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.2.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x0 [ 122.463310][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'. [ 122.474744][ T8158] loop3: detected capacity change from 0 to 256 [ 122.487969][ T8158] FAT-fs (loop3): bogus number of FAT sectors [ 122.494086][ T8158] FAT-fs (loop3): Can't find a valid FAT filesystem [ 122.505129][ T7972] veth0_vlan: entered promiscuous mode [ 122.525914][ T7972] veth1_vlan: entered promiscuous mode [ 122.545992][ T7972] veth0_macvtap: entered promiscuous mode [ 122.565537][ T7972] veth1_macvtap: entered promiscuous mode [ 122.590171][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.600741][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.610609][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.614965][ T29] audit: type=1400 audit(1729515191.009:4003): avc: denied { cmd } for pid=8162 comm="syz.0.1601" path="socket:[22962]" dev="sockfs" ino=22962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.621059][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.621078][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.621096][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.674541][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.685065][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.697105][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.705401][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.716130][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.726082][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.736555][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.746616][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.757233][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.767342][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.777797][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.791485][ T8165] loop3: detected capacity change from 0 to 8192 [ 122.794012][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.818116][ T8168] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1603'. [ 122.828334][ T7972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.837157][ T7972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.845870][ T7972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.854646][ T7972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.946378][ T8181] smc: net device bond0 applied user defined pnetid SYZ0 [ 122.975200][ T8187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8187 comm=syz.1.1606 [ 122.997624][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 123.031845][ T8191] loop4: detected capacity change from 0 to 512 [ 123.038900][ T8191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.051443][ T8191] EXT4-fs (loop4): 1 truncate cleaned up [ 123.057628][ T8191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.106652][ T8191] loop4: detected capacity change from 512 to 0 [ 123.113477][ T8191] bio_check_eod: 38 callbacks suppressed [ 123.113494][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.113494][ T8191] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 123.132739][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.132739][ T8191] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 123.164369][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.164369][ T8191] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 123.184724][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.184724][ T8191] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 123.198348][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.198348][ T8191] loop4: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 123.211680][ T8191] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.4.1613: unable to read itable block [ 123.226344][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.226344][ T8191] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 123.232661][ T8201] loop2: detected capacity change from 0 to 1024 [ 123.246181][ T8191] EXT4-fs (loop4): I/O error while writing superblock [ 123.253107][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.253107][ T8191] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 123.267741][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.267741][ T8191] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 123.281898][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.281898][ T8191] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 123.296054][ T8191] syz.4.1613: attempt to access beyond end of device [ 123.296054][ T8191] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 123.305220][ T29] audit: type=1400 audit(1729515191.699:4004): avc: denied { read } for pid=8202 comm="syz.0.1617" path="socket:[23053]" dev="sockfs" ino=23053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.310006][ T8191] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.4.1613: unable to read itable block [ 123.351282][ T8191] EXT4-fs (loop4): I/O error while writing superblock [ 123.358345][ T8191] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 123.368016][ T8201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.368521][ T8191] EXT4-fs (loop4): I/O error while writing superblock [ 123.387087][ T8191] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.1613: mark_inode_dirty error [ 123.387408][ T8201] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.400354][ T8191] EXT4-fs (loop4): I/O error while writing superblock [ 123.436402][ T7972] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 123.462975][ T7972] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 123.487874][ T7913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.498800][ T7972] EXT4-fs (loop4): I/O error while writing superblock [ 123.505696][ T7972] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 123.515112][ T7972] EXT4-fs (loop4): I/O error while writing superblock [ 123.521966][ T7972] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 123.540687][ T7972] EXT4-fs (loop4): I/O error while writing superblock [ 123.555130][ T6877] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #15: block 8: comm kworker/u8:26: unable to read itable block [ 123.570378][ T6877] buffer_io_error: 23 callbacks suppressed [ 123.570394][ T6877] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 123.584836][ T6877] EXT4-fs (loop4): I/O error while writing superblock [ 123.592078][ T6877] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:26: unable to read itable block [ 123.617958][ T6877] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 123.628442][ T6877] EXT4-fs (loop4): I/O error while writing superblock [ 123.652583][ T7972] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 123.690299][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 123.699919][ T29] audit: type=1400 audit(1729515192.089:4005): avc: denied { write } for pid=8216 comm="syz.3.1623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.708298][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 123.763707][ T8223] syzkaller0: entered promiscuous mode [ 123.769272][ T8223] syzkaller0: entered allmulticast mode [ 123.806122][ T8230] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 123.816217][ T8230] syz_tun: entered promiscuous mode [ 123.826204][ T8230] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.862314][ T29] audit: type=1400 audit(1729515192.259:4006): avc: denied { map } for pid=8235 comm="syz.3.1634" path="socket:[23133]" dev="sockfs" ino=23133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.956662][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1635'. [ 123.965716][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1635'. [ 123.991455][ T8248] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 124.086159][ T29] audit: type=1400 audit(1729515192.479:4007): avc: denied { bind } for pid=8259 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.225619][ T29] audit: type=1326 audit(1729515192.619:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0425dff9 code=0x7ffc0000 [ 124.249861][ T29] audit: type=1326 audit(1729515192.619:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0425dff9 code=0x7ffc0000 [ 124.273450][ T29] audit: type=1326 audit(1729515192.619:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7efc0425dff9 code=0x7ffc0000 [ 124.297196][ T29] audit: type=1326 audit(1729515192.619:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0425dff9 code=0x7ffc0000 [ 124.397167][ T8277] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1024 [ 124.539376][ T8291] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 124.982685][ T8311] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 124.995862][ T8311] syz_tun: entered promiscuous mode [ 125.005680][ T8311] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.183025][ T8321] xt_hashlimit: size too large, truncated to 1048576 [ 125.278025][ T6877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.569215][ T8356] loop1: detected capacity change from 0 to 128 [ 125.595322][ T8356] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.620667][ T8360] loop6: detected capacity change from 0 to 7 [ 125.634733][ T8356] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.645417][ T8360] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.662571][ T8360] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.670513][ T8360] loop6: unable to read partition table [ 125.691473][ T8360] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 125.691473][ T8360] ) failed (rc=-5) [ 125.707557][ T6392] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.722206][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 125.818327][ T8377] program syz.3.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.858861][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.866118][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.873492][ T8340] bridge_slave_0: entered allmulticast mode [ 125.881516][ T8340] bridge_slave_0: entered promiscuous mode [ 125.889405][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.897035][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.905950][ T8340] bridge_slave_1: entered allmulticast mode [ 125.918871][ T8340] bridge_slave_1: entered promiscuous mode [ 125.961711][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.987205][ T8392] bond1: entered promiscuous mode [ 125.992299][ T8392] bond1: entered allmulticast mode [ 125.997750][ T8392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.011038][ T8392] bond1 (unregistering): Released all slaves [ 126.022603][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.058419][ T8340] team0: Port device team_slave_0 added [ 126.082981][ T8399] loop2: detected capacity change from 0 to 512 [ 126.084030][ T8340] team0: Port device team_slave_1 added [ 126.126148][ T8399] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1702: Failed to acquire dquot type 1 [ 126.139898][ T8399] EXT4-fs (loop2): 1 truncate cleaned up [ 126.147005][ T8399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.161497][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.168579][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.194630][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.223659][ T8399] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.255544][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.262585][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.288692][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.319804][ T8340] hsr_slave_0: entered promiscuous mode [ 126.329142][ T8340] hsr_slave_1: entered promiscuous mode [ 126.354156][ T7913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.384775][ T8423] loop3: detected capacity change from 0 to 512 [ 126.418031][ T8423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.448355][ T8423] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.469629][ T8423] Process accounting resumed [ 126.481001][ T8423] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.508597][ T7595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.950291][ T6877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.001258][ T6877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.060025][ T6877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.100838][ T8453] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.109048][ T8453] vhci_hcd: default hub control req: 2000 v0000 i0000 l0 [ 127.141037][ T6877] bridge_slave_1: left allmulticast mode [ 127.147204][ T6877] bridge_slave_1: left promiscuous mode [ 127.152930][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.164256][ T6877] bridge_slave_0: left allmulticast mode [ 127.170036][ T6877] bridge_slave_0: left promiscuous mode [ 127.175759][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.264594][ T8460] loop2: detected capacity change from 0 to 2048 [ 127.278034][ T8460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.293432][ T6877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.304300][ T6877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.313085][ T8460] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.1725: Abort forced by user [ 127.324086][ T8460] EXT4-fs (loop2): Remounting filesystem read-only [ 127.330966][ T8460] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 127.332311][ T6877] bond0 (unregistering): Released all slaves [ 127.355642][ T7913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.390037][ T6877] hsr_slave_0: left promiscuous mode [ 127.395780][ T6877] hsr_slave_1: left promiscuous mode [ 127.401624][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.409070][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.416778][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.424187][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.434894][ T6877] veth1_macvtap: left promiscuous mode [ 127.440563][ T6877] veth0_macvtap: left promiscuous mode [ 127.446078][ T6877] veth1_vlan: left promiscuous mode [ 127.451423][ T6877] veth0_vlan: left promiscuous mode [ 127.555815][ T6877] team0 (unregistering): Port device team_slave_1 removed [ 127.566605][ T6877] team0 (unregistering): Port device team_slave_0 removed [ 127.627831][ T8481] loop3: detected capacity change from 0 to 512 [ 127.634803][ T8481] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.661248][ T8481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.694905][ T8481] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1734: corrupted inode contents [ 127.709519][ T8481] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1734: mark_inode_dirty error [ 127.721078][ T8481] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1734: corrupted inode contents [ 127.748781][ T7595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.774050][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 127.774065][ T29] audit: type=1400 audit(1729515196.169:4047): avc: denied { read } for pid=8490 comm="syz.3.1737" path="socket:[24667]" dev="sockfs" ino=24667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.789452][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 127.826228][ T8495] syz.2.1740[8495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.826323][ T8495] syz.2.1740[8495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.843595][ T8497] loop3: detected capacity change from 0 to 1024 [ 127.850484][ T29] audit: type=1326 audit(1729515196.219:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 127.855559][ T8495] syz.2.1740[8495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.861369][ T29] audit: type=1326 audit(1729515196.219:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 127.919724][ T29] audit: type=1326 audit(1729515196.219:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 127.957288][ T29] audit: type=1326 audit(1729515196.289:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 127.963956][ T8497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.980818][ T29] audit: type=1326 audit(1729515196.289:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 128.006582][ T8340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.016223][ T29] audit: type=1326 audit(1729515196.349:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 128.046567][ T29] audit: type=1326 audit(1729515196.349:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 128.070041][ T29] audit: type=1326 audit(1729515196.349:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 128.093657][ T29] audit: type=1326 audit(1729515196.349:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99223dff9 code=0x7ffc0000 [ 128.116020][ T8497] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.140477][ T8507] pimreg: entered allmulticast mode [ 128.145806][ T8340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.158177][ T8497] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 128.170635][ T8497] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.170635][ T8497] [ 128.177471][ T8340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.180306][ T8497] EXT4-fs (loop3): Total free blocks count 0 [ 128.193036][ T8497] EXT4-fs (loop3): Free/Dirty block details [ 128.199058][ T8497] EXT4-fs (loop3): free_blocks=0 [ 128.204082][ T8497] EXT4-fs (loop3): dirty_blocks=0 [ 128.209168][ T8497] EXT4-fs (loop3): Block reservation details [ 128.215174][ T8497] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 128.224252][ T8507] pimreg: left allmulticast mode [ 128.235317][ T8340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.271333][ T7595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.311646][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.334730][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.355144][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.362321][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.410122][ T8340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.420574][ T8340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.437514][ T8528] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 128.451982][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.459254][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.517579][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.669966][ T8340] veth0_vlan: entered promiscuous mode [ 128.680639][ T8340] veth1_vlan: entered promiscuous mode [ 128.694331][ T8340] veth0_macvtap: entered promiscuous mode [ 128.705518][ T8340] veth1_macvtap: entered promiscuous mode [ 128.715680][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.726263][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.736102][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.746631][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.756437][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.767005][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.776908][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.787375][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.798649][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.807079][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.817598][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.827498][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.838044][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.847902][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.858365][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.868236][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.878690][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.889587][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.901817][ T8564] IPVS: stopping backup sync thread 8567 ... [ 128.902624][ T8340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.916966][ T8340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.925809][ T8340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.934704][ T8340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.997061][ T8572] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1682'. [ 129.119631][ T8595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.149709][ T8595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.216856][ T8595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.275621][ T8595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.347066][ T8614] loop7: detected capacity change from 0 to 16384 [ 129.392513][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 129.437202][ T8623] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.447998][ T8619] Invalid logical block size (1) [ 129.459832][ T8619] ================================================================== [ 129.468058][ T8619] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 129.475669][ T8619] [ 129.478005][ T8619] read-write to 0xffff888237d2ac68 of 1 bytes by task 8614 on cpu 1: [ 129.486174][ T8619] folio_add_lru+0xa3/0x1f0 [ 129.490711][ T8619] filemap_add_folio+0x12c/0x1b0 [ 129.495674][ T8619] page_cache_ra_unbounded+0x175/0x310 [ 129.501156][ T8619] page_cache_sync_ra+0x652/0x670 [ 129.506198][ T8619] filemap_get_pages+0x2c1/0x10e0 [ 129.511245][ T8619] filemap_splice_read+0x358/0x910 [ 129.516382][ T8619] splice_direct_to_actor+0x269/0x670 [ 129.521770][ T8619] do_splice_direct+0xd7/0x150 [ 129.526554][ T8619] do_sendfile+0x39b/0x970 [ 129.531023][ T8619] __x64_sys_sendfile64+0x110/0x150 [ 129.536231][ T8619] x64_sys_call+0xed5/0x2d60 [ 129.540835][ T8619] do_syscall_64+0xc9/0x1c0 [ 129.545349][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.551273][ T8619] [ 129.553605][ T8619] read to 0xffff888237d2ac68 of 1 bytes by task 8619 on cpu 0: [ 129.561152][ T8619] __lru_add_drain_all+0x136/0x3f0 [ 129.566284][ T8619] lru_add_drain_all+0x10/0x20 [ 129.571076][ T8619] invalidate_bdev+0x47/0x70 [ 129.575687][ T8619] loop_set_status+0x114/0x540 [ 129.580551][ T8619] lo_ioctl+0x7f1/0x11c0 [ 129.584844][ T8619] blkdev_ioctl+0x359/0x450 [ 129.589362][ T8619] __se_sys_ioctl+0xcd/0x140 [ 129.593984][ T8619] __x64_sys_ioctl+0x43/0x50 [ 129.598590][ T8619] x64_sys_call+0x15cc/0x2d60 [ 129.603282][ T8619] do_syscall_64+0xc9/0x1c0 [ 129.607799][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.613729][ T8619] [ 129.616057][ T8619] value changed: 0x00 -> 0x06 [ 129.620735][ T8619] [ 129.623071][ T8619] Reported by Kernel Concurrency Sanitizer on: [ 129.629226][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.0.1785 Not tainted 6.12.0-rc4-syzkaller #0 [ 129.638202][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.648271][ T8619] ================================================================== [ 129.671150][ T8627] serio: Serial port ptm0 [ 130.662648][ T8595] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.673854][ T8595] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.685896][ T8595] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.697538][ T8595] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0