last executing test programs: 3.132550192s ago: executing program 0 (id=15303): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x2000002, &(0x7f00000005c0)={[{@errors_continue}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@inlinecrypt}, {@mb_optimize_scan}, {@grpquota}, {@journal_async_commit}, {@acl}]}, 0x0, 0x53a, &(0x7f0000000a80)="$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") r3 = openat$nvram(0xffffff9c, &(0x7f0000000480), 0x60c00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(&(0x7f0000000180), 0x4880) rt_sigqueueinfo(0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3860228c5a4a9be007a284456353"], 0x51c}}, 0x0) 2.110999106s ago: executing program 2 (id=15316): unshare(0x62040200) socket(0x40000000015, 0x5, 0xffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffe9, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x9, 0x3800000, 0xfff, 0x100000, 0x1, 0x10001, 0x9, 0xc}, &(0x7f0000000100)={0x8, 0x9, 0x2bf, 0x6f5334bc, 0x703a, 0x6a1a, 0x1, 0x3}, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x12, 0xff}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x7]}, 0x8}) 2.073692339s ago: executing program 3 (id=15317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) shmdt(0x0) 2.003920866s ago: executing program 3 (id=15318): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') 1.972048429s ago: executing program 3 (id=15319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x40, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 1.931767653s ago: executing program 3 (id=15321): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x90}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe16, 0x5}}]}]}, @IFLA_MTU={0x8, 0x4, 0x40000}]}, 0x44}}, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000480)={0x5, 0xfffffffc, 0xa, 0x29, 0x4017, 0x0}) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0xfffffffffffffedf) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) write$P9_RWALK(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="4a000024ed126c05000100000000060000000000000004020000000100000000000000080000000001000000000000000104000000020000000000000023010000000100000000000000fdd725005f0df4dbfda440824a2baa5f41081ca10bb6488fd2b87f1d42ca9ad6f171b5f908149fd5c72cab4bf50da770143121795cddac4f70baf7454c32c052d27c212e0e504c09baf79e711bd0cf39639d21c7d2fc444f3231182fbf255de68712bd48e86b2df7a40a53a1d992810d2b07f3b4834213364d"], 0x4a) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a80100005800c000280080001"], 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r15, &(0x7f0000000600)='fd/4\x00') capget(&(0x7f0000000140)={0x19980330, r15}, &(0x7f0000000540)={0x480000, 0x8, 0xa57, 0x6, 0x8, 0x2}) 1.855174059s ago: executing program 1 (id=15322): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000004e6ff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x8}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getcwd(&(0x7f0000000340)=""/235, 0xeb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1267, 0x1000000000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400eba18d1d1b0000ff0f0000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$binfmt_misc(r9, &(0x7f0000000140), 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r7]) syz_clone(0x64289200, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dc9671ab34480d5"}) 1.799877005s ago: executing program 2 (id=15323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, 0x0) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) 1.799558565s ago: executing program 3 (id=15324): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000040)) recvmsg$can_raw(r1, &(0x7f0000000c40)={&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/78, 0x4e}], 0x1, &(0x7f0000000b80)=""/172, 0xac}, 0x2) 1.794450735s ago: executing program 0 (id=15325): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000000040000000c0018"], 0x28}}, 0x0) 1.784586616s ago: executing program 2 (id=15326): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="163e6cce65ffff000000000800395032303030"], 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x1, 0x1, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)) fcntl$lock(r0, 0x25, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000340)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000140)=' ', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x42}, 0x1c) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20080) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000036c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) unshare(0x20000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 1.739675721s ago: executing program 0 (id=15327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.73902784s ago: executing program 0 (id=15328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) 1.723414472s ago: executing program 0 (id=15329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f000067d000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 993.446348ms ago: executing program 1 (id=15334): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ecb2850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='skb_copy_datagram_iovec\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 943.588213ms ago: executing program 3 (id=15335): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x2000002, &(0x7f00000005c0)={[{@errors_continue}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@inlinecrypt}, {@mb_optimize_scan}, {@grpquota}, {@journal_async_commit}, {@acl}]}, 0x0, 0x53a, &(0x7f0000000a80)="$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") r3 = openat$nvram(0xffffff9c, &(0x7f0000000480), 0x60c00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(&(0x7f0000000180), 0x4880) rt_sigqueueinfo(0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3860228c5a4a9be007a284456353"], 0x51c}}, 0x0) 619.166073ms ago: executing program 2 (id=15336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, 0x0) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) 565.697798ms ago: executing program 1 (id=15338): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000), 0x0) 504.873684ms ago: executing program 2 (id=15340): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 503.911273ms ago: executing program 0 (id=15341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000180)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x7, 0x7fff, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xa010101, {[@noop, @noop, @end, @lsrr={0x83, 0x1b, 0xe4, [@local, @broadcast, @multicast2, @remote, @remote, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}]}], {0x14, 0x10}}, 0x84}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) rt_sigtimedwait(&(0x7f0000000440)={[0x4]}, &(0x7f0000000480), &(0x7f0000000500)={0x77359400}, 0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r14, 0x0, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0x4}, {0xf, 0xfff3}, {0xb, 0x10}}, [@tclass_kind_options=@c_tbf={0x8}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x4004040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x38, 0x84, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x40, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3200008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r6, @ANYBLOB="08012bbd7000fbdbdf25150000002800018008000300030000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r7, @ANYBLOB="7c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020073797a6b618df48267bea16b26fff99e7cf4e56c6c657230000000000068315f856f5f6873000000000000", @ANYRES32=r17, @ANYBLOB="140002006d6163766c616e30000000000000000014000200"/40], 0xb8}, 0x1, 0x0, 0x0, 0x20080004}, 0x8010) 451.812248ms ago: executing program 1 (id=15342): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) 447.806169ms ago: executing program 1 (id=15343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) 407.503972ms ago: executing program 1 (id=15345): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000004e6ff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x8}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getcwd(&(0x7f0000000340)=""/235, 0xeb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1267, 0x1000000000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400eba18d1d1b0000ff0f0000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$binfmt_misc(r9, &(0x7f0000000140), 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r7]) syz_clone(0x64289200, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dc9671ab34480d5"}) 289.329873ms ago: executing program 2 (id=15346): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r3, 0x40095505, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 175.686274ms ago: executing program 4 (id=15348): unshare(0x62040200) socket(0x40000000015, 0x5, 0xffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffe9, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x9, 0x3800000, 0xfff, 0x100000, 0x1, 0x10001, 0x9, 0xc}, &(0x7f0000000100)={0x8, 0x9, 0x2bf, 0x6f5334bc, 0x703a, 0x6a1a, 0x1, 0x3}, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x12, 0xff}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x7]}, 0x8}) 123.763899ms ago: executing program 4 (id=15349): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000000040000000c0018"], 0x28}}, 0x0) 111.20222ms ago: executing program 4 (id=15350): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ecb2850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='skb_copy_datagram_iovec\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 52.076775ms ago: executing program 4 (id=15351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = open$dir(0x0, 0x0, 0x0) fcntl$setpipe(r6, 0x407, 0x0) 3.152389ms ago: executing program 4 (id=15352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fsync(0xffffffffffffffff) 0s ago: executing program 4 (id=15353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f000067d000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): es=4294967295 subj=root:sysadm_r:sysadm_t pid=20062 comm="syz.2.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1958e9959 code=0x7ffc0000 [ 1026.943873][ T29] audit: type=1326 audit(2000000548.380:61186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20062 comm="syz.2.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc19594dff9 code=0x7ffc0000 [ 1026.967577][ T29] audit: type=1400 audit(2000000548.410:61187): avc: denied { read } for pid=20157 comm="syz.3.14874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1027.227302][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.253817][T20210] netlink: 'syz.0.14883': attribute type 10 has an invalid length. [ 1027.262511][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.283119][T20210] team0: Device hsr_slave_0 failed to register rx_handler [ 1027.357812][T20225] syz.3.14889[20225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1027.399729][T20231] loop3: detected capacity change from 0 to 512 [ 1027.822400][T20290] wireguard0: entered promiscuous mode [ 1027.827954][T20290] wireguard0: entered allmulticast mode [ 1028.220987][T20352] wireguard0: entered promiscuous mode [ 1028.226539][T20352] wireguard0: entered allmulticast mode [ 1028.420339][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14900'. [ 1028.820776][T20400] loop2: detected capacity change from 0 to 512 [ 1028.828971][T20400] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.14906: invalid block [ 1028.841193][T20400] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.14906: invalid indirect mapped block 4294967295 (level 1) [ 1028.855438][T20400] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.14906: invalid indirect mapped block 4294967295 (level 1) [ 1028.870057][T20400] EXT4-fs (loop2): 2 truncates cleaned up [ 1028.876245][T20400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.997975][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14912'. [ 1029.245083][T20488] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1029.245118][T20488] syz.0.14919[20488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.252038][T20488] syz.0.14919[20488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.264034][T20488] syz.0.14919[20488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.294148][T20496] loop0: detected capacity change from 0 to 512 [ 1029.318195][T20496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.14920: bg 0: block 5: invalid block bitmap [ 1029.332398][T20496] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1029.349160][T20496] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.14920: invalid indirect mapped block 3 (level 2) [ 1029.370081][T20496] EXT4-fs (loop0): 1 orphan inode deleted [ 1029.375880][T20496] EXT4-fs (loop0): 1 truncate cleaned up [ 1029.384744][T20496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.454442][T20522] program syz.0.14920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.830913][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14924'. [ 1029.894691][T20596] syz.1.14927[20596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.894833][T20596] syz.1.14927[20596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.911497][T20596] syz.1.14927[20596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.960711][T20607] syz.1.14931[20607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.972539][T20607] syz.1.14931[20607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.985105][T20607] syz.1.14931[20607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.132556][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.164852][T20620] syz.0.14934[20620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.239927][T20627] loop3: detected capacity change from 0 to 512 [ 1030.271369][T20627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.14937: bg 0: block 5: invalid block bitmap [ 1030.284089][T20627] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1030.293125][T20627] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14937: invalid indirect mapped block 3 (level 2) [ 1030.306833][T20627] EXT4-fs (loop3): 1 orphan inode deleted [ 1030.312563][T20627] EXT4-fs (loop3): 1 truncate cleaned up [ 1030.318849][T20627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.467836][T19905] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1030.480781][T19905] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1030.637200][T20422] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.690657][T28774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.741235][T28774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.780203][T28774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.819701][T20635] chnl_net:caif_netlink_parms(): no params data found [ 1030.861993][T28774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.883280][T20635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.890456][T20635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.897836][T20635] bridge_slave_0: entered allmulticast mode [ 1030.904329][T20635] bridge_slave_0: entered promiscuous mode [ 1030.913931][T20635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.921088][T20635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.928858][T20635] bridge_slave_1: entered allmulticast mode [ 1030.935615][T20635] bridge_slave_1: entered promiscuous mode [ 1030.973151][T28774] bridge_slave_1: left allmulticast mode [ 1030.978901][T28774] bridge_slave_1: left promiscuous mode [ 1030.984605][T28774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.992537][T28774] bridge_slave_0: left allmulticast mode [ 1030.998345][T28774] bridge_slave_0: left promiscuous mode [ 1031.004066][T28774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.079682][T18801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.091464][T28774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.101991][T28774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.115386][T28774] bond0 (unregistering): Released all slaves [ 1031.128437][T20635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.150947][T20635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.171658][T28774] hsr_slave_0: left promiscuous mode [ 1031.190868][T28774] hsr_slave_1: left promiscuous mode [ 1031.203432][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.210959][T28774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.229712][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.237453][T28774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.249345][T20675] loop3: detected capacity change from 0 to 512 [ 1031.259489][T28774] veth1_macvtap: left promiscuous mode [ 1031.265147][T28774] veth0_macvtap: left promiscuous mode [ 1031.270679][T28774] veth1_vlan: left promiscuous mode [ 1031.271477][T20675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.14953: bg 0: block 5: invalid block bitmap [ 1031.276006][T28774] veth0_vlan: left promiscuous mode [ 1031.290975][T20675] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1031.302801][T20675] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14953: invalid indirect mapped block 3 (level 2) [ 1031.316791][T20675] EXT4-fs (loop3): 1 orphan inode deleted [ 1031.322574][T20675] EXT4-fs (loop3): 1 truncate cleaned up [ 1031.331411][T20675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.554553][T28774] team0 (unregistering): Port device team_slave_1 removed [ 1031.573807][T28774] team0 (unregistering): Port device team_slave_0 removed [ 1031.663580][T20679] netlink: 'syz.0.14950': attribute type 10 has an invalid length. [ 1031.672026][T20679] team0: Device hsr_slave_0 failed to register rx_handler [ 1031.713791][T20635] team0: Port device team_slave_0 added [ 1031.764623][T20635] team0: Port device team_slave_1 added [ 1031.877180][T20635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.884161][T20635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.910333][T20635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.979882][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 1031.979897][ T29] audit: type=1326 audit(2000000553.640:61352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.14956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1031.995848][T20635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.016720][T20635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.033942][ T29] audit: type=1326 audit(2000000553.670:61353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.14956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1032.042652][T20635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.077199][ T29] audit: type=1326 audit(2000000553.670:61354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.14956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1032.101250][ T29] audit: type=1326 audit(2000000553.670:61355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.14956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1032.144272][T18801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.185282][T20635] hsr_slave_0: entered promiscuous mode [ 1032.192279][T20635] hsr_slave_1: entered promiscuous mode [ 1032.198606][T20635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.206315][T20635] Cannot create hsr debugfs directory [ 1032.252450][ T29] audit: type=1326 audit(2000000553.910:61356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.267914][T20709] loop0: detected capacity change from 0 to 1024 [ 1032.278407][ T29] audit: type=1326 audit(2000000553.940:61357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.306412][ T29] audit: type=1326 audit(2000000553.940:61358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.307293][T20709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.330148][ T29] audit: type=1326 audit(2000000553.940:61359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.366388][ T29] audit: type=1326 audit(2000000553.940:61360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.390079][ T29] audit: type=1326 audit(2000000553.940:61361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.1.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1032.440758][T20709] syzkaller0: entered allmulticast mode [ 1032.455619][T20709] syzkaller0 (unregistering): left allmulticast mode [ 1032.546359][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.714071][T20635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1032.723029][T20635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1032.732667][T20635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1032.741475][T20635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1032.792361][T20635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.805798][T20635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.815232][T28768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.822329][T28768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.834902][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.842033][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.931348][T20635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.011665][T20635] veth0_vlan: entered promiscuous mode [ 1033.022352][T20635] veth1_vlan: entered promiscuous mode [ 1033.042064][T20635] veth0_macvtap: entered promiscuous mode [ 1033.050531][T20635] veth1_macvtap: entered promiscuous mode [ 1033.062309][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.072893][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.082816][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.093353][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.103204][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.113662][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.123499][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.134026][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.144014][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.154456][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.164296][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.174737][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.184554][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.195001][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.204873][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.215287][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.225142][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.236252][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.246983][T20635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.257451][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14974'. [ 1033.266888][T20751] netlink: 'syz.4.14974': attribute type 5 has an invalid length. [ 1033.277265][T20751] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.286098][T20751] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.294833][T20751] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.303720][T20751] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.312888][T20751] vxlan0: entered promiscuous mode [ 1033.325606][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.336238][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.346068][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.356517][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.366408][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.376844][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.386651][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.397189][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.407011][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.417601][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.427483][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.437947][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.447779][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.458270][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.468171][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.478602][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.488436][T20635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.498941][T20635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.562123][T20635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.684590][T20767] loop0: detected capacity change from 0 to 512 [ 1033.702009][T20635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.710967][T20635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.719836][T20635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.728596][T20635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.743030][T20767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.14978: bg 0: block 5: invalid block bitmap [ 1033.760606][T20767] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1033.770141][T20767] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.14978: invalid indirect mapped block 3 (level 2) [ 1033.788767][T20767] EXT4-fs (loop0): 1 orphan inode deleted [ 1033.794558][T20767] EXT4-fs (loop0): 1 truncate cleaned up [ 1033.803256][T20767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.037342][T20781] loop3: detected capacity change from 0 to 512 [ 1034.057650][T20781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.14981: bg 0: block 5: invalid block bitmap [ 1034.078411][T20781] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1034.087659][T20781] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14981: invalid indirect mapped block 3 (level 2) [ 1034.101218][T20781] EXT4-fs (loop3): 1 orphan inode deleted [ 1034.107034][T20781] EXT4-fs (loop3): 1 truncate cleaned up [ 1034.113212][T20781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.181006][T20791] netlink: 'syz.2.14941': attribute type 10 has an invalid length. [ 1034.190328][T20790] program syz.3.14981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.202816][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.220661][T20791] team0: Device hsr_slave_0 failed to register rx_handler [ 1034.229248][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.520227][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.879158][T18801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.978226][T20813] loop2: detected capacity change from 0 to 512 [ 1034.999308][T20813] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.14993: bg 0: block 5: invalid block bitmap [ 1035.015074][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14995'. [ 1035.024264][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14995'. [ 1035.035057][T20821] bpf_get_probe_write_proto: 8 callbacks suppressed [ 1035.035073][T20821] syz.3.14996[20821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.045588][T20821] syz.3.14996[20821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.057353][T20813] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1035.083979][T20821] syz.3.14996[20821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.091349][T20813] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.14993: invalid indirect mapped block 3 (level 2) [ 1035.127625][T20819] wireguard0: entered promiscuous mode [ 1035.133138][T20819] wireguard0: entered allmulticast mode [ 1035.251838][T20819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=20819 comm=syz.1.14995 [ 1035.312007][T20813] EXT4-fs (loop2): 1 orphan inode deleted [ 1035.317829][T20813] EXT4-fs (loop2): 1 truncate cleaned up [ 1035.326596][T20833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20833 comm=syz.3.15000 [ 1035.343641][T20813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.378341][T20833] bond2: entered promiscuous mode [ 1035.383533][T20833] bond2: entered allmulticast mode [ 1035.394765][T20833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1035.417259][T20835] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=20835 comm=syz.3.15000 [ 1035.438682][T20833] netlink: 'syz.3.15000': attribute type 13 has an invalid length. [ 1035.818350][T20635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.853934][T20842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20842 comm=syz.4.15002 [ 1035.891367][T20842] bond1: entered promiscuous mode [ 1035.896457][T20842] bond1: entered allmulticast mode [ 1035.915558][T20842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.964520][T20842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=20842 comm=syz.4.15002 [ 1035.993448][T20842] netlink: 'syz.4.15002': attribute type 13 has an invalid length. [ 1036.004427][T20842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15002'. [ 1036.017845][T20856] tipc: Enabling of bearer rejected, already enabled [ 1036.109229][T20866] netlink: 'syz.3.15004': attribute type 10 has an invalid length. [ 1036.119771][T20866] team0: Device hsr_slave_0 failed to register rx_handler [ 1036.816831][T20882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20882 comm=syz.2.15018 [ 1036.838406][T20882] bond1: entered promiscuous mode [ 1036.843508][T20882] bond1: entered allmulticast mode [ 1036.848993][T20882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.860146][T20882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=20882 comm=syz.2.15018 [ 1036.873612][T20882] netlink: 'syz.2.15018': attribute type 13 has an invalid length. [ 1036.934133][T20889] tipc: Enabling of bearer rejected, already enabled [ 1037.020171][T20916] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20916 comm=syz.2.15034 [ 1037.049448][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 1037.049471][ T29] audit: type=1326 audit(2000000558.710:61625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.062584][T20916] bond2: entered promiscuous mode [ 1037.082203][ T29] audit: type=1326 audit(2000000558.740:61626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.084928][T20916] bond2: entered allmulticast mode [ 1037.110062][T20925] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=20925 comm=syz.2.15034 [ 1037.118782][ T29] audit: type=1326 audit(2000000558.780:61627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.128498][T20925] netlink: 'syz.2.15034': attribute type 13 has an invalid length. [ 1037.150527][ T29] audit: type=1326 audit(2000000558.780:61628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.160830][T20916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1037.192734][ T29] audit: type=1326 audit(2000000558.840:61629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.216467][ T29] audit: type=1326 audit(2000000558.840:61630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.240171][ T29] audit: type=1326 audit(2000000558.840:61631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.263836][ T29] audit: type=1326 audit(2000000558.840:61632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.287528][ T29] audit: type=1326 audit(2000000558.840:61633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.311276][ T29] audit: type=1326 audit(2000000558.850:61634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20920 comm="syz.3.15035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa14ea7dff9 code=0x7ffc0000 [ 1037.343883][T20928] loop3: detected capacity change from 0 to 128 [ 1037.360553][T20928] tipc: Enabling of bearer rejected, already enabled [ 1037.400810][T20940] loop3: detected capacity change from 0 to 1024 [ 1037.410154][T20940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.432837][T18801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.536994][T20955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20955 comm=syz.3.15050 [ 1037.556855][T20955] bond3: entered promiscuous mode [ 1037.561922][T20955] bond3: entered allmulticast mode [ 1037.567324][T20955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.578526][T20955] netlink: 'syz.3.15050': attribute type 13 has an invalid length. [ 1037.619020][T20960] loop3: detected capacity change from 0 to 512 [ 1037.627717][T20960] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.15052: invalid block [ 1037.629530][T20965] loop0: detected capacity change from 0 to 128 [ 1037.642809][T20960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15052: invalid indirect mapped block 4294967295 (level 1) [ 1037.663341][T20960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15052: invalid indirect mapped block 4294967295 (level 1) [ 1037.677884][T20960] EXT4-fs (loop3): 2 truncates cleaned up [ 1037.684078][T20960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.687285][T20965] tipc: Started in network mode [ 1037.701521][T20965] tipc: Node identity ac14140f, cluster identity 4711 [ 1037.708470][T20965] tipc: New replicast peer: 255.255.255.255 [ 1037.714538][T20965] tipc: Enabled bearer , priority 10 [ 1038.349054][T21079] bond3: entered promiscuous mode [ 1038.354218][T21079] bond3: entered allmulticast mode [ 1038.359590][T21079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.370122][T21079] netlink: 'syz.2.15063': attribute type 13 has an invalid length. [ 1038.419921][T21094] loop2: detected capacity change from 0 to 128 [ 1038.447586][T21094] syz.2.15065: attempt to access beyond end of device [ 1038.447586][T21094] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1038.826752][ T5094] tipc: Node number set to 2886997007 [ 1039.240500][T18801] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1039.253621][T18801] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1039.362414][T21158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.370030][T21158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.379470][T21158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.387029][T21158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.529356][T20977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.546515][ T1259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.573306][T21173] loop2: detected capacity change from 0 to 512 [ 1039.584273][ T1259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.614918][T21173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.15081: bg 0: block 5: invalid block bitmap [ 1039.629330][T21173] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1039.639010][T21173] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15081: invalid indirect mapped block 3 (level 2) [ 1039.652727][T21173] EXT4-fs (loop2): 1 orphan inode deleted [ 1039.658766][T21173] EXT4-fs (loop2): 1 truncate cleaned up [ 1039.674539][ T1259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.691008][T21173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.739750][ T1259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.857118][ T1259] bridge_slave_1: left allmulticast mode [ 1039.862811][ T1259] bridge_slave_1: left promiscuous mode [ 1039.868627][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.877248][ T1259] bridge_slave_0: left allmulticast mode [ 1039.883057][ T1259] bridge_slave_0: left promiscuous mode [ 1039.888896][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.001190][ T1259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.012335][ T1259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.023376][ T1259] bond0 (unregistering): Released all slaves [ 1040.033191][ T1259] bond1 (unregistering): Released all slaves [ 1040.042778][ T1259] bond2 (unregistering): Released all slaves [ 1040.052566][ T1259] bond3 (unregistering): Released all slaves [ 1040.065064][T21175] chnl_net:caif_netlink_parms(): no params data found [ 1040.132217][ T1259] tipc: Disabling bearer [ 1040.137560][ T1259] tipc: Left network mode [ 1040.145897][T21175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.153151][T21175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.162226][T21175] bridge_slave_0: entered allmulticast mode [ 1040.169344][T21175] bridge_slave_0: entered promiscuous mode [ 1040.177150][T21175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.184319][T21175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.191728][T21175] bridge_slave_1: entered allmulticast mode [ 1040.198333][T21175] bridge_slave_1: entered promiscuous mode [ 1040.212147][T21265] program syz.1.15085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1040.222278][ T1259] hsr_slave_0: left promiscuous mode [ 1040.228363][ T1259] hsr_slave_1: left promiscuous mode [ 1040.234276][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.241829][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.249628][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.257145][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.268854][ T1259] veth1_macvtap: left promiscuous mode [ 1040.274336][ T1259] veth0_macvtap: left promiscuous mode [ 1040.279857][ T1259] veth1_vlan: left promiscuous mode [ 1040.285084][ T1259] veth0_vlan: left promiscuous mode [ 1040.400684][ T1259] team0 (unregistering): Port device team_slave_1 removed [ 1040.418438][T20635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.432397][ T1259] team0 (unregistering): Port device team_slave_0 removed [ 1040.502759][T21286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.510305][T21286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.518700][T21286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.526173][T21286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.552130][T21175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.563003][T21175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.569673][T21315] selinux_netlink_send: 3 callbacks suppressed [ 1040.569698][T21315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21315 comm=syz.2.15089 [ 1040.602092][T21175] team0: Port device team_slave_0 added [ 1040.614694][T21315] bond4: entered promiscuous mode [ 1040.619984][T21315] bond4: entered allmulticast mode [ 1040.625320][T21315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1040.635179][T21315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=21315 comm=syz.2.15089 [ 1040.635607][T21175] team0: Port device team_slave_1 added [ 1040.653949][T21315] netlink: 'syz.2.15089': attribute type 13 has an invalid length. [ 1040.692541][T21175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.699668][T21175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.725759][T21175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.738850][T21175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.745914][T21175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.771930][T21175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.817857][T21341] loop2: detected capacity change from 0 to 1024 [ 1040.838812][T21175] hsr_slave_0: entered promiscuous mode [ 1040.845154][T21175] hsr_slave_1: entered promiscuous mode [ 1040.852546][T21175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.860230][T21175] Cannot create hsr debugfs directory [ 1040.898850][T21341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.962588][T21336] syzkaller0: entered allmulticast mode [ 1040.999007][T21336] syzkaller0 (unregistering): left allmulticast mode [ 1041.125220][T20635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.297048][T21175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1041.318467][T21175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1041.332071][T21175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1041.347881][T21175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1041.392475][T21175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.406339][T21175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.415947][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.423190][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.434583][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.441672][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.505107][T21175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.569239][T21175] veth0_vlan: entered promiscuous mode [ 1041.577976][T21175] veth1_vlan: entered promiscuous mode [ 1041.594171][T21175] veth0_macvtap: entered promiscuous mode [ 1041.601624][T21175] veth1_macvtap: entered promiscuous mode [ 1041.612542][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.623216][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.633183][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.643689][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.653576][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.664136][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.673952][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.684948][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.694940][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.705526][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.707380][T21402] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21402 comm=syz.4.15102 [ 1041.715326][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.715343][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.715358][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.715372][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.717516][T21175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.783749][T21402] bond2: entered promiscuous mode [ 1041.789197][T21402] bond2: entered allmulticast mode [ 1041.791075][T21404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=21404 comm=syz.4.15102 [ 1041.794561][T21402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1041.811340][T21404] netlink: 'syz.4.15102': attribute type 13 has an invalid length. [ 1041.818913][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.832285][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.842223][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.852716][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.862611][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.873039][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.882963][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.893396][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.903291][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.913738][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.923870][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.934375][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.944357][T21175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.951902][T21412] syz.4.15104[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.954826][T21175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.955308][T21412] syz.4.15104[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.972829][T21175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.977681][T21412] syz.4.15104[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.990679][T21175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.015584][T21175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.024385][T21175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.033230][T21175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.063903][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 1042.063917][ T29] audit: type=1326 audit(2000000563.720:62202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad4da4fa7 code=0x7ffc0000 [ 1042.093952][ T29] audit: type=1326 audit(2000000563.720:62203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad4d49959 code=0x7ffc0000 [ 1042.117580][ T29] audit: type=1326 audit(2000000563.720:62204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2ad4dadff9 code=0x7ffc0000 [ 1042.141457][ T29] audit: type=1326 audit(2000000563.750:62205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad4da4fa7 code=0x7ffc0000 [ 1042.165166][ T29] audit: type=1326 audit(2000000563.750:62206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad4d49959 code=0x7ffc0000 [ 1042.188782][ T29] audit: type=1326 audit(2000000563.750:62207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2ad4dadff9 code=0x7ffc0000 [ 1042.212519][ T29] audit: type=1326 audit(2000000563.780:62208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad4da4fa7 code=0x7ffc0000 [ 1042.236395][ T29] audit: type=1326 audit(2000000563.780:62209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad4d49959 code=0x7ffc0000 [ 1042.238036][T21427] loop0: detected capacity change from 0 to 1024 [ 1042.260057][ T29] audit: type=1326 audit(2000000563.780:62210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2ad4dadff9 code=0x7ffc0000 [ 1042.289921][ T29] audit: type=1326 audit(2000000563.820:62211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.2.15099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad4da4fa7 code=0x7ffc0000 [ 1042.316823][T21427] EXT4-fs: Ignoring removed orlov option [ 1042.322634][T21427] EXT4-fs: Ignoring removed bh option [ 1042.357832][T21427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.360753][T21437] loop3: detected capacity change from 0 to 512 [ 1042.374417][T21427] FAULT_INJECTION: forcing a failure. [ 1042.374417][T21427] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.386120][T21437] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.15080: invalid block [ 1042.389397][T21427] CPU: 0 UID: 0 PID: 21427 Comm: syz.0.15110 Tainted: G W 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1042.403915][T21437] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15080: invalid indirect mapped block 4294967295 (level 1) [ 1042.413549][T21427] Tainted: [W]=WARN [ 1042.431190][T21437] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15080: invalid indirect mapped block 4294967295 (level 1) [ 1042.431361][T21427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1042.447583][T21437] EXT4-fs (loop3): 2 truncates cleaned up [ 1042.455335][T21427] Call Trace: [ 1042.462745][T21437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.464326][T21427] [ 1042.464336][T21427] dump_stack_lvl+0xf2/0x150 [ 1042.484441][T21427] dump_stack+0x15/0x20 [ 1042.488675][T21427] should_fail_ex+0x223/0x230 [ 1042.493443][T21427] ? __alloc_skb+0x10b/0x310 [ 1042.498050][T21427] should_failslab+0x8f/0xb0 [ 1042.502649][T21427] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 1042.508467][T21427] __alloc_skb+0x10b/0x310 [ 1042.512900][T21427] audit_log_start+0x368/0x6b0 [ 1042.517713][T21427] audit_seccomp+0x4b/0x130 [ 1042.522230][T21427] __seccomp_filter+0x6fa/0x1180 [ 1042.527249][T21427] ? proc_fail_nth_write+0x12a/0x150 [ 1042.532546][T21427] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1042.538251][T21427] ? vfs_write+0x580/0x910 [ 1042.542740][T21427] ? __fget_files+0x1d4/0x210 [ 1042.547434][T21427] __secure_computing+0x9f/0x1c0 [ 1042.552454][T21427] syscall_trace_enter+0xd1/0x1f0 [ 1042.557486][T21427] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1042.563578][T21427] do_syscall_64+0xaa/0x1c0 [ 1042.568104][T21427] ? clear_bhb_loop+0x55/0xb0 [ 1042.572794][T21427] ? clear_bhb_loop+0x55/0xb0 [ 1042.577487][T21427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.583397][T21427] RIP: 0033:0x7fa62d21dff9 [ 1042.587889][T21427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.607509][T21427] RSP: 002b:00007fa62be97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 1042.616065][T21427] RAX: ffffffffffffffda RBX: 00007fa62d3d5f80 RCX: 00007fa62d21dff9 [ 1042.624042][T21427] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000a [ 1042.632015][T21427] RBP: 00007fa62be97090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.640047][T21427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.648016][T21427] R13: 0000000000000000 R14: 00007fa62d3d5f80 R15: 00007fff0e16d278 [ 1042.656129][T21427] [ 1042.677132][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.724481][T21474] loop0: detected capacity change from 0 to 512 [ 1042.733222][T21474] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.15112: bg 0: block 5: invalid block bitmap [ 1042.747608][T21474] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1042.756984][T21474] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15112: invalid indirect mapped block 3 (level 2) [ 1042.772101][T21474] EXT4-fs (loop0): 1 orphan inode deleted [ 1042.778049][T21474] EXT4-fs (loop0): 1 truncate cleaned up [ 1042.786598][T21474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.561481][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.644042][T21597] syz.1.15116[21597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.644153][T21597] syz.1.15116[21597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.656249][T21597] syz.1.15116[21597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.923596][T21608] loop2: detected capacity change from 0 to 512 [ 1043.980524][T21175] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1043.999535][T21175] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1044.082534][T21617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21617 comm=syz.4.15125 [ 1044.103071][T21617] bond3: entered promiscuous mode [ 1044.108208][T21617] bond3: entered allmulticast mode [ 1044.113495][T21617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1044.123504][T21617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=21617 comm=syz.4.15125 [ 1044.141572][T21617] netlink: 'syz.4.15125': attribute type 13 has an invalid length. [ 1044.535598][T21349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1044.633857][T21632] netlink: 'syz.0.15128': attribute type 10 has an invalid length. [ 1044.642090][T21632] team0: Device hsr_slave_0 failed to register rx_handler [ 1044.752009][T21634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15129'. [ 1045.004869][T21642] hsr0: entered promiscuous mode [ 1045.044916][T21642] hsr_slave_0: left promiscuous mode [ 1045.462664][T21658] syz.0.15133[21658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.462743][T21658] syz.0.15133[21658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.494586][T21658] syz.0.15133[21658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.368149][T21736] syz.2.15137[21736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.432394][T21742] loop2: detected capacity change from 0 to 128 [ 1046.493511][T21749] loop0: detected capacity change from 0 to 512 [ 1046.508166][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.508166][T21742] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1046.527470][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.527470][T21742] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1046.536158][T21749] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.15140: bg 0: block 5: invalid block bitmap [ 1046.554092][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.554092][T21742] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1046.558407][T21749] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1046.567470][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.567470][T21742] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1046.590547][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.590547][T21742] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1046.603926][T21742] syz.2.15138: attempt to access beyond end of device [ 1046.603926][T21742] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1046.615619][T21749] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15140: invalid indirect mapped block 3 (level 2) [ 1046.659135][T21749] EXT4-fs (loop0): 1 orphan inode deleted [ 1046.664987][T21749] EXT4-fs (loop0): 1 truncate cleaned up [ 1046.688293][T21749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.704437][T21763] loop2: detected capacity change from 0 to 512 [ 1046.717419][T21763] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.15142: invalid block [ 1046.737872][T21763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15142: invalid indirect mapped block 4294967295 (level 1) [ 1046.752382][T21763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15142: invalid indirect mapped block 4294967295 (level 1) [ 1046.768589][T21763] EXT4-fs (loop2): 2 truncates cleaned up [ 1046.774996][T21763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.782384][T21778] program syz.0.15140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1047.317347][T21454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.329243][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.358934][T21830] loop0: detected capacity change from 0 to 512 [ 1047.381793][T28768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.429704][T28768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.482399][T28768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.529937][T21831] chnl_net:caif_netlink_parms(): no params data found [ 1047.564684][T28768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.594517][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 1047.594531][ T29] audit: type=1326 audit(2000000569.250:62578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.604597][T20635] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1047.638511][ T29] audit: type=1326 audit(2000000569.260:62579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.655786][T20635] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1047.662206][ T29] audit: type=1326 audit(2000000569.260:62580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.698392][ T29] audit: type=1326 audit(2000000569.260:62581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.722116][ T29] audit: type=1326 audit(2000000569.260:62582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.745893][ T29] audit: type=1326 audit(2000000569.260:62583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.769790][ T29] audit: type=1326 audit(2000000569.260:62584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.793716][ T29] audit: type=1326 audit(2000000569.260:62585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.817477][ T29] audit: type=1326 audit(2000000569.260:62586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.841140][ T29] audit: type=1326 audit(2000000569.260:62587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.4.15149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1047.887963][T21831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.895136][T21831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.908369][T21831] bridge_slave_0: entered allmulticast mode [ 1047.915194][T21831] bridge_slave_0: entered promiscuous mode [ 1047.937559][T28768] bridge_slave_1: left allmulticast mode [ 1047.943302][T28768] bridge_slave_1: left promiscuous mode [ 1047.949150][T28768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.959708][T28768] bridge_slave_0: left allmulticast mode [ 1047.965358][T28768] bridge_slave_0: left promiscuous mode [ 1047.971164][T28768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.089191][T28768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.102174][T28768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.112695][T28768] bond0 (unregistering): Released all slaves [ 1048.122215][T21831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.129361][T21831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.138716][T21831] bridge_slave_1: entered allmulticast mode [ 1048.145404][T21831] bridge_slave_1: entered promiscuous mode [ 1048.172526][T21831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.183381][T21831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.205371][T21831] team0: Port device team_slave_0 added [ 1048.212254][T21831] team0: Port device team_slave_1 added [ 1048.231421][T28768] hsr_slave_0: left promiscuous mode [ 1048.240972][T28768] hsr_slave_1: left promiscuous mode [ 1048.249250][T21788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.262059][T28768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.269598][T28768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.289697][T28768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.297429][T28768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.309709][T28768] veth1_macvtap: left promiscuous mode [ 1048.315310][T28768] veth0_macvtap: left promiscuous mode [ 1048.320871][T28768] veth1_vlan: left promiscuous mode [ 1048.326245][T28768] veth0_vlan: left promiscuous mode [ 1048.492224][T28768] team0 (unregistering): Port device team_slave_1 removed [ 1048.504361][T28768] team0 (unregistering): Port device team_slave_0 removed [ 1048.558122][T21831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.565095][T21831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.591253][T21831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.610226][T21831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.617381][T21831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.643433][T21831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.657411][T21869] program syz.1.15157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.783417][T21831] hsr_slave_0: entered promiscuous mode [ 1048.790108][T21831] hsr_slave_1: entered promiscuous mode [ 1048.796234][T21831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.803864][T21831] Cannot create hsr debugfs directory [ 1048.946185][T21853] chnl_net:caif_netlink_parms(): no params data found [ 1048.992602][T21853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.999913][T21853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.009501][T21853] bridge_slave_0: entered allmulticast mode [ 1049.016417][T21853] bridge_slave_0: entered promiscuous mode [ 1049.026483][T21853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.033559][T21853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.041059][T21853] bridge_slave_1: entered allmulticast mode [ 1049.047772][T21853] bridge_slave_1: entered promiscuous mode [ 1049.070662][T21853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.074332][T21903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21903 comm=syz.4.15162 [ 1049.082323][T21853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.108661][T21903] bond4: entered promiscuous mode [ 1049.113756][T21903] bond4: entered allmulticast mode [ 1049.119538][T21903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1049.130092][T21903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=21903 comm=syz.4.15162 [ 1049.152263][T21853] team0: Port device team_slave_0 added [ 1049.163484][T28768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.176868][T21853] team0: Port device team_slave_1 added [ 1049.195030][T21853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.202042][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.228121][T21853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.241144][T21853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.248246][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.274466][T21853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.289286][T28768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.314935][T21853] hsr_slave_0: entered promiscuous mode [ 1049.321500][T21853] hsr_slave_1: entered promiscuous mode [ 1049.328009][T21853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.335922][T21853] Cannot create hsr debugfs directory [ 1049.367675][T21831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1049.383164][T28768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.394633][T21831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1049.411303][T21831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1049.422137][T21831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1049.437084][T28768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.491369][T21831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.518708][T21831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.528085][T28768] bridge_slave_1: left allmulticast mode [ 1049.533780][T28768] bridge_slave_1: left promiscuous mode [ 1049.539707][T28768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.547679][T28768] bridge_slave_0: left allmulticast mode [ 1049.553324][T28768] bridge_slave_0: left promiscuous mode [ 1049.559060][T28768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.670362][T28768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.680918][T28768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.691175][T28768] bond0 (unregistering): Released all slaves [ 1049.700545][T28768] bond1 (unregistering): Released all slaves [ 1049.709372][T28768] bond2 (unregistering): Released all slaves [ 1049.718740][T28768] bond3 (unregistering): Released all slaves [ 1049.727850][T28768] bond4 (unregistering): Released all slaves [ 1049.743311][T28773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.750405][T28773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.761491][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.768705][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.804557][T28768] hsr_slave_0: left promiscuous mode [ 1049.812777][T28768] hsr_slave_1: left promiscuous mode [ 1049.820670][T28768] veth1_macvtap: left promiscuous mode [ 1049.826743][T28768] veth0_macvtap: left promiscuous mode [ 1049.832664][T28768] veth1_vlan: left promiscuous mode [ 1049.838027][T28768] veth0_vlan: left promiscuous mode [ 1049.918385][T28768] team0 (unregistering): Port device team_slave_1 removed [ 1049.929233][T28768] team0 (unregistering): Port device team_slave_0 removed [ 1049.986767][T21831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.069708][T21831] veth0_vlan: entered promiscuous mode [ 1050.078480][T21831] veth1_vlan: entered promiscuous mode [ 1050.093863][T21831] veth0_macvtap: entered promiscuous mode [ 1050.102658][T21831] veth1_macvtap: entered promiscuous mode [ 1050.112917][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.123526][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.133390][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.143979][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.153886][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.164325][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.174193][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.184612][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.194495][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.204952][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.214809][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.225293][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.235178][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.245648][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.258349][T21831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.269196][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.279795][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.289650][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.300276][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.310372][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.320979][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.330826][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.341281][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.351123][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.361605][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.371413][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.381988][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.392065][T21831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.402554][T21831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.414435][T21831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.426720][T21831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.435437][T21831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.444269][T21831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.453153][T21831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.467204][T21943] loop0: detected capacity change from 0 to 512 [ 1050.480923][T21853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1050.488587][T21943] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.15173: bg 0: block 5: invalid block bitmap [ 1050.501663][T21943] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1050.503318][T21853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1050.510914][T21943] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15173: invalid indirect mapped block 3 (level 2) [ 1050.535045][T21943] EXT4-fs (loop0): 1 orphan inode deleted [ 1050.539033][T21853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1050.540906][T21943] EXT4-fs (loop0): 1 truncate cleaned up [ 1050.554763][T21943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.574435][T21853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1050.614182][T21948] loop3: detected capacity change from 0 to 512 [ 1050.624620][T21949] program syz.0.15173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1050.633462][T21853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.643957][T21948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15148: bg 0: block 393: padding at end of block bitmap is not set [ 1050.649011][T21853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.666080][T21948] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1050.675568][T21948] EXT4-fs (loop3): 2 truncates cleaned up [ 1050.679473][T28774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.681622][T21948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.688398][T28774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.709118][T21853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1050.719559][T21853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.740764][T28774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.747857][T28774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.821193][T21853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.839796][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.913722][T21853] veth0_vlan: entered promiscuous mode [ 1050.924945][T21853] veth1_vlan: entered promiscuous mode [ 1050.960187][T21853] veth0_macvtap: entered promiscuous mode [ 1050.968274][T21853] veth1_macvtap: entered promiscuous mode [ 1050.979697][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.990356][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.000765][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.011336][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.021192][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.031634][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.041484][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.051931][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.061758][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.072225][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.082118][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.092546][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.102588][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.113058][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.122927][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.133354][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.146636][T21853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.154852][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.165421][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.175288][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.186115][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.196134][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.206672][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.216504][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.227269][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.237163][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.247693][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.257547][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.268109][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.278055][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.281030][T21978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21978 comm=syz.1.15178 [ 1051.288485][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.288577][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.321377][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.332066][T21853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.340345][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.357817][T21971] netlink: 'syz.4.15175': attribute type 10 has an invalid length. [ 1051.370290][T21971] team0: Device hsr_slave_0 failed to register rx_handler [ 1051.392681][T21853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.401560][T21853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.410314][T21853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.419109][T21853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.511476][T21990] loop2: detected capacity change from 0 to 512 [ 1051.528188][T21992] loop0: detected capacity change from 0 to 512 [ 1051.547207][T21992] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.15183: bg 0: block 5: invalid block bitmap [ 1051.576018][T21992] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1051.592344][T21992] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15183: invalid indirect mapped block 3 (level 2) [ 1051.611708][T21992] EXT4-fs (loop0): 1 orphan inode deleted [ 1051.617633][T21992] EXT4-fs (loop0): 1 truncate cleaned up [ 1051.644939][T21992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.690893][T21992] program syz.0.15183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.725058][T19225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.776269][T21996] loop0: detected capacity change from 0 to 512 [ 1051.794277][T21996] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.15184: invalid block [ 1051.821469][T21996] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15184: invalid indirect mapped block 4294967295 (level 1) [ 1051.849500][T21996] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15184: invalid indirect mapped block 4294967295 (level 1) [ 1051.882472][T21996] EXT4-fs (loop0): 2 truncates cleaned up [ 1051.904138][T21996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.580364][T22087] program syz.4.15188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.775694][T21945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1053.172747][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1053.172762][ T29] audit: type=1326 audit(2000000574.830:62622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22164 comm="syz.1.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1053.223753][ T29] audit: type=1326 audit(2000000574.870:62623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22164 comm="syz.1.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1053.247562][ T29] audit: type=1326 audit(2000000574.870:62624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22164 comm="syz.1.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x7ffc0000 [ 1053.289667][T22169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22169 comm=syz.1.15193 [ 1053.311610][T22169] bond2: entered promiscuous mode [ 1053.316781][T22169] bond2: entered allmulticast mode [ 1053.323096][T22169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1053.334282][T22172] loop2: detected capacity change from 0 to 512 [ 1053.338225][T22169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=22169 comm=syz.1.15193 [ 1053.342883][T22172] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.15194: bg 0: block 5: invalid block bitmap [ 1053.367314][T22172] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1053.377796][T22172] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15194: invalid indirect mapped block 3 (level 2) [ 1053.391327][T22172] EXT4-fs (loop2): 1 orphan inode deleted [ 1053.397202][T22172] EXT4-fs (loop2): 1 truncate cleaned up [ 1053.404109][T22172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.423090][T22176] tipc: Enabling of bearer rejected, already enabled [ 1053.429027][T22172] program syz.2.15194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.439220][T22180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22180 comm=syz.1.15197 [ 1053.462728][T21853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.524863][T22190] loop2: detected capacity change from 0 to 128 [ 1053.555767][ T29] audit: type=1326 audit(2000000575.210:62625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22182 comm="syz.4.15200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x0 [ 1053.560192][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.560192][T22190] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1053.610774][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.610774][T22190] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1053.625174][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.625174][T22190] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1053.640907][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.640907][T22190] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1053.654379][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.654379][T22190] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1053.668963][T22190] syz.2.15202: attempt to access beyond end of device [ 1053.668963][T22190] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1053.688391][T19225] EXT4-fs error (device loop0): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1053.705323][T19225] EXT4-fs error (device loop0): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1053.731128][T22197] loop2: detected capacity change from 0 to 512 [ 1053.800755][T22201] loop3: detected capacity change from 0 to 512 [ 1053.808681][T22201] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15206: bg 0: block 5: invalid block bitmap [ 1053.824409][T22201] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1053.833385][T22201] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15206: invalid indirect mapped block 3 (level 2) [ 1053.847478][T22201] EXT4-fs (loop3): 1 orphan inode deleted [ 1053.853369][T22201] EXT4-fs (loop3): 1 truncate cleaned up [ 1053.859569][T22201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.928727][T22204] program syz.3.15206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.957209][T22007] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.189747][T28778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.241802][T22209] chnl_net:caif_netlink_parms(): no params data found [ 1054.261092][T28778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.343155][T28778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.363550][T22224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22224 comm=syz.1.15210 [ 1054.382071][T22226] program syz.4.15209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.395164][T22209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.402346][T22209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.431816][T22209] bridge_slave_0: entered allmulticast mode [ 1054.440525][ T29] audit: type=1326 audit(2000000576.100:62626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.4.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1054.465434][T22209] bridge_slave_0: entered promiscuous mode [ 1054.471820][ T29] audit: type=1326 audit(2000000576.100:62627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.4.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1054.495572][ T29] audit: type=1326 audit(2000000576.130:62628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.4.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1054.519248][ T29] audit: type=1326 audit(2000000576.130:62629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.4.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1054.543188][ T29] audit: type=1326 audit(2000000576.130:62630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.4.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692967dff9 code=0x7ffc0000 [ 1054.547003][T22209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.573986][T22209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.600716][T22209] bridge_slave_1: entered allmulticast mode [ 1054.607568][T22209] bridge_slave_1: entered promiscuous mode [ 1054.624405][T28778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.653372][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.665371][T22209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.686765][T22235] syzkaller0: entered allmulticast mode [ 1054.712847][T22209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.745275][T22240] loop3: detected capacity change from 0 to 512 [ 1054.765077][T22245] syzkaller0 (unregistering): left allmulticast mode [ 1054.837768][T22209] team0: Port device team_slave_0 added [ 1054.850235][T28778] bridge_slave_1: left allmulticast mode [ 1054.856110][T28778] bridge_slave_1: left promiscuous mode [ 1054.861800][T28778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.896529][T28778] bridge_slave_0: left allmulticast mode [ 1054.902371][T28778] bridge_slave_0: left promiscuous mode [ 1054.908175][T28778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.054031][T28778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.074243][T28778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.095107][T28778] bond0 (unregistering): Released all slaves [ 1055.114616][T28778] bond1 (unregistering): Released all slaves [ 1055.134345][T22209] team0: Port device team_slave_1 added [ 1055.170070][T22209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.177223][T22209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.203330][T22209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.218324][T28778] tipc: Disabling bearer [ 1055.223616][T28778] tipc: Left network mode [ 1055.230558][T22209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.237591][T22209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.263754][T22209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.280066][ T29] audit: type=1326 audit(2000000576.940:62631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.1.15218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518447dff9 code=0x0 [ 1055.319238][T28778] hsr_slave_0: left promiscuous mode [ 1055.325163][T28778] hsr_slave_1: left promiscuous mode [ 1055.340318][T28778] veth1_macvtap: left promiscuous mode [ 1055.346153][T28778] veth0_macvtap: left promiscuous mode [ 1055.351847][T28778] veth1_vlan: left promiscuous mode [ 1055.357285][T28778] veth0_vlan: left promiscuous mode [ 1055.359803][T22313] loop2: detected capacity change from 0 to 128 [ 1055.473385][T28778] team0 (unregistering): Port device team_slave_1 removed [ 1055.487664][T28778] team0 (unregistering): Port device team_slave_0 removed [ 1055.540679][T22209] hsr_slave_0: entered promiscuous mode [ 1055.549552][T22209] hsr_slave_1: entered promiscuous mode [ 1055.556463][T22209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.564034][T22209] Cannot create hsr debugfs directory [ 1055.569614][T22313] tipc: Started in network mode [ 1055.574482][T22313] tipc: Node identity ac14140f, cluster identity 4711 [ 1055.583538][T22313] tipc: New replicast peer: 255.255.255.255 [ 1055.589845][T22313] tipc: Enabled bearer , priority 10 [ 1055.673988][T22354] loop3: detected capacity change from 0 to 512 [ 1055.691186][T22354] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.703888][T22354] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.708123][T22352] loop2: detected capacity change from 0 to 512 [ 1055.722327][T22361] program syz.1.15221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.729541][T22352] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.15222: invalid block [ 1055.755877][T22352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15222: invalid indirect mapped block 4294967295 (level 1) [ 1055.756262][T21831] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1055.774530][T22352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15222: invalid indirect mapped block 4294967295 (level 1) [ 1055.794504][T22352] EXT4-fs (loop2): 2 truncates cleaned up [ 1055.801604][T22352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.854618][T22379] loop3: detected capacity change from 0 to 512 [ 1055.873962][T22379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15226: bg 0: block 5: invalid block bitmap [ 1055.892488][T22379] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1055.904641][T22379] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15226: invalid indirect mapped block 3 (level 2) [ 1055.920798][T22379] EXT4-fs (loop3): 1 orphan inode deleted [ 1055.926645][T22379] EXT4-fs (loop3): 1 truncate cleaned up [ 1055.932724][T22379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.060668][T22209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.070346][T22209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.083381][T22209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.092175][T22209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1056.152785][T22209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.184035][T22209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.193839][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.200978][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.212356][T28778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.219568][T28778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.285533][T22209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.356046][T22209] veth0_vlan: entered promiscuous mode [ 1056.364382][T22209] veth1_vlan: entered promiscuous mode [ 1056.382716][T22209] veth0_macvtap: entered promiscuous mode [ 1056.390297][T22209] veth1_macvtap: entered promiscuous mode [ 1056.402050][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.412618][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.422762][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.433204][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.443086][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.453583][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.463538][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.474206][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.484030][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.495441][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.505285][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.515720][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.525550][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.536249][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.546166][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.556690][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.566606][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.577667][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.588482][T22209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.601046][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.611727][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.621634][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.632149][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.642031][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.652495][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.662499][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.673005][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.683052][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.693823][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.703979][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.714868][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.721157][T21853] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1056.724925][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.739810][T21853] EXT4-fs error (device loop2): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1056.748322][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.748360][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.748372][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.748384][T22209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.748395][T22209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.812870][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.813898][ T3341] tipc: Node number set to 2886997007 [ 1056.829645][T22209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.839358][T22209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.848376][T22209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.857310][T22209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.866223][T22209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.887920][T22448] loop3: detected capacity change from 0 to 512 [ 1057.109072][T22385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.129571][T28774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.181760][T28774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.251653][T28774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.289895][T28774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.370126][T28774] bridge_slave_1: left allmulticast mode [ 1057.375927][T28774] bridge_slave_1: left promiscuous mode [ 1057.381666][T28774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.392397][T28774] bridge_slave_0: left allmulticast mode [ 1057.398207][T28774] bridge_slave_0: left promiscuous mode [ 1057.403977][T28774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.532008][T28774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.542738][T28774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.555381][T28774] bond0 (unregistering): Released all slaves [ 1057.664157][T28774] tipc: Disabling bearer [ 1057.669476][T28774] tipc: Left network mode [ 1057.696797][T28774] hsr_slave_0: left promiscuous mode [ 1057.702942][T28774] hsr_slave_1: left promiscuous mode [ 1057.718810][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.726549][T28774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.734408][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.742027][T28774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.754139][T28774] veth1_macvtap: left promiscuous mode [ 1057.759781][T28774] veth0_macvtap: left promiscuous mode [ 1057.765391][T28774] veth1_vlan: left promiscuous mode [ 1057.770824][T28774] veth0_vlan: left promiscuous mode [ 1057.807030][T22493] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1057.807046][T22493] syz.4.15241[22493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.813838][T22493] syz.4.15241[22493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.828830][T22493] syz.4.15241[22493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1058.002960][T28774] team0 (unregistering): Port device team_slave_1 removed [ 1058.055194][T28774] team0 (unregistering): Port device team_slave_0 removed [ 1058.162451][T22468] chnl_net:caif_netlink_parms(): no params data found [ 1058.189676][T22519] wireguard0: entered promiscuous mode [ 1058.195229][T22519] wireguard0: entered allmulticast mode [ 1058.259826][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1058.259838][ T29] audit: type=1326 audit(2000000579.920:62648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22554 comm="syz.0.15246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1816dff9 code=0x7ffc0000 [ 1058.289696][ T29] audit: type=1326 audit(2000000579.920:62649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22554 comm="syz.0.15246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1816dff9 code=0x7ffc0000 [ 1058.313457][ T29] audit: type=1326 audit(2000000579.920:62650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22554 comm="syz.0.15246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f2a1816dff9 code=0x7ffc0000 [ 1058.337115][ T29] audit: type=1326 audit(2000000579.920:62651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22554 comm="syz.0.15246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1816dff9 code=0x7ffc0000 [ 1058.446300][T22468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.453554][T22468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.460848][T22468] bridge_slave_0: entered allmulticast mode [ 1058.467387][T22468] bridge_slave_0: entered promiscuous mode [ 1058.474142][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.481622][T22572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.500467][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.508021][T22572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.545588][T22468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.552697][T22468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.560000][T22468] bridge_slave_1: entered allmulticast mode [ 1058.566679][T22468] bridge_slave_1: entered promiscuous mode [ 1058.599410][T22468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.610542][T22468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.630365][T22590] loop3: detected capacity change from 0 to 512 [ 1058.643601][T22468] team0: Port device team_slave_0 added [ 1058.652562][T22468] team0: Port device team_slave_1 added [ 1058.660761][T22590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15251: bg 0: block 5: invalid block bitmap [ 1058.680465][T22590] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1058.691616][T22590] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15251: invalid indirect mapped block 3 (level 2) [ 1058.710204][T22468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.715579][T22590] EXT4-fs (loop3): 1 orphan inode deleted [ 1058.717203][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.722857][T22590] EXT4-fs (loop3): 1 truncate cleaned up [ 1058.748726][T22468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.749631][T22468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.771953][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.796505][T22590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.797968][T22468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.845928][T22468] hsr_slave_0: entered promiscuous mode [ 1058.852284][T22468] hsr_slave_1: entered promiscuous mode [ 1058.860591][T22468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.868212][T22468] Cannot create hsr debugfs directory [ 1059.223010][T22468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1059.233163][T22468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1059.242126][T22468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1059.251128][T22468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1059.297459][T22468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.316916][T22468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.329927][T28778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.337024][T28778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.349257][T28773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.356399][T28773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.424105][T22468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.476992][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.507391][T22678] netlink: 'syz.4.15252': attribute type 10 has an invalid length. [ 1059.517352][T22678] team0: Device hsr_slave_0 failed to register rx_handler [ 1059.525611][ T29] audit: type=1326 audit(2000000581.190:62652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.3.15253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1059.564662][ T29] audit: type=1326 audit(2000000581.210:62653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.3.15253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1059.588495][ T29] audit: type=1326 audit(2000000581.210:62654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.3.15253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1059.612227][ T29] audit: type=1326 audit(2000000581.210:62655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.3.15253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1059.637169][T22682] loop3: detected capacity change from 0 to 128 [ 1059.638771][T22468] veth0_vlan: entered promiscuous mode [ 1059.643646][T22682] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 1059.662244][T22682] netlink: 'syz.3.15254': attribute type 3 has an invalid length. [ 1059.662631][T22468] veth1_vlan: entered promiscuous mode [ 1059.709941][T22468] veth0_macvtap: entered promiscuous mode [ 1059.722528][T22468] veth1_macvtap: entered promiscuous mode [ 1059.744929][T22686] wireguard0: entered promiscuous mode [ 1059.750492][T22686] wireguard0: entered allmulticast mode [ 1059.784574][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.795251][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.805267][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.815910][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.825780][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.836207][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.846026][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.856482][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.866379][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.876810][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.886763][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.897325][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.907308][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.918059][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.927907][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.938406][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.955077][T22693] program syz.1.15257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.979987][T22468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.012796][ T29] audit: type=1326 audit(2000000581.660:62656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22694 comm="syz.3.15258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1060.016131][T22695] loop3: detected capacity change from 0 to 128 [ 1060.036532][ T29] audit: type=1326 audit(2000000581.660:62657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22694 comm="syz.3.15258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b4cfdff9 code=0x7ffc0000 [ 1060.086024][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.096499][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.106532][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.117032][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.126968][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.137528][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.147354][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.157834][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.167647][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.178104][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.187916][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.198427][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.208243][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.218785][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.228648][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.239111][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.251582][T22468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.261965][T22468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.270812][T22468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.279534][T22468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.288242][T22468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.328643][T22701] loop3: detected capacity change from 0 to 512 [ 1060.378947][T22701] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.398834][T22708] loop2: detected capacity change from 0 to 512 [ 1060.405284][T22701] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.431569][T21831] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1060.443663][T22708] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.456554][T22708] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.517458][T22468] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1060.705126][T22732] loop2: detected capacity change from 0 to 1024 [ 1060.738123][T22732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.809344][T22732] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1060.865923][T22468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.872242][T22756] syz.3.15272[22756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1060.875011][T22756] syz.3.15272[22756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1060.891860][T22757] usb usb1: usbfs: process 22757 (syz.4.15271) did not claim interface 0 before use [ 1060.905839][T22756] syz.3.15272[22756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1060.923345][T22757] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1060.997805][T22756] loop3: detected capacity change from 0 to 512 [ 1061.032908][T22756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.045906][T22756] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.094762][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.120532][T22794] loop3: detected capacity change from 0 to 512 [ 1061.130671][T22794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15277: bg 0: block 5: invalid block bitmap [ 1061.143929][T22794] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1061.154646][T22794] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15277: invalid indirect mapped block 3 (level 2) [ 1061.169991][T22794] EXT4-fs (loop3): 1 orphan inode deleted [ 1061.175771][T22794] EXT4-fs (loop3): 1 truncate cleaned up [ 1061.182180][T22794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.259188][T22809] syzkaller0: entered allmulticast mode [ 1061.271397][T22808] syzkaller0: left allmulticast mode [ 1061.274565][T22817] program syz.3.15277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1061.617659][T22876] netlink: 'syz.0.15280': attribute type 10 has an invalid length. [ 1061.648928][T22876] team0: Device hsr_slave_0 failed to register rx_handler [ 1061.844321][T22913] loop2: detected capacity change from 0 to 512 [ 1061.871445][T22913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.15281: bg 0: block 5: invalid block bitmap [ 1061.917391][T22913] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1061.939927][T22913] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15281: invalid indirect mapped block 3 (level 2) [ 1061.968126][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.981765][T22913] EXT4-fs (loop2): 1 orphan inode deleted [ 1061.987662][T22913] EXT4-fs (loop2): 1 truncate cleaned up [ 1062.007612][T22913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.033304][T22934] program syz.4.15284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.479096][T22944] serio: Serial port ptm0 [ 1062.678505][T22468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.742692][T22951] loop2: detected capacity change from 0 to 1024 [ 1062.767139][T22951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.784508][T22951] syzkaller0: entered allmulticast mode [ 1062.798379][T22950] syzkaller0: left allmulticast mode [ 1062.812291][T22468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.964838][T22968] loop3: detected capacity change from 0 to 512 [ 1062.973351][T22968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15296: bg 0: block 5: invalid block bitmap [ 1062.988076][T22968] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1062.996977][T22968] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15296: invalid indirect mapped block 3 (level 2) [ 1063.011358][T22968] EXT4-fs (loop3): 1 orphan inode deleted [ 1063.017136][T22968] EXT4-fs (loop3): 1 truncate cleaned up [ 1063.023224][T22968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.091056][T22970] program syz.3.15296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.271387][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 1063.271402][ T29] audit: type=1326 audit(2000000584.930:63223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedb8d74fa7 code=0x7ffc0000 [ 1063.301768][ T29] audit: type=1326 audit(2000000584.930:63224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedb8d19959 code=0x7ffc0000 [ 1063.325532][ T29] audit: type=1326 audit(2000000584.930:63225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fedb8d7dff9 code=0x7ffc0000 [ 1063.349871][ T29] audit: type=1326 audit(2000000584.930:63226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22946 comm="syz.0.15289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a18164fa7 code=0x7ffc0000 [ 1063.373742][ T29] audit: type=1326 audit(2000000584.930:63227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22946 comm="syz.0.15289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a18109959 code=0x7ffc0000 [ 1063.397354][ T29] audit: type=1326 audit(2000000584.930:63228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22946 comm="syz.0.15289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2a1816dff9 code=0x7ffc0000 [ 1063.421088][ T29] audit: type=1326 audit(2000000584.940:63229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedb8d74fa7 code=0x7ffc0000 [ 1063.444693][ T29] audit: type=1326 audit(2000000584.940:63230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedb8d19959 code=0x7ffc0000 [ 1063.468453][ T29] audit: type=1326 audit(2000000584.940:63231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.2.15294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fedb8d7dff9 code=0x7ffc0000 [ 1063.492298][ T29] audit: type=1326 audit(2000000584.940:63232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22946 comm="syz.0.15289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a18164fa7 code=0x7ffc0000 [ 1063.557737][T22977] wireguard0: entered promiscuous mode [ 1063.558001][T22980] syz.1.15300[22980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1063.563347][T22977] wireguard0: entered allmulticast mode [ 1063.581145][T22980] syz.1.15300[22980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1063.581260][T22980] syz.1.15300[22980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1063.677485][T22990] program syz.1.15302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.706348][T22989] syzkaller0: entered allmulticast mode [ 1063.719770][T22988] syzkaller0: left allmulticast mode [ 1063.806572][T21831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.532020][T23017] debugfs: Bad value for 'uid' [ 1064.537146][T23017] debugfs: Bad value for 'uid' [ 1064.552337][T23017] netlink: 'syz.1.15314': attribute type 10 has an invalid length. [ 1064.586451][T23017] team0: Port device netdevsim1 added [ 1064.609353][T23020] netlink: 'syz.1.15314': attribute type 10 has an invalid length. [ 1064.642785][T23020] team0: Port device netdevsim1 removed [ 1064.669046][T23020] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1064.741672][T23028] syz.3.15318[23028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1064.741818][T23028] syz.3.15318[23028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1064.764074][T23026] loop2: detected capacity change from 0 to 1024 [ 1064.788514][T23028] syz.3.15318[23028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1064.854296][T23039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.884810][T23026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.935846][T22468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.992139][T23048] program syz.1.15322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.014516][T23052] wireguard1: entered promiscuous mode [ 1065.020093][T23052] wireguard1: entered allmulticast mode [ 1065.250288][T23062] netlink: 'syz.0.15329': attribute type 10 has an invalid length. [ 1065.259101][T23062] team0: Device hsr_slave_0 failed to register rx_handler [ 1065.873767][T23075] loop3: detected capacity change from 0 to 512 [ 1066.269484][T23085] loop2: detected capacity change from 0 to 128 [ 1066.292701][T23087] wireguard1: entered promiscuous mode [ 1066.298245][T23087] wireguard1: entered allmulticast mode [ 1066.342069][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.342069][T23085] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1066.364811][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.364811][T23085] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1066.388351][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.388351][T23085] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1066.401843][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.401843][T23085] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1066.416994][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.416994][T23085] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1066.431975][T23085] syz.2.15340: attempt to access beyond end of device [ 1066.431975][T23085] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1066.448320][T23099] program syz.1.15345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.698014][T23101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.711704][T23101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.965437][T23119] ================================================================== [ 1066.973553][T23119] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 1066.981706][T23119] [ 1066.984016][T23119] read to 0xffff888115fae9a8 of 4 bytes by task 23121 on cpu 0: [ 1066.991635][T23119] file_update_time+0xfe/0x2b0 [ 1066.996394][T23119] fault_dirty_shared_page+0xde/0x340 [ 1067.001776][T23119] handle_mm_fault+0x1370/0x2a80 [ 1067.006713][T23119] exc_page_fault+0x296/0x650 [ 1067.011390][T23119] asm_exc_page_fault+0x26/0x30 [ 1067.016677][T23119] __put_user_4+0x11/0x20 [ 1067.021011][T23119] do_recvmmsg+0x40f/0x740 [ 1067.025449][T23119] __x64_sys_recvmmsg+0xe2/0x170 [ 1067.030376][T23119] x64_sys_call+0x26e3/0x2d60 [ 1067.035048][T23119] do_syscall_64+0xc9/0x1c0 [ 1067.039633][T23119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.045528][T23119] [ 1067.047844][T23119] write to 0xffff888115fae9a8 of 4 bytes by task 23119 on cpu 1: [ 1067.055556][T23119] inode_update_timestamps+0xaf/0x280 [ 1067.060921][T23119] file_update_time+0x220/0x2b0 [ 1067.065760][T23119] fault_dirty_shared_page+0xde/0x340 [ 1067.071138][T23119] handle_mm_fault+0x1370/0x2a80 [ 1067.076081][T23119] exc_page_fault+0x3b9/0x650 [ 1067.080761][T23119] asm_exc_page_fault+0x26/0x30 [ 1067.085615][T23119] [ 1067.087928][T23119] value changed: 0x1a39eacc -> 0x24f47fcd [ 1067.093632][T23119] [ 1067.095944][T23119] Reported by Kernel Concurrency Sanitizer on: [ 1067.102083][T23119] CPU: 1 UID: 0 PID: 23119 Comm: syz.4.15353 Tainted: G W 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1067.114417][T23119] Tainted: [W]=WARN [ 1067.118212][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1067.128272][T23119] ================================================================== [ 1067.137799][T23122] netlink: 'syz.4.15353': attribute type 10 has an invalid length. [ 1067.146156][T23122] team0: Device hsr_slave_0 failed to register rx_handler