last executing test programs: 3.381700558s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3801, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000010003306000000000000f75a0bb2ffff000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100600000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 3.160352451s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='inet_sock_set_state\x00', r0}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000700)=0xb, 0x4) (async, rerun: 64) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, 0x12, 0x800, 0x70bd2a, 0x25dfdbff, {0x2a, 0x1c, 0x9, 0x0, {0x4e20, 0x4e20, [0x8000, 0x6, 0xffffffff, 0x5], [0x80, 0x7fffffff, 0x8, 0x6], 0x0, [0x0, 0xe00000]}, 0x80000001, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "7a87e5fb49c4c9167b0bed30ff3f6b8da75b790b5d2506cb385942ee150fd0eb322043be7775149d7bc57c544f85ae2aa183f8be277d1e3eeb454dc06f454b2114cf3a7d54ac98fa1e0256c27348362e78f0fc90edb5723eeab7602a"}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) listen(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000cc0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r5, @ANYBLOB="00006b746769643d0092", @ANYRESOCT, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1", @ANYRESOCT=r4], 0x1, 0x1fa, &(0x7f0000000500)="$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") (async, rerun: 32) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (rerun: 32) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000340)='./file1\x00') (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 3.148633603s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000780)={&(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)='N', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000000000008400000007"], 0x18}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x780, 0x7, 0x8, 0x1000, {{0x2d, 0x4, 0x3, 0x1e, 0xb4, 0x64, 0x0, 0xa9, 0x4, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x2c, 0xea, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x40}, {@private=0xa010100, 0x8001}]}, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0x7, [{@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9996}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @end, @cipso={0x86, 0x56, 0x3, [{0x2, 0x11, "15dddd76bfdbb7f26921a5b13b0f9b"}, {0x1, 0x3, "da"}, {0x6, 0xd, "f1db66d660e250cc2c008f"}, {0x1, 0x3, "7f"}, {0x6, 0x7, "5cb004ae74"}, {0x2, 0x4, "23a1"}, {0x5, 0xf, "d5fede9d786e8776ccfd50874d"}, {0x7, 0x10, "e53834db78d7f28aa6f9680559e6"}, {0x2, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 1.859629378s ago: executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 1.5795284s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x11, 0x0, 0x0) epoll_create1(0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x5, &(0x7f0000000000)=0x101, 0x29, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 1.532616927s ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xe) 1.171672282s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$tipc(0x1e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) read$qrtrtun(r4, &(0x7f0000000400)=""/214, 0xd6) write(r5, &(0x7f0000000000)='}', 0x1) 1.140192787s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x5, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) 1.12000248s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000070000010c0004400000000000000004f0000000030a01040000000000000000040000071c0008800c0002400000000000000f390c000140000000000000000508000a40000000010b00070066696c74657200007c0008800c000140000000000000003b0c00014000000000000000070c00014000000000000000030c000140000000000000dcdc0c000140ffffffffffffff0b0c00024000000000000000050c00024000000000000000040c000240000000000000001f0c00024000000000000100010c00014000000000000000000c000240000000000000000108000b407fffffff0900010073797a300000000008000a4000000001080007006e617400140000001100010000000000000000000900000a"], 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x11, 0x0, 0x0) epoll_create1(0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x5, &(0x7f0000000000)=0x101, 0x29, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 1.101487732s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000080)=0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r3, 0x1, 0x43, 0xfffffffffffffffd, &(0x7f0000000080)) 917.143171ms ago: executing program 4: fsopen(0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x20a40}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f00000000c0)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='xprtrdma_post_send_err\x00', r0}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syncfs(r5) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffff9f44, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x31, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000001040000000000007f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008573e786e73207f5ab4e4a825f67230a0000000600000018120000", @ANYBLOB="399e089ba7b7eea079abe937439d122c1003f06c320ed108be7da32131a426c7833c48eab1787e736f01bf00a9e4e2d8df79cbc098b706a4a73f8c17d1dd7658e1e5f1593240f5207c6cff7f5726f430e9d477d581fa26fbda598ec9d9ba09b64ac85eeb674b83acbd101c2c8df43f7fa32dcac41ca8743e243b44455c644a0d0428e8aec2e3065080d6a07554151d55b68bcb1af719f9f669a1d218aa9387f995fe51cd8a701c88dd3cacd4f4483b01abf7e9af5b9fca5040ea62517bfe7865b5dc78302d9c51e42f6b8048884ee91890c6c238708d2e4d307d2e1c", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000f3610fdee59052725a582c6eea040200000018110000b11c259494a031b4802c8100000018bd1fc500b49b370c1c08a4741715e887820179869e8c9a5d23c4a6e0448b846b9272b2d28850e4cb40e1073239134285f12860a724256a05d48293fe4b79eb1bdbe0879105012e30e21cee90e298b0c65a244c5d1ab1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009128f4ff0800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018000000f9ffffff0000000005000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xdc, &(0x7f0000000500)=""/220, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x6d, 0x80000000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r6, r3, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x5}, {0x1, 0x3, 0x5, 0xb}, {0x1, 0x1, 0x8, 0x2}, {0x5, 0x3, 0x3, 0x8}, {0x5, 0x5, 0xc, 0x8}]}, 0x90) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60000000007a3afffe8000000000000000000000000000bb00000000000000000000ffff7f00000186009078000000000000000000000000000aa78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af08020001"], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000fc01000000000000000000000000000001000000000000d834c594fdc3a73300"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) ioperm(0x0, 0x1b, 0x8001) io_setup(0x0, 0x0) 867.368868ms ago: executing program 2: r0 = semget$private(0x0, 0x0, 0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'geneve1\x00', {0x4872491a}, 0x7a}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, r5, 0xee01, 0x0, 0xee00}, 0x7fff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000, 0x7}) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000240)=0x5) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x2}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @enum={0xb, 0x9, 0x0, 0x6, 0x4, [{0x2, 0xe599}, {0xd}, {0x0, 0x9}, {0x9, 0x5}, {0xb, 0x7}, {0x1, 0x3ff}, {0xf, 0x4}, {0x5, 0x1}, {0x7}]}, @fwd={0x2}, @fwd={0xa}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x5, 0x2}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000500)=""/86, 0xeb, 0x56, 0x1, 0x5}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xfffffc00, 0x0}, 0x8) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x11, &(0x7f00000002c0)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x68}, @alu={0x7, 0x3df0264168e68db6, 0x6, 0xa, 0x9, 0x84}], &(0x7f0000000380)='GPL\x00', 0xa056, 0x0, 0x0, 0x41100, 0x5, '\x00', r6, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x2, 0x7}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, r4, r4, r4, r3, r9], &(0x7f0000000700)}, 0x90) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f00000008c0)=""/127) 850.271281ms ago: executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 837.823213ms ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380), 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x26, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8280, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") mkdir(&(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) rename(&(0x7f00000035c0)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 586.909451ms ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc8debe8cc65a3f103853"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9840365a80905ae7e5f175ec"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x8, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x67}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7}, {}, {0x0, 0x3}, @time=@time={0x0, 0xfffffffe}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0xc4) 580.553131ms ago: executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_io_uring_setup(0xd3f, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0x941}], 0x3}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x73fc0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth0_virt_wifi\x00', &(0x7f0000000180)=@ethtool_link_settings={0x26, 0x1000}}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x40c000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000000), 0x1) 566.643623ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x9, 0xc907, 0x3850, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x3}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaa8aaaa08004c0000380000000000029078ac1414bbac1e0001070b75ac1e0101ac1e0001890efb208e04ed5b376373d244790000001200907800000000"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) getpid() ioprio_set$pid(0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') acct(0x0) 555.641745ms ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000780)={&(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)='N', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000000000008400000007"], 0x18}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x780, 0x7, 0x8, 0x1000, {{0x2d, 0x4, 0x3, 0x1e, 0xb4, 0x64, 0x0, 0xa9, 0x4, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x2c, 0xea, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x40}, {@private=0xa010100, 0x8001}]}, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0x7, [{@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9996}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @end, @cipso={0x86, 0x56, 0x3, [{0x2, 0x11, "15dddd76bfdbb7f26921a5b13b0f9b"}, {0x1, 0x3, "da"}, {0x6, 0xd, "f1db66d660e250cc2c008f"}, {0x1, 0x3, "7f"}, {0x6, 0x7, "5cb004ae74"}, {0x2, 0x4, "23a1"}, {0x5, 0xf, "d5fede9d786e8776ccfd50874d"}, {0x7, 0x10, "e53834db78d7f28aa6f9680559e6"}, {0x2, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 545.284197ms ago: executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000f1ff0602000003000000b80300000800009acb533180b789778ec6f08fba4c0df400b7041900000000008500000003000000950000000000000084d7ab23614d7c949b26b137b7d68daa9bc66e788f48d6645375c3909ab60a9a18afab1965f2adbc3475057bbedb3a340fab133144309e3e162e34bfc1a1125100d7821a8504961b6ccd65365f392818ef95a57f83064e2a2be2572eb98ed9bf01ae92fdb1f43a87c6ecdb3b53d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x10001, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0xc, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) recvmsg(r4, &(0x7f0000000a80)={&(0x7f0000000900)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f0000000980)=""/241, 0xf1}], 0x2}, 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000400), 0x12) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRESDEC=r6, @ANYRESDEC], &(0x7f00000004c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000000)='./file0\x00', r10, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = dup(r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r13}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r14, 0x0, 0xc4, 0xa9, &(0x7f00000002c0)="f05d52eedf45ae6c159f7043264707d31c17e2b890739e552c458af43604aaf7be314e20341279ba4d89efd433e52bbcecf7e42a4b10bc890575a8f82f053c30d6b67e8a0f640cfd250898e2b896c6669aa1e6d5fda442f4aa76383c5a40c0967b50361a724f87b81a332c9d3cbd995af19e584e75829078126f0a25f7ab2272819597ea0c2e04f7596169306a9cb5df0b29129dae7b02291b56d3e1476cb22dea98fd32abcde187dbf2e622995fae9c68a8c89d8d2c2ccd8abc64b6aec08b286cd2d84b", &(0x7f0000000600)=""/169, 0x74a, 0x0, 0xd5, 0x50, &(0x7f00000006c0)="14a9be066ba824e991f26617d5757ee912f17d9a1d455ac7c54952c6161962af3d2f37c73ddc11a6be66c7215edbd00b83d066aa3a818fef97a01442fd39ebad7079cf6eff9133b84dd08d80e328261062b812bcbc177c548a19e1a98e5d77b03d7c5981ab48c6190fa519862795e660b9dfcb64acb5b65c42cd3127acbba2da3c5b4c430f487ec515bd7914b8875a1edc903104ebd602aa6596fd07efd33f95e3df5ec648f3ce9359959e6c78a19afe2f1d9a7deaf92fcd9154aa4c070f14933353ad27ce7fee5e66da91f1465053476b4b017f3b", &(0x7f0000000180)="b59482098838cb15f68e5affcf9d3f1819f909392cf3d23b920e1a4c7e51874cc9a442f6a6b4612ada2a0db06499bf4d01611893439277429803d18c286ab39f39875dad3ae336c8ddb8c905413c7a0a", 0x0, 0x0, 0xbda}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) 520.32226ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x4c4, &(0x7f00000000c0)="$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") listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x4, "001040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 518.079371ms ago: executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000006940)="45d8dbb09bcdf7e85e4aba0445f4c017", 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 382.826341ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$tipc(0x1e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) read$qrtrtun(r4, &(0x7f0000000400)=""/214, 0xd6) write(r5, &(0x7f0000000000)='}', 0x1) 275.741158ms ago: executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f0000000100), 0x3d) sendmsg$can_raw(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x3}, 0x6, 0x3, 0x0, 0x0, "69114f693deb289d"}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5, 0x800, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a628860aa6e365024153d004358b73a753e5074b25f3328e39d4d32b16f5a128e0d00da5935de9dc2df4937ddab7e2249ad356a0c06acbae37a90abbcee54219"}}, 0x80}}, 0x0) close(r0) 201.119149ms ago: executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 187.346811ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000080)=0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) 144.004567ms ago: executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 96.823405ms ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000002000000000000000400000d0000000004000000000000000000000000000000fe"], &(0x7f0000000180)=""/220, 0x5e, 0xdc, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x803, 0x10008) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 71.961979ms ago: executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1698, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@ipv4_getnetconf={0x54, 0x52, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x40}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7ff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}]}, 0x54}}, 0x0) r10 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r10, 0x4, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 17.358097ms ago: executing program 0: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380), 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x26, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8280, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$eJzs3bFu00AYB/DPKSQpQ9UZMViwMFXAExShIiEiIYEywAQSTC0LLIGpI6/AW6JO3Q4lZxMcB4kAjgn8fks++e873/ksZ8rl5Y23p5+GsTAeFzE4juO4LOIwBnHzIB8/j5b99iEAYFdcphRfUtb3WACA7fD9DwD/n2fPXzy+P5mcPC3LccTFeVEdn03z58NHk5M75cLhstXFbDbdi/rcuzmfNvOrca1qfy/nZTMfxu1bOZ9nD55MVvJRvO5y4gAAAAAAAAAAAAAAAAAAAAAA0KOj8pvW/j6L/OhHea6+2x9oZf+ez3H9ytamAQAAAAAAAAAAAAAAAAAAADvt/bguPnw8fXV29ubdjhcppTSfzyatRtU9+J2rH/wFc28VEWuieuk36bBu091Q094f7LCcF0VE9LwEv/hEDZurM6hufndDLdY8Est3xKjztxAAAAAAAAAAAAAAAAAAABCNn/33PRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6M/y//83LNIod/ATJ6+77v6W5wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/7WsAAAD//wc2Fgs=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) rename(&(0x7f00000035c0)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 0s ago: executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) kernel console output (not intermixed with test programs): 4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.942319][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.981263][ T4723] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 678.987802][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 678.995310][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 679.021326][ T4727] loop4: detected capacity change from 0 to 1024 [ 679.059762][ T4727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 679.092916][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 679.102367][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.109785][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.117881][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.125467][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.315359][ T6053] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 679.547752][ T4724] vhci_hcd: connection reset by peer [ 679.553400][T18695] vhci_hcd: stop threads [ 679.557653][T18695] vhci_hcd: release socket [ 679.562327][T18695] vhci_hcd: disconnect device [ 679.776185][ T29] audit: type=1326 audit(1717286530.764:53260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4d87bee9 code=0x0 [ 679.805733][ T4764] 9pnet_fd: Insufficient options for proto=fd [ 679.846706][ T4766] netem: change failed [ 679.853476][ T4766] loop2: detected capacity change from 0 to 512 [ 679.864999][ T4766] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 679.879816][ T4766] EXT4-fs (loop2): mount failed [ 680.181876][ T29] audit: type=1326 audit(1717286531.146:53261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f979aee9 code=0x7ffc0000 [ 680.206014][ T29] audit: type=1326 audit(1717286531.146:53262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f979aee9 code=0x7ffc0000 [ 680.230321][ T29] audit: type=1326 audit(1717286531.146:53263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f979aee9 code=0x7ffc0000 [ 680.254337][ T29] audit: type=1326 audit(1717286531.146:53264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f979aee9 code=0x7ffc0000 [ 680.278383][ T29] audit: type=1326 audit(1717286531.146:53265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f10f979aee9 code=0x7ffc0000 [ 681.057563][ T4844] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.075549][ T4844] loop4: detected capacity change from 0 to 512 [ 681.102388][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 681.102402][ T29] audit: type=1326 audit(1717286532.002:53294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.132653][ T29] audit: type=1326 audit(1717286532.002:53295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.157097][ T29] audit: type=1326 audit(1717286532.002:53296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.181329][ T29] audit: type=1326 audit(1717286532.002:53297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.205481][ T29] audit: type=1326 audit(1717286532.002:53298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.229516][ T29] audit: type=1326 audit(1717286532.002:53299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.253754][ T29] audit: type=1326 audit(1717286532.002:53300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.277899][ T29] audit: type=1326 audit(1717286532.002:53301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.301947][ T29] audit: type=1326 audit(1717286532.002:53302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 681.326175][ T29] audit: type=1326 audit(1717286532.002:53303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad522ee9 code=0x7ffc0000 [ 682.790209][ T4924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.803661][ T4925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.821254][ T4927] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 682.828816][ T911] IPVS: starting estimator thread 0... [ 682.834924][ T4925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.844680][ T4924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.859430][ T4925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.874803][ T4924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.895236][ T4924] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(24) [ 682.901866][ T4924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 682.909464][ T4924] vhci_hcd vhci_hcd.0: Device attached [ 682.929380][ T4924] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(29) [ 682.935990][ T4924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 682.943608][ T4924] vhci_hcd vhci_hcd.0: Device attached [ 682.949870][ T4925] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(26) [ 682.956466][ T4925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 682.959394][ T4929] IPVS: using max 2880 ests per chain, 144000 per kthread [ 682.964032][ T4925] vhci_hcd vhci_hcd.0: Device attached [ 683.004012][ T4931] vhci_hcd: connection closed [ 683.004160][T15689] vhci_hcd: stop threads [ 683.013189][T15689] vhci_hcd: release socket [ 683.017678][T15689] vhci_hcd: disconnect device [ 683.023693][ T4936] vhci_hcd: connection closed [ 683.027450][T15689] vhci_hcd: stop threads [ 683.036561][T15689] vhci_hcd: release socket [ 683.041047][T15689] vhci_hcd: disconnect device [ 683.546570][ T4937] vhci_hcd: connection closed [ 683.546734][T15689] vhci_hcd: stop threads [ 683.555780][T15689] vhci_hcd: release socket [ 683.560190][T15689] vhci_hcd: disconnect device [ 683.764780][ T4983] tipc: Started in network mode [ 683.769718][ T4983] tipc: Node identity 66663a2036380a73, cluster identity 4711 [ 683.777251][ T4983] tipc: Enabling of bearer rejected, failed to enable media [ 683.805331][ T4978] loop3: detected capacity change from 0 to 8192 [ 683.923079][ T4998] __nla_validate_parse: 7 callbacks suppressed [ 683.923095][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 683.924714][ T4978] Invalid ELF header magic: != ELF [ 683.976219][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.133785][ T5030] loop2: detected capacity change from 0 to 512 [ 684.156163][ T5030] ext4: Unknown parameter 'H' [ 684.167205][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.192189][ T5042] loop4: detected capacity change from 0 to 512 [ 684.201111][ T5042] EXT4-fs (loop4): filesystem is read-only [ 684.208449][ T5042] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 684.220539][ T5042] EXT4-fs (loop4): filesystem is read-only [ 684.226450][ T5042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 684.233048][ T5042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 684.248461][ T5042] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 684.258316][ T5042] EXT4-fs (loop4): 1 orphan inode deleted [ 684.265298][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 684.291051][ T4104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.307967][ T5039] loop3: detected capacity change from 0 to 1024 [ 684.315745][ T5039] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47082!=20869) [ 684.327026][ T5039] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 684.338476][ T5039] JBD2: no valid journal superblock found [ 684.344231][ T5039] EXT4-fs (loop3): Could not load journal inode [ 684.413436][ T5058] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 684.421606][ T5058] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.466411][ T5063] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.489268][ T5063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.594734][ T5077] loop3: detected capacity change from 0 to 512 [ 684.606844][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.619430][ T5077] ext4 filesystem being mounted at /root/syzkaller-testdir468874650/syzkaller.9L8SO2/44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.684555][ T4119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.754342][ T5090] loop3: detected capacity change from 0 to 764 [ 684.769340][ T5090] syz_tun: entered promiscuous mode [ 684.771338][ T5092] loop2: detected capacity change from 0 to 2048 [ 684.774800][ T6053] usb 1-1: enqueue for inactive port 0 [ 684.787054][ T5090] batadv_slave_1: entered promiscuous mode [ 684.787175][ T6053] usb 1-1: enqueue for inactive port 0 [ 684.830730][ T5092] loop2: p2 < > [ 684.884179][ T6053] vhci_hcd: vhci_device speed not set [ 685.007835][ T5098] loop2: detected capacity change from 0 to 512 [ 685.015141][ T5098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 685.026631][ T5098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 685.034619][ T5098] System zones: 1-12 [ 685.039039][ T5098] EXT4-fs (loop2): 1 truncate cleaned up [ 685.045107][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.110134][ T5098] loop2: detected capacity change from 512 to 11 [ 685.116731][ T5098] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 685.125885][ T5098] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #18: comm syz-executor.2: mark_inode_dirty error [ 685.137753][ T5098] EXT4-fs error (device loop2): ext4_get_max_inline_size:116: inode #18: comm syz-executor.2: can't get inode location 18 [ 685.150769][ T5098] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 685.159939][ T5098] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #18: comm syz-executor.2: mark_inode_dirty error [ 685.171908][ T5098] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 685.181010][ T5098] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #18: comm syz-executor.2: mark_inode_dirty error [ 685.193713][ T5098] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 685.203069][ T5098] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #18: comm syz-executor.2: mark_inode_dirty error [ 685.214942][ T5098] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 685.240943][ T2969] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.256837][T18695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.267160][T18695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.359015][T18695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.369372][T18695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.406191][ T5131] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 685.414384][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.457639][T18695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.468002][T18695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.522343][T18695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.532751][T18695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.568712][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 685.605786][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.612898][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.620094][ T5124] bridge_slave_0: entered allmulticast mode [ 685.627028][ T5124] bridge_slave_0: entered promiscuous mode [ 685.635896][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.643034][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.650384][ T5124] bridge_slave_1: entered allmulticast mode [ 685.656709][ T5124] bridge_slave_1: entered promiscuous mode [ 685.677482][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.686837][T18695] bridge_slave_1: left allmulticast mode [ 685.692595][T18695] bridge_slave_1: left promiscuous mode [ 685.698243][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.706044][T18695] bridge_slave_0: left allmulticast mode [ 685.711683][T18695] bridge_slave_0: left promiscuous mode [ 685.717315][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.865245][T18695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.875571][T18695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.885960][T18695] bond0 (unregistering): Released all slaves [ 685.895204][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.921669][ T5124] team0: Port device team_slave_0 added [ 685.929065][ T5124] team0: Port device team_slave_1 added [ 685.946059][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.953035][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.979044][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.990583][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.997556][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.023495][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.039775][T18695] hsr_slave_0: left promiscuous mode [ 686.045557][T18695] hsr_slave_1: left promiscuous mode [ 686.053129][T18695] veth1_macvtap: left promiscuous mode [ 686.058800][T18695] veth0_macvtap: left promiscuous mode [ 686.064276][T18695] veth1_vlan: left promiscuous mode [ 686.069506][T18695] veth0_vlan: left promiscuous mode [ 686.157479][T18695] team0 (unregistering): Port device team_slave_1 removed [ 686.171379][T18695] team0 (unregistering): Port device team_slave_0 removed [ 686.221668][ T5124] hsr_slave_0: entered promiscuous mode [ 686.227707][ T5124] hsr_slave_1: entered promiscuous mode [ 686.234111][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.241851][ T5124] Cannot create hsr debugfs directory [ 686.584800][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.593440][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.602042][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.610379][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.643794][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.657670][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.668185][T31571] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.675245][T31571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.687088][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.694230][T13588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.720976][ T5124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.731415][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.776968][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.839479][ T5124] veth0_vlan: entered promiscuous mode [ 686.847616][ T5124] veth1_vlan: entered promiscuous mode [ 686.861567][ T5124] veth0_macvtap: entered promiscuous mode [ 686.871572][ T5124] veth1_macvtap: entered promiscuous mode [ 686.882357][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.892877][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.902777][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.913277][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.923156][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.933651][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.943467][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.953974][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.965431][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.975556][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.986044][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.995856][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.006767][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.016439][ T5190] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.016843][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.036439][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.046405][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.056866][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.069844][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.080739][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.089586][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.098313][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.107134][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.118515][ T5194] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 687.194018][ T29] kauditd_printk_skb: 3450 callbacks suppressed [ 687.194031][ T29] audit: type=1401 audit(1717286537.665:56754): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 687.220363][ T5208] loop2: detected capacity change from 0 to 128 [ 687.236098][ T5208] vxcan1: tx address claim with dlc 1 [ 687.278852][ T5215] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 687.289002][ T5215] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 687.298282][ T5215] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 687.316716][ T5215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28009 sclass=netlink_route_socket pid=5215 comm=syz-executor.1 [ 687.323163][ T5217] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 687.356123][ T5219] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 687.471247][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.506409][ T5252] nfs: Unknown parameter 'syzkaller' [ 687.528817][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.569344][ T29] audit: type=1400 audit(1717286538.018:56755): avc: denied { read } for pid=5263 comm="syz-executor.0" path="socket:[158248]" dev="sockfs" ino=158248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 687.647263][ T5270] 9pnet: Could not find request transport: t/file0 [ 687.735249][ T5291] bridge0: port 3(team0) entered blocking state [ 687.741542][ T5291] bridge0: port 3(team0) entered disabled state [ 687.748375][ T5291] team0: entered allmulticast mode [ 687.753504][ T5291] team_slave_0: entered allmulticast mode [ 687.759260][ T5291] team_slave_1: entered allmulticast mode [ 687.780680][ T5291] team0: entered promiscuous mode [ 687.785785][ T5291] team_slave_0: entered promiscuous mode [ 687.791521][ T5291] team_slave_1: entered promiscuous mode [ 687.801212][ T5291] bridge0: port 3(team0) entered blocking state [ 687.807577][ T5291] bridge0: port 3(team0) entered forwarding state [ 687.860574][ T5300] ebtables: ebtables: counters copy to user failed while replacing table [ 687.873168][ T5300] Cannot find add_set index 0 as target [ 687.904717][ T5305] loop2: detected capacity change from 0 to 764 [ 687.916196][ T5305] 9p: Unknown uid 00000000004294967295 [ 688.009806][ T5309] gretap0: entered promiscuous mode [ 688.026079][ T5309] 0ªX¹¦D: renamed from gretap0 [ 688.038364][ T5309] 0ªX¹¦D: left promiscuous mode [ 688.043214][ T5309] 0ªX¹¦D: entered allmulticast mode [ 688.050067][ T5309] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 688.116031][ T5318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28713 sclass=netlink_route_socket pid=5318 comm=syz-executor.0 [ 688.135427][ T5318] loop0: detected capacity change from 0 to 256 [ 688.142997][ T5318] FAT-fs (loop0): Unrecognized mount option "gid=-ûŒ°Nüqûw?•[<" or missing value [ 688.247667][ T5337] loop0: detected capacity change from 0 to 128 [ 688.290261][ T5334] loop2: detected capacity change from 0 to 1024 [ 688.298551][ T5334] EXT4-fs: Ignoring removed orlov option [ 688.304370][ T5334] /dev/loop2: Can't open blockdev [ 688.388990][ T5358] loop0: detected capacity change from 0 to 512 [ 688.396533][ T5358] EXT4-fs: Ignoring removed mblk_io_submit option [ 688.405048][ T5358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 688.414160][ T5358] System zones: 1-12 [ 688.418980][ T5358] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 688.436043][ T5358] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 688.450064][ T5358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.488829][ T1867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.570139][ T5377] loop0: detected capacity change from 0 to 128 [ 688.630870][ T5384] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 688.829068][ T29] audit: type=1400 audit(1717286539.180:56756): avc: denied { remount } for pid=5397 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 689.208245][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 689.263315][ T5410] ¡: renamed from team0 (while UP) [ 689.288502][ T5410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 689.362625][ T5418] loop1: detected capacity change from 0 to 256 [ 689.370064][ T5418] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 689.716724][ T5447] loop1: detected capacity change from 0 to 256 [ 689.723233][ T5447] FAT-fs (loop1): Unrecognized mount option "gid=0xffffffffffffffff" or missing value [ 689.849095][ T5457] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 690.157340][ T5462] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 690.168404][ T5462] loop0: detected capacity change from 0 to 512 [ 690.175638][ T5462] EXT4-fs: Ignoring removed orlov option [ 690.181614][ T5462] EXT4-fs: journaled quota format not specified [ 690.433907][ T5467] loop2: detected capacity change from 0 to 256 [ 690.467989][ T5467] 9pnet_virtio: no channels available for device 127.0.0.1 [ 690.493117][ T5473] loop2: detected capacity change from 0 to 164 [ 690.570164][ T5484] loop2: detected capacity change from 0 to 512 [ 690.577919][ T5484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 690.588868][ T5484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 690.596960][ T5484] System zones: 1-12 [ 690.601128][ T5484] EXT4-fs (loop2): 1 truncate cleaned up [ 690.607123][ T5484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.631881][ T5124] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir3204906293/syzkaller.ZsGuaU/22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 690.658098][ T5124] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 690.678862][ T5124] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir3204906293/syzkaller.ZsGuaU/22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 690.704918][ T5124] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 690.725020][ T5124] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir3204906293/syzkaller.ZsGuaU/22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 690.752320][ T5124] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 690.773626][ T5124] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir3204906293/syzkaller.ZsGuaU/22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 690.801063][ T5124] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 690.821257][ T5124] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir3204906293/syzkaller.ZsGuaU/22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 690.848544][ T5124] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 691.546332][ T5527] __nla_validate_parse: 5 callbacks suppressed [ 691.546347][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 692.478785][ T5553] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 692.478785][ T5553] program syz-executor.3 not setting count and/or reply_len properly [ 692.537524][ T5561] loop0: detected capacity change from 0 to 1024 [ 692.545110][ T5561] EXT4-fs: Ignoring removed orlov option [ 692.552326][ T5561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 692.561177][ T5561] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 692.562180][ T5565] loop3: detected capacity change from 0 to 256 [ 692.572101][ T5561] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 692.573142][ T5561] EXT4-fs (loop0): invalid journal inode [ 692.579756][ T5565] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 692.588927][ T5561] EXT4-fs (loop0): can't get journal size [ 692.610038][ T5561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.636317][ T1867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.812617][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.850087][ T29] audit: type=1326 audit(1717286542.925:56757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 692.867705][ T5579] loop0: detected capacity change from 0 to 8192 [ 692.883339][ T29] audit: type=1326 audit(1717286542.944:56758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 692.907495][ T29] audit: type=1326 audit(1717286542.944:56759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 692.931646][ T29] audit: type=1326 audit(1717286542.944:56760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 692.956093][ T29] audit: type=1326 audit(1717286542.944:56761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 692.980395][ T29] audit: type=1326 audit(1717286542.944:56762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 693.004484][ T29] audit: type=1326 audit(1717286542.944:56763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 693.028548][ T29] audit: type=1326 audit(1717286542.944:56764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 693.052608][ T29] audit: type=1326 audit(1717286542.944:56765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 693.076661][ T29] audit: type=1326 audit(1717286542.944:56766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 693.107768][ T5584] loop1: detected capacity change from 0 to 512 [ 693.115487][ T5584] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 693.123920][ T5584] EXT4-fs error (device loop1): ext4_get_journal_inode:5752: comm syz-executor.1: inode #67108864: comm syz-executor.1: iget: illegal inode # [ 693.140231][ T5584] EXT4-fs (loop1): no journal found [ 693.145440][ T5584] EXT4-fs (loop1): can't get journal size [ 693.151674][ T5584] EXT4-fs (loop1): failed to initialize system zone (-22) [ 693.159747][ T5584] EXT4-fs (loop1): mount failed [ 693.269780][ T5605] loop0: detected capacity change from 0 to 1024 [ 693.274842][ T5604] loop3: detected capacity change from 0 to 1764 [ 693.278345][ T5605] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 693.283990][ T5604] iso9660: Bad value for 'sbsector' [ 693.292328][ T5605] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 693.307394][ T5605] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 693.317854][ T5605] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: inode #5: comm syz-executor.0: unexpected bad inode w/o EXT4_IGET_BAD [ 693.332338][ T5605] EXT4-fs (loop0): no journal found [ 693.337674][ T5605] EXT4-fs (loop0): can't get journal size [ 693.343593][ T5605] EXT4-fs (loop0): failed to initialize system zone (-117) [ 693.350816][ T5605] EXT4-fs (loop0): mount failed [ 693.371137][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 693.395789][ T5603] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 693.410411][ T5603] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 693.486772][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 694.160431][ T5124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.174164][ T3983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.273397][ T3983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.325884][ T3983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.357331][ T3983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.417967][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 694.438209][ T5637] chnl_net:caif_netlink_parms(): no params data found [ 694.474132][ T3983] team0: left allmulticast mode [ 694.479093][ T3983] team_slave_0: left allmulticast mode [ 694.484804][ T3983] team_slave_1: left allmulticast mode [ 694.490327][ T3983] team0: left promiscuous mode [ 694.495122][ T3983] team_slave_0: left promiscuous mode [ 694.500592][ T3983] team_slave_1: left promiscuous mode [ 694.506191][ T3983] bridge0: port 3(team0) entered disabled state [ 694.544535][ T3983] bridge_slave_1: left allmulticast mode [ 694.550266][ T3983] bridge_slave_1: left promiscuous mode [ 694.555871][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.564220][ T3983] bridge_slave_0: left allmulticast mode [ 694.570022][ T3983] bridge_slave_0: left promiscuous mode [ 694.575628][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.606423][ T5662] loop3: detected capacity change from 0 to 512 [ 694.616782][ T5662] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: bad e_name length [ 694.635157][ T5662] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 694.652619][ T5662] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.709779][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.720078][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.730511][ T3983] bond0 (unregistering): Released all slaves [ 694.743815][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.753134][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.770601][ T5662] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 312: padding at end of block bitmap is not set [ 694.806438][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.813584][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.821010][ T5637] bridge_slave_0: entered allmulticast mode [ 694.834126][ T5637] bridge_slave_0: entered promiscuous mode [ 694.852051][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.859146][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.870071][ T5637] bridge_slave_1: entered allmulticast mode [ 694.880173][ T5637] bridge_slave_1: entered promiscuous mode [ 694.888901][ T3983] hsr_slave_0: left promiscuous mode [ 694.894787][ T3983] hsr_slave_1: left promiscuous mode [ 694.900596][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.908059][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.919556][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.927169][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.947638][ T3983] veth1_macvtap: left promiscuous mode [ 694.953194][ T3983] veth0_macvtap: left promiscuous mode [ 694.958760][ T3983] veth1_vlan: left promiscuous mode [ 694.964009][ T3983] veth0_vlan: left promiscuous mode [ 695.077236][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 695.087463][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 695.143988][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.157767][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.177914][ T5637] team0: Port device team_slave_0 added [ 695.185054][ T5637] team0: Port device team_slave_1 added [ 695.204447][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.211423][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.237430][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.249479][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.256501][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.258242][ T5709] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. [ 695.282487][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.316232][ T5637] hsr_slave_0: entered promiscuous mode [ 695.322642][ T5637] hsr_slave_1: entered promiscuous mode [ 695.328695][ T5637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.336424][ T5637] Cannot create hsr debugfs directory [ 695.346345][ T5711] loop1: detected capacity change from 0 to 512 [ 695.355546][ T5711] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 695.367610][ T5711] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 695.386623][ T5711] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 695.399743][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.412171][ T5711] ext2 filesystem being mounted at /root/syzkaller-testdir255308448/syzkaller.YQ2CMe/186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.481263][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.507318][ T4119] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 695.523721][ T4119] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 695.545230][ T4119] syz_tun (unregistering): left promiscuous mode [ 695.551770][ T5720] loop1: detected capacity change from 0 to 2048 [ 695.590809][ T5720] loop1: p1 < > p2 < > p3 p4 < > [ 695.595950][ T5720] loop1: partition table partially beyond EOD, truncated [ 695.603406][ T5720] loop1: p1 start 2305 is beyond EOD, truncated [ 695.609690][ T5720] loop1: p2 start 4294902784 is beyond EOD, truncated [ 695.616544][ T5720] loop1: p3 start 4278191616 is beyond EOD, truncated [ 695.701544][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 695.710071][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 695.718640][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 695.730806][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.776137][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.787873][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.802859][T31571] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.809946][T31571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.832271][T31571] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.839392][T31571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.858408][ T5637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.937797][ T5740] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 695.952804][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.001852][ T5745] loop1: detected capacity change from 0 to 2048 [ 696.054411][ T5745] loop1: p1 p2 p4 [ 696.055843][ T5762] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 696.058972][ T5745] loop1: p4 start 4294967040 is beyond EOD, truncated [ 696.077309][ T5762] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 696.092945][ T5759] loop0: detected capacity change from 0 to 512 [ 696.101773][ T5759] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 696.117217][ T5759] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 696.129550][ T5637] veth0_vlan: entered promiscuous mode [ 696.149329][ T5759] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 696.150495][ T5637] veth1_vlan: entered promiscuous mode [ 696.173757][ T5759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.186122][ T5772] loop4: detected capacity change from 0 to 1024 [ 696.192876][ T5759] ext2 filesystem being mounted at /root/syzkaller-testdir105126832/syzkaller.TlNzBv/309/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.194687][ T5772] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 696.214999][ T5637] veth0_macvtap: entered promiscuous mode [ 696.217434][ T5772] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 696.224854][ T5637] veth1_macvtap: entered promiscuous mode [ 696.245565][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.256250][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.266516][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.267193][ T5772] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 696.277063][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.288628][ T5772] EXT4-fs error (device loop4): ext4_get_journal_inode:5752: inode #5: comm syz-executor.4: unexpected bad inode w/o EXT4_IGET_BAD [ 696.296544][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.316060][ T5772] EXT4-fs (loop4): no journal found [ 696.320408][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.320423][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.325614][ T5772] EXT4-fs (loop4): can't get journal size [ 696.325913][ T5772] EXT4-fs (loop4): failed to initialize system zone (-117) [ 696.335559][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.346831][ T5772] EXT4-fs (loop4): mount failed [ 696.353099][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.393808][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.404301][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.414191][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.424625][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.434507][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.444939][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.454817][ T5637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.465257][ T5637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.476450][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.486350][ T5772] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 696.486558][ T1867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.513663][ T5772] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 696.515815][ T5782] loop1: detected capacity change from 0 to 764 [ 696.536966][ T5782] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 696.550460][ T5637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.559555][ T5637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.568245][ T5637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.576969][ T5637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.644195][ T1867] bond0: (slave syz_tun): Releasing backup interface [ 696.658603][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 696.661703][ T5796] loop1: detected capacity change from 0 to 512 [ 696.675307][ T5796] EXT4-fs: Ignoring removed mblk_io_submit option [ 696.682042][ T5796] EXT4-fs: Ignoring removed mblk_io_submit option [ 696.695606][ T5796] EXT4-fs: Mount option(s) incompatible with ext2 [ 696.745131][ T3983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.811008][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.818171][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.826770][ T5742] bridge_slave_0: entered allmulticast mode [ 696.845653][ T5742] bridge_slave_0: entered promiscuous mode [ 696.872256][ T3983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.889249][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.896364][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.904074][ T5742] bridge_slave_1: entered allmulticast mode [ 696.910531][ T5742] bridge_slave_1: entered promiscuous mode [ 696.919928][ T5811] loop2: detected capacity change from 0 to 512 [ 696.930536][ T5811] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 696.941939][ T3983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.957486][ T5811] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 696.976258][ T5811] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 696.990318][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.006568][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.016495][ T5811] ext2 filesystem being mounted at /root/syzkaller-testdir4185360446/syzkaller.xIOXgq/3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.035111][ T3983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.047523][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.077047][ T5742] team0: Port device team_slave_0 added [ 697.087705][ T5742] team0: Port device team_slave_1 added [ 697.120967][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.123929][ T3983] bridge_slave_1: left allmulticast mode [ 697.135621][ T3983] bridge_slave_1: left promiscuous mode [ 697.141543][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.149655][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.250900][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.261318][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.272562][ T3983] bond0 (unregistering): Released all slaves [ 697.281237][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.288188][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.314167][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.325591][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.332547][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.358761][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.375204][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 697.384577][ T5829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 697.391781][ T5829] IPv6: NLM_F_CREATE should be set when creating new route [ 697.432638][ T5834] loop2: detected capacity change from 0 to 512 [ 697.440617][ T5834] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 697.450670][ T3983] hsr_slave_0: left promiscuous mode [ 697.450714][ T5834] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 697.464139][ T5834] System zones: 0-2 [ 697.464154][ T3983] hsr_slave_1: left promiscuous mode [ 697.464157][ T5834] , 18-18, 34-35 [ 697.477426][ T5834] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.489818][ T3983] veth1_macvtap: left promiscuous mode [ 697.495364][ T3983] veth0_macvtap: left promiscuous mode [ 697.500959][ T3983] veth1_vlan: left promiscuous mode [ 697.506214][ T3983] veth0_vlan: left promiscuous mode [ 697.628604][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 697.642263][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 697.693197][ T5742] hsr_slave_0: entered promiscuous mode [ 697.699441][ T5742] hsr_slave_1: entered promiscuous mode [ 697.705585][ T5742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.714019][ T5742] Cannot create hsr debugfs directory [ 697.777199][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 697.825319][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.832450][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.839821][ T5809] bridge_slave_0: entered allmulticast mode [ 697.846616][ T5809] bridge_slave_0: entered promiscuous mode [ 697.855943][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.863172][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.870580][ T5809] bridge_slave_1: entered allmulticast mode [ 697.877465][ T5809] bridge_slave_1: entered promiscuous mode [ 697.907466][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.921533][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.944180][ T5742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.972070][ T5809] team0: Port device team_slave_0 added [ 697.978776][ T5809] team0: Port device team_slave_1 added [ 697.996113][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.003169][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.029766][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.057048][ T5742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.070220][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.077167][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.103111][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.134919][ T5809] hsr_slave_0: entered promiscuous mode [ 698.142546][ T5809] hsr_slave_1: entered promiscuous mode [ 698.148552][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.156365][ T5809] Cannot create hsr debugfs directory [ 698.170324][ T5742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.252690][ T5742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.317800][ T5890] loop1: detected capacity change from 0 to 2048 [ 698.325720][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.334596][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.343594][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.352292][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.393150][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.400540][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 698.406609][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.418681][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.425730][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.440521][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.447619][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.499322][ T5894] loop2: detected capacity change from 0 to 2048 [ 698.509349][ T5894] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 698.549117][ T5894] EXT4-fs (loop2): get root inode failed [ 698.554877][ T5894] EXT4-fs (loop2): mount failed [ 698.561645][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 698.561659][ T29] audit: type=1326 audit(1717286548.202:57174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14bcae8ee9 code=0x0 [ 698.607780][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 698.616736][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 698.625749][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 698.636227][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.648001][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.708109][ T29] audit: type=1400 audit(1717286548.368:57175): avc: denied { name_bind } for pid=5895 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 698.742464][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.778273][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.785440][ T29] audit: type=1400 audit(1717286548.386:57176): avc: denied { name_connect } for pid=5895 comm="syz-executor.1" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 698.844199][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.851283][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.871563][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.872050][ T29] audit: type=1400 audit(1717286548.515:57177): avc: denied { map } for pid=5895 comm="syz-executor.1" path="socket:[161329]" dev="sockfs" ino=161329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 698.878663][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.004352][ T5742] veth0_vlan: entered promiscuous mode [ 699.029755][ T5742] veth1_vlan: entered promiscuous mode [ 699.076811][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.111902][ T5742] veth0_macvtap: entered promiscuous mode [ 699.135026][ T5742] veth1_macvtap: entered promiscuous mode [ 699.157309][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.167888][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.177721][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.188227][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.198061][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.208480][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.218388][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.228827][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.238689][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.249116][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.265794][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.277170][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.287636][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.297538][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.308037][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.317857][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.328315][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.338142][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.348617][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.358515][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.368967][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.382643][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.394734][ T5742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.403666][ T5742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.412677][ T5742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.421489][ T5742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.447236][ T29] audit: type=1400 audit(1717286549.042:57178): avc: denied { read } for pid=5926 comm="syz-executor.2" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 699.470786][ T29] audit: type=1400 audit(1717286549.042:57179): avc: denied { open } for pid=5926 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 699.517165][ T29] audit: type=1400 audit(1717286549.042:57180): avc: denied { ioctl } for pid=5926 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=220 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 699.538022][ T5809] veth0_vlan: entered promiscuous mode [ 699.542645][ T29] audit: type=1400 audit(1717286549.106:57181): avc: denied { ioctl } for pid=5926 comm="syz-executor.2" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 699.582025][ T5809] veth1_vlan: entered promiscuous mode [ 699.633364][ T5809] veth0_macvtap: entered promiscuous mode [ 699.650627][ T5809] veth1_macvtap: entered promiscuous mode [ 699.667711][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.678335][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.688268][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.698756][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.708623][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.719102][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.728977][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.739455][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.749389][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.759886][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.769760][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.780329][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.796328][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.811491][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.821976][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.831771][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.842254][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.852110][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.862608][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.872457][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.882934][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.892791][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.903249][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.913172][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.923683][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.937681][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.945066][ T5949] wg0: entered promiscuous mode [ 699.949988][ T5949] wg0: entered allmulticast mode [ 699.961801][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.970647][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.979662][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.988478][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.226893][ T5970] loop0: detected capacity change from 0 to 1024 [ 700.229775][ T5968] loop4: detected capacity change from 0 to 512 [ 700.246958][ T5968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set [ 700.262197][ T5968] Quota error (device loop4): write_blk: dquota write failed [ 700.269713][ T5968] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 700.279773][ T5968] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1 [ 700.292867][ T5968] EXT4-fs (loop4): 1 truncate cleaned up [ 700.299170][ T5968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.319285][ T5975] loop2: detected capacity change from 0 to 256 [ 700.335741][ T5968] ext4 filesystem being mounted at /root/syzkaller-testdir1331394032/syzkaller.EHMbgc/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.393777][ T4104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.418528][ T5984] loop1: detected capacity change from 0 to 1024 [ 700.427019][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.441592][ T5984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.467908][ T5991] loop4: detected capacity change from 0 to 256 [ 700.564316][ T5997] loop1: detected capacity change from 0 to 256 [ 700.596120][ T6002] Process accounting resumed [ 700.865013][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.872522][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.879914][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.887422][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.900861][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.908387][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.909243][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.915843][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.932544][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.939959][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.947577][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.955010][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.962419][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.969800][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.977369][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.984928][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.992399][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 700.999835][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.007235][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.014650][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.022075][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.029505][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.036942][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.044305][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.051747][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.059238][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.066868][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.074271][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.081850][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.089323][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.096754][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.104166][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.111565][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.118983][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.126416][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.134005][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.141405][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.148845][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.156302][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.163680][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.171110][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.178577][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.185956][T13588] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 701.196084][T13588] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 701.367526][ T6039] loop0: detected capacity change from 0 to 256 [ 701.450352][ T6047] Process accounting resumed [ 701.456922][ T6049] Process accounting resumed [ 702.216811][ T6033] dccp_close: ABORT with 64 bytes unread [ 702.226148][ T6087] loop1: detected capacity change from 0 to 256 [ 702.250114][ T6091] loop3: detected capacity change from 0 to 512 [ 702.272520][ T6091] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 702.284132][ T6091] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 702.294241][ T6091] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 702.308488][ T6091] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 702.308578][ T6093] Process accounting resumed [ 702.318732][ T6091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 702.335095][ T6091] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 702.349279][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.356535][ T6097] Process accounting resumed [ 702.364933][ T6091] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 702.378029][ T6091] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 702.388176][ T6091] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 702.401781][ T6091] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 702.413524][ T6091] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 702.423688][ T6091] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 702.437363][ T6091] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 702.459358][ T6091] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 702.487979][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.608806][ T6111] loop1: detected capacity change from 0 to 512 [ 702.630653][ T6111] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 702.648474][ T6113] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 702.669284][ T6111] EXT4-fs (loop1): 1 truncate cleaned up [ 702.679478][ T6113] loop3: detected capacity change from 0 to 512 [ 702.689936][ T6113] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.695189][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.713928][ T6113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e066e01c, mo2=0002] [ 702.724821][ T6113] System zones: 1-12 [ 702.732356][ T6111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.736011][ T6113] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 702.755260][ T6113] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 702.774245][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.795311][ T6113] SELinux: Context syz: is not valid (left unmapped). [ 702.817557][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.878413][ T6126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 702.886504][ T6126] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 702.895939][ T6126] NCSI netlink: No device for ifindex 131092 [ 703.244941][ T6138] loop1: detected capacity change from 0 to 256 [ 703.329459][ T6140] loop1: detected capacity change from 0 to 512 [ 703.338552][ T6140] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.350230][ T6140] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 703.360408][ T6140] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 703.373946][ T6140] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 703.382625][ T6140] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 703.396874][ T6140] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 703.410250][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.426338][ T6140] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.437864][ T6140] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 703.448003][ T6140] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 703.461559][ T6140] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.473214][ T6140] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 703.483343][ T6140] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 703.496734][ T6140] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 703.519744][ T6140] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 703.546202][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.600868][ T6144] Process accounting resumed [ 703.643236][ T6146] Process accounting resumed [ 703.799027][ T6157] loop0: detected capacity change from 0 to 512 [ 703.810116][ T6157] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.821735][ T6157] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 703.831979][ T6157] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 703.852050][ T6157] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 703.867639][ T6157] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 703.884055][ T6157] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 703.898626][ T6157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.911715][ T6131] dccp_close: ABORT with 64 bytes unread [ 703.926521][ T6157] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.938093][ T6157] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 703.948270][ T6157] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 703.967599][ T6157] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.979205][ T6157] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 703.989405][ T6157] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.007793][ T6157] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.032668][ T6157] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.062300][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.173185][ T6188] loop0: detected capacity change from 0 to 512 [ 704.216367][ T6188] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.227967][ T6188] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.238110][ T6188] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.266857][ T6188] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 704.275451][ T6188] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 704.290513][ T6188] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 704.309379][ T6188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.328068][ T6188] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.337754][ T6194] Process accounting resumed [ 704.339714][ T6188] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.354720][ T6188] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.368395][ T6188] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.380003][ T6188] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.390186][ T6188] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.403541][ T6188] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.431550][ T6188] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.461232][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.510967][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 704.575614][ T6205] loop1: detected capacity change from 0 to 256 [ 704.596066][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 704.667762][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 704.702703][ T6217] loop0: detected capacity change from 0 to 512 [ 704.713415][ T6217] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.724989][ T6217] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.735082][ T6217] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.757033][ T6217] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 704.773169][ T6217] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 704.778795][ T6219] loop2: detected capacity change from 0 to 8192 [ 704.789073][ T6217] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 704.807718][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.830433][ T6217] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.841964][ T6217] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.852042][ T6217] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.869409][ T6217] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.880963][ T6217] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 704.891080][ T6217] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 704.904545][ T6217] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.927692][ T6217] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 704.957467][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.975120][ T6225] loop1: detected capacity change from 0 to 512 [ 704.984411][ T6225] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.995999][ T6225] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.006149][ T6225] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.030403][ T6225] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 705.041412][ T6230] Process accounting resumed [ 705.046753][ T6225] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 705.050030][ T6232] loop4: detected capacity change from 0 to 256 [ 705.062721][ T6225] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 705.087325][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.102386][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 705.110837][ T6225] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.123148][ T6225] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.133519][ T6225] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.147985][ T6225] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.159585][ T6225] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.169825][ T6225] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.183429][ T6225] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.209366][ T6225] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.246616][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.290396][ T6242] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 705.328234][ T6249] loop1: detected capacity change from 0 to 164 [ 705.344786][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 705.395804][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 705.395817][ T29] audit: type=1326 audit(1717286554.533:57185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x0 [ 705.440562][ T6258] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 705.451583][ T29] audit: type=1400 audit(1717286554.543:57186): avc: denied { ioctl } for pid=6257 comm="syz-executor.4" path="socket:[163213]" dev="sockfs" ino=163213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 705.470736][ T6266] loop1: detected capacity change from 0 to 512 [ 705.495468][ T6266] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.507033][ T6266] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.517123][ T6266] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.531458][ T6266] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 705.539781][ T6266] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 705.554811][ T6266] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 705.573079][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.598201][ T6279] loop4: detected capacity change from 0 to 512 [ 705.612435][ T6266] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.624043][ T6266] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.634240][ T6266] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.648253][ T6266] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.660355][ T6266] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 705.670627][ T6266] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 705.691022][ T6279] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.702580][ T6279] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 705.712701][ T6279] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 705.733669][ T6266] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.753997][ T6279] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 705.767408][ T6266] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.791168][ T6279] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 705.814948][ T6279] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 705.837659][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.848534][ T6279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.865307][ T6279] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.876928][ T6279] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 705.887045][ T6279] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 705.900624][ T6279] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.912335][ T6279] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 705.922538][ T6279] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 705.936079][ T6279] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.959467][ T6287] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 705.987376][ T6289] Process accounting resumed [ 705.998045][ T4104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.432258][ T6326] loop0: detected capacity change from 0 to 512 [ 706.442850][ T6326] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 706.454431][ T6326] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 706.464553][ T6326] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 706.478506][ T6326] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 706.493142][ T6326] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 706.511247][ T6326] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 706.524332][ T6326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.546084][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.720738][ T6341] 9pnet_fd: Insufficient options for proto=fd [ 706.735128][ T6341] syz-executor.3[6341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.735211][ T6341] syz-executor.3[6341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.933967][ T6346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6346 comm=syz-executor.4 [ 707.027528][ T6294] dccp_close: ABORT with 64 bytes unread [ 707.188018][ T6369] loop3: detected capacity change from 0 to 512 [ 707.200407][ T6369] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 707.211971][ T6369] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 707.222043][ T6369] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 707.238811][ T6369] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 707.248270][ T6369] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 707.262229][ T6369] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 707.281445][ T6367] loop1: detected capacity change from 0 to 256 [ 707.317321][ T6369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.372017][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.515360][ T6399] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 707.521870][ T6399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 707.529432][ T6399] vhci_hcd vhci_hcd.0: Device attached [ 707.536089][ T6401] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 707.543408][T18704] vhci_hcd: stop threads [ 707.547787][T18704] vhci_hcd: release socket [ 707.552199][T18704] vhci_hcd: disconnect device [ 707.874119][ T6407] loop1: detected capacity change from 0 to 1024 [ 708.117523][ T6414] loop1: detected capacity change from 0 to 256 [ 708.227532][ T6419] loop1: detected capacity change from 0 to 512 [ 708.236979][ T6419] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 708.248593][ T6419] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 708.258745][ T6419] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 708.273755][ T6419] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 708.304615][ T6419] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 708.324765][ T6419] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 708.346717][ T6424] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 708.347208][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.379704][ T6424] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 708.392025][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.955795][ T6460] syzkaller0: entered promiscuous mode [ 708.961405][ T6460] syzkaller0: entered allmulticast mode [ 709.115201][ T6478] loop1: detected capacity change from 0 to 512 [ 709.133286][ T6478] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 709.144858][ T6478] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 709.155030][ T6478] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 709.178478][ T6478] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 709.195665][ T6478] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 709.212836][ T6478] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 709.226010][ T6478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.260722][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.450513][ T29] audit: type=1326 audit(1717286558.282:57187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.474648][ T29] audit: type=1326 audit(1717286558.282:57188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.479086][ T6499] loop1: detected capacity change from 0 to 512 [ 709.508767][ T29] audit: type=1326 audit(1717286558.282:57189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.532994][ T29] audit: type=1326 audit(1717286558.282:57190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.557131][ T29] audit: type=1326 audit(1717286558.282:57191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.581280][ T29] audit: type=1326 audit(1717286558.291:57192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.605337][ T29] audit: type=1326 audit(1717286558.291:57193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.629492][ T29] audit: type=1326 audit(1717286558.291:57194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e8afee9 code=0x7ffc0000 [ 709.715113][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.772727][ T6514] loop3: detected capacity change from 0 to 128 [ 709.782843][ T6514] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 709.816687][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.843047][ T6526] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 709.843789][ T6525] loop1: detected capacity change from 0 to 512 [ 709.862665][ T6525] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 709.871837][ T6525] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 709.877564][ T6533] Process accounting resumed [ 709.886323][ T6525] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 709.901808][ T6525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 709.911907][ T6525] System zones: 0-2, 18-18, 34-34 [ 709.921024][ T6525] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 709.939709][ T6525] EXT4-fs (loop1): 1 truncate cleaned up [ 709.952510][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.052861][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 710.096949][ T6527] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 710.341825][ T6573] Process accounting resumed [ 710.738395][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 710.756448][ T6599] loop2: detected capacity change from 0 to 512 [ 710.765427][ T6599] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 710.774055][ T6599] EXT4-fs (loop2): 1 truncate cleaned up [ 710.779984][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.793329][ T6599] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz-executor.2: Logical block already allocated [ 710.805393][ T6599] EXT4-fs (loop2): Remounting filesystem read-only [ 710.821241][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.833484][ T3396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.884048][ T6610] Process accounting resumed [ 710.903181][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 710.912485][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.919975][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.927999][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.931235][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 710.931247][ T29] audit: type=1400 audit(1717286559.669:57249): avc: denied { relabelfrom } for pid=6613 comm="syz-executor.2" name="PF_CAIF" dev="sockfs" ino=163795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 710.935479][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.973439][ T6616] SELinux: Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped). [ 710.983725][ T29] audit: type=1400 audit(1717286559.716:57250): avc: denied { relabelto } for pid=6613 comm="syz-executor.2" name="PF_CAIF" dev="sockfs" ino=163795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=caif_socket permissive=1 trawcon="system_u:object_r:iptables_exec_t:s0" [ 711.299117][ T6637] loop3: detected capacity change from 0 to 8192 [ 711.356756][ T6644] Process accounting resumed [ 711.449720][ T6653] bridge0: entered promiscuous mode [ 711.457697][ T6653] bridge0: left promiscuous mode [ 711.559268][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 711.618646][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.674075][ T6675] Process accounting resumed [ 711.744340][ T29] audit: type=1400 audit(1717286560.423:57251): avc: denied { watch watch_reads } for pid=6683 comm="syz-executor.3" path="/root/syzkaller-testdir2139428056/syzkaller.poemeb/42/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 711.842801][ T6696] loop3: detected capacity change from 0 to 128 [ 711.853020][ T6696] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.865350][ T6696] ext4 filesystem being mounted at /root/syzkaller-testdir2139428056/syzkaller.poemeb/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 711.917577][ T6696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.976020][ T5742] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.020333][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 712.103249][ T6710] Process accounting resumed [ 712.128160][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 712.137771][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.145194][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.153431][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.160931][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.209360][ T6718] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 712.237855][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 712.399345][ T6735] Process accounting resumed [ 712.485617][ T6746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6746 comm=syz-executor.0 [ 712.544567][ T29] audit: type=1326 audit(1717286561.167:57252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x0 [ 712.571274][ T6754] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 712.744533][ T6764] loop3: detected capacity change from 0 to 256 [ 712.791306][ T6770] Process accounting resumed [ 712.930576][ T6784] loop1: detected capacity change from 0 to 2048 [ 712.937851][ T6784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.945156][ T6784] EXT4-fs: Ignoring removed nobh option [ 712.950749][ T6784] ext4: Unknown parameter 'smackfshat' [ 713.270901][ T3983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.335121][ T3983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.366669][ T3983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.442248][ T3983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.505519][ T6804] loop2: detected capacity change from 0 to 256 [ 713.521121][ T6806] Process accounting resumed [ 713.547198][ T3983] bridge_slave_1: left allmulticast mode [ 713.552845][ T3983] bridge_slave_1: left promiscuous mode [ 713.558617][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.566703][ T3983] bridge_slave_0: left allmulticast mode [ 713.572414][ T3983] bridge_slave_0: left promiscuous mode [ 713.578065][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.668201][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.678687][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.688979][ T3983] bond0 (unregistering): Released all slaves [ 713.719242][ T6815] loop2: detected capacity change from 0 to 512 [ 713.750819][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 713.751519][ T6819] loop3: detected capacity change from 0 to 512 [ 713.778750][ T6819] EXT4-fs: Ignoring removed mblk_io_submit option [ 713.794465][ T6819] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block [ 713.807308][ T6819] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 713.821890][ T6819] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 713.836412][ T6819] EXT4-fs (loop3): 2 truncates cleaned up [ 713.842480][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.862619][ T3983] hsr_slave_0: left promiscuous mode [ 713.864917][ T29] audit: type=1326 audit(1717286562.396:57253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14bcae8ee9 code=0x0 [ 713.892933][ T3983] hsr_slave_1: left promiscuous mode [ 713.893698][ T29] audit: type=1326 audit(1717286562.424:57254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x7ffc0000 [ 713.922782][ T29] audit: type=1326 audit(1717286562.424:57255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x7ffc0000 [ 713.949457][ T29] audit: type=1326 audit(1717286562.433:57256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b50b2ee9 code=0x7ffc0000 [ 713.973475][ T29] audit: type=1326 audit(1717286562.433:57257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x7ffc0000 [ 713.997510][ T29] audit: type=1326 audit(1717286562.433:57258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b50b2ee9 code=0x7ffc0000 [ 714.022898][ T3983] veth1_macvtap: left promiscuous mode [ 714.028404][ T3983] veth0_macvtap: left promiscuous mode [ 714.034215][ T3983] veth1_vlan: left promiscuous mode [ 714.039469][ T3983] veth0_vlan: left promiscuous mode [ 714.159714][ T3983] ¡ (unregistering): Port device team_slave_1 removed [ 714.173144][ T3983] ¡ (unregistering): Port device team_slave_0 removed [ 714.220093][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.227248][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.239139][ T6788] bridge_slave_0: entered allmulticast mode [ 714.245678][ T6788] bridge_slave_0: entered promiscuous mode [ 714.252776][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.259933][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.268072][ T6788] bridge_slave_1: entered allmulticast mode [ 714.274838][ T6788] bridge_slave_1: entered promiscuous mode [ 714.275052][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.310354][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.332693][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.363439][ T6788] team0: Port device team_slave_0 added [ 714.372599][ T6788] team0: Port device team_slave_1 added [ 714.409034][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.415987][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.442019][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.458129][ T6848] loop3: detected capacity change from 0 to 256 [ 714.473120][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.480077][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.506307][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.564228][ T6788] hsr_slave_0: entered promiscuous mode [ 714.570484][ T6788] hsr_slave_1: entered promiscuous mode [ 714.577316][ T6788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.584924][ T6788] Cannot create hsr debugfs directory [ 714.598582][ T6855] Process accounting resumed [ 714.706987][ T6861] loop3: detected capacity change from 0 to 512 [ 714.716618][ T6861] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 714.728231][ T6861] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 714.738299][ T6861] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 714.753216][ T6861] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 714.762120][ T6861] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 714.782866][ T6861] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 714.795734][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.810686][ T6861] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 714.822333][ T6861] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 714.832791][ T6861] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 714.854068][ T6861] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 714.865719][ T6861] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 714.875906][ T6861] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 714.889774][ T6861] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 714.923571][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.989302][ T6788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.000414][ T6877] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.009259][ T6877] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.017977][ T6877] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.026677][ T6877] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.036403][ T6877] vxlan0: entered promiscuous mode [ 715.040743][ T6874] loop4: detected capacity change from 0 to 256 [ 715.052551][ T6788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.061608][ T6788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.070554][ T6788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.116497][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.133701][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.152067][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.159160][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.173766][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.181016][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.190622][ T6883] Process accounting resumed [ 715.229522][ T6788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 715.240004][ T6788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.315326][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.337016][ T6904] loop3: detected capacity change from 0 to 512 [ 715.346486][ T6904] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 715.358076][ T6904] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 715.368204][ T6904] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 715.382670][ T6904] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 715.391412][ T6904] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 715.397780][ T6788] veth0_vlan: entered promiscuous mode [ 715.410852][ T6904] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 715.414731][ T6788] veth1_vlan: entered promiscuous mode [ 715.429122][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.442643][ T6788] veth0_macvtap: entered promiscuous mode [ 715.446713][ T6904] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 715.455168][ T6788] veth1_macvtap: entered promiscuous mode [ 715.459890][ T6904] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 715.472322][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.475676][ T6904] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 715.486058][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.486069][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.486081][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.515216][ T6904] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 715.519642][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.529474][ T6904] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 715.529508][ T6904] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 715.530807][ T6904] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 715.540985][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.541000][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.541014][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.541043][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.635296][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.646180][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.647780][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.668809][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.679395][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.689388][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.699833][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.709691][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.720220][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.730099][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.740534][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.750469][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.760897][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.772539][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.783244][ T6788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.791985][ T6788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.800673][ T6788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.804769][ T6918] loop2: detected capacity change from 0 to 256 [ 715.809487][ T6788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.891584][ T6931] Process accounting resumed [ 715.945960][ T6935] loop2: detected capacity change from 0 to 512 [ 715.957502][ T6937] loop3: detected capacity change from 0 to 512 [ 715.981008][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.981565][ T6937] EXT4-fs: Ignoring removed mblk_io_submit option [ 716.022454][ T6937] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block [ 716.045231][ T6935] ext4 filesystem being mounted at /root/syzkaller-testdir4185360446/syzkaller.xIOXgq/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.074261][ T6937] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 716.119565][ T6937] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 716.140618][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.170675][ T6937] EXT4-fs (loop3): 2 truncates cleaned up [ 716.182555][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.242832][ T5742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.283175][ T6949] loop0: detected capacity change from 0 to 512 [ 716.295015][ T6949] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 716.306673][ T6949] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 716.316770][ T6949] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 716.334854][ T6949] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 716.342324][ T6954] loop1: detected capacity change from 0 to 512 [ 716.344444][ T6949] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 716.370750][ T6953] ================================================================== [ 716.370777][ T6953] BUG: KCSAN: data-race in n_tty_receive_char / n_tty_write [ 716.386075][ T6953] [ 716.386080][ T6953] write to 0xffffc90001379028 of 8 bytes by task 18695 on cpu 0: [ 716.386094][ T6953] n_tty_receive_char+0x4c4/0x680 [ 716.386116][ T6953] n_tty_receive_buf_standard+0x4bd/0x2e30 2024/06/02 00:02:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 716.386135][ T6953] n_tty_receive_buf_common+0x7e5/0xbd0 [ 716.386153][ T6953] n_tty_receive_buf2+0x33/0x40 [ 716.386170][ T6953] tty_ldisc_receive_buf+0x63/0x100 [ 716.386194][ T6953] tty_port_default_receive_buf+0x59/0x90 [ 716.386219][ T6953] flush_to_ldisc+0x1ce/0x410 [ 716.386242][ T6953] process_scheduled_works+0x483/0x9a0 [ 716.386262][ T6953] worker_thread+0x526/0x730 [ 716.386281][ T6953] kthread+0x1d1/0x210 [ 716.386302][ T6953] ret_from_fork+0x4b/0x60 [ 716.386319][ T6953] ret_from_fork_asm+0x1a/0x30 [ 716.386340][ T6953] [ 716.386344][ T6953] read to 0xffffc90001379028 of 8 bytes by task 6953 on cpu 1: [ 716.386357][ T6953] n_tty_write+0x162/0xb90 [ 716.386372][ T6953] file_tty_write+0x386/0x690 [ 716.386393][ T6953] tty_write+0x28/0x30 [ 716.386412][ T6953] vfs_write+0x78f/0x900 [ 716.386430][ T6953] ksys_write+0xeb/0x1b0 [ 716.386448][ T6953] __x64_sys_write+0x42/0x50 [ 716.386466][ T6953] x64_sys_call+0x27ef/0x2d70 [ 716.386485][ T6953] do_syscall_64+0xc9/0x1c0 [ 716.386509][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.386532][ T6953] [ 716.386535][ T6953] value changed: 0x0000000000000000 -> 0x000000000000000c [ 716.386544][ T6953] [ 716.386547][ T6953] Reported by Kernel Concurrency Sanitizer on: [ 716.386559][ T6953] CPU: 1 PID: 6953 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 716.386578][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 716.386588][ T6953] ================================================================== [ 716.389030][ T6949] EXT4-fs error (device loop0): ext4_orphan_get:139