last executing test programs: 5.398182601s ago: executing program 1 (id=645): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c000400a8010104000000000000000002000000240001801400018008000100ac14140008000200ac1414aa0c00028005000100000000001800028006000340000400000c0002800500010000000000080007400000000024000e8014000180080001007f00000108000200000000000c000280050001003a000000"], 0x7c}}, 0x0) semget$private(0x0, 0x4000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x9, 0x8, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x4000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1010e, &(0x7f00000004c0)={[{@errors_remount}, {@data_journal}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@resuid}, {@discard}], [{@hash}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) write$binfmt_script(r6, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x3}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x8d, 0x2) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x32bc1ec4b7c8106c) unshare(0x8000000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xd, 0xc00, 0x2, 0x100, 0xf}}) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080049000038000000000006907864010101ac1e20018303a64404210086060000000300000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="506424009078000045e927f694b608c33fbcca00600eb252f67672897910d519a82c085da80c7eba675e59f75d8f23"], 0x0) 4.949948249s ago: executing program 2 (id=651): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x42}, @multicast, @remote}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 4.865995426s ago: executing program 3 (id=652): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(r0, 0x7fffffff) 4.660206054s ago: executing program 3 (id=653): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x911}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}}}}, 0x32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") (async) unlink(&(0x7f0000000000)='./file1\x00') 4.394073786s ago: executing program 2 (id=655): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000680)=@ethtool_sfeatures={0x3b, 0x2, [{0x203ff}, {0x88d3, 0x4}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[], 0x386, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x5, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.376830718s ago: executing program 1 (id=657): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 4.255653418s ago: executing program 1 (id=659): unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x8000, 0x5, 0xe32d, 0x0}, &(0x7f0000000040)=0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0x9c1, 0x3}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x5}, 0x8) syz_usb_connect(0x0, 0x5d7, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xf, 0x40, 0x7, 0x40, 0x2}, 0x86, &(0x7f00000002c0)={0x5, 0xf, 0x86, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "8b0789743daf6d39d47b331235a4c528"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x74, 0xf00f, 0x1000, [0xf, 0x0, 0x3f00, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "fe54343a47b665030a75aee63bec527f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x2, 0xff80}, @ptm_cap={0x3}, @generic={0x2c, 0x10, 0x1, "a6146d0d38af675bd5642f17da61230b97ee34d48dfcff2466f1fbdbf52d583817fad58e203af8b488"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x10, &(0x7f00000003c0)=@string={0x10, 0x3, "c010160cfc83ec28633b846cdd5d"}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "3d28a36cee50f821c71371eb4fcce5dfa4921b2179ab4da701141cb31ce7466b8138e9ec699033298a3b8f0e633eeb6620db4f06deb7c9266e9045d7b4444db0e1161e7bb7f38de1c6e20ee623c633cd562567bbb924dc23724805f20d5277a9c39b73"}}, {0x75, &(0x7f0000000480)=@string={0x75, 0x3, "d7b6f5361f5b205737aabddb732b3f44e0811ba5c23899980b0359b263abac7006df34b63e7384dd0a97f238f0215cdc1cdeb4d93dd5ea16a5c98592bdf31a101d940e4635cfa0b18aca55b1fc8b53b706ec8a942a55494afbbb039f5e8c8e2ae7d85c089c93291bc302372571d60e4ff47458"}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x240a}}]}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40012161) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x800, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r7, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.255528028s ago: executing program 3 (id=660): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) write(0xffffffffffffffff, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x5f) 4.038169427s ago: executing program 2 (id=665): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ftruncate(r0, 0x7fffffff) (fail_nth: 1) 3.76694356s ago: executing program 2 (id=671): socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000440)=0x40, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000180)) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r3 = epoll_create(0x1ff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) (rerun: 32) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) (async) shutdown(r1, 0x1) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x21}, {0x1, 0x0, 0x0, 0x7ffffdbd}]}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0xfffffff9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000004c0)=[{0x7c, 0xfa, 0x0, 0xb97}, {0x6, 0x0, 0x0, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 3.199930168s ago: executing program 3 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xe0, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 3.146068203s ago: executing program 3 (id=684): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82c0, 0x0, 0x0, 0x0, 0x0, 0x89db, 0x1, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0xfffffffffffffffc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088}, 0x90) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x10000000) getdents(r2, &(0x7f00000002c0)=""/4096, 0x1000) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 2.775113304s ago: executing program 1 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x30, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x44}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x158, 0x30, 0x0, 0x0, 0x0, {}, [{0x144, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x114, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xe1, 0x6, "13a033565c06a08e69897f51d7f0d46cbfed22af736e77b2693b3fb00f0d98bfdfaf29999b210e639eee4b000000000000000085fc67cfa8fc1a56049ccf0c8f67f8dc2d506e3eb5c8df4701863b441d8fe39c23681214051360262bdb5c669d966a0f42b574c72433603ffa6d894729a8139fbe798f057c09498c0a31632899613c5ab9190b655f6b0a96b8a2bdb9dba20e5f557dd706d47210c8ed9ddb477d39b72124148f1445e70994b560cc70734b5019bac3a5527f5e817086c2da662b30129faf57a272c7fc09ffe6a30306f5f6105990b27bbefd0d396c4e51"}, {0xc}, {0xc}}}]}]}, 0x158}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x4, "4b719219"}, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0xd) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) sendfile(0xffffffffffffffff, r7, 0x0, 0x10000) 2.695286801s ago: executing program 3 (id=688): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ftruncate(r0, 0x7fffffff) 1.969874772s ago: executing program 0 (id=697): unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x8000, 0x5, 0xe32d, 0x0}, &(0x7f0000000040)=0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0x9c1, 0x3}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x5}, 0x8) syz_usb_connect(0x0, 0x5d7, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xf, 0x40, 0x7, 0x40, 0x2}, 0x86, &(0x7f00000002c0)={0x5, 0xf, 0x86, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "8b0789743daf6d39d47b331235a4c528"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x74, 0xf00f, 0x1000, [0xf, 0x0, 0x3f00, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "fe54343a47b665030a75aee63bec527f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x2, 0xff80}, @ptm_cap={0x3}, @generic={0x2c, 0x10, 0x1, "a6146d0d38af675bd5642f17da61230b97ee34d48dfcff2466f1fbdbf52d583817fad58e203af8b488"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x10, &(0x7f00000003c0)=@string={0x10, 0x3, "c010160cfc83ec28633b846cdd5d"}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "3d28a36cee50f821c71371eb4fcce5dfa4921b2179ab4da701141cb31ce7466b8138e9ec699033298a3b8f0e633eeb6620db4f06deb7c9266e9045d7b4444db0e1161e7bb7f38de1c6e20ee623c633cd562567bbb924dc23724805f20d5277a9c39b73"}}, {0x75, &(0x7f0000000480)=@string={0x75, 0x3, "d7b6f5361f5b205737aabddb732b3f44e0811ba5c23899980b0359b263abac7006df34b63e7384dd0a97f238f0215cdc1cdeb4d93dd5ea16a5c98592bdf31a101d940e4635cfa0b18aca55b1fc8b53b706ec8a942a55494afbbb039f5e8c8e2ae7d85c089c93291bc302372571d60e4ff47458"}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x240a}}]}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40012161) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x800, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r7, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.490894263s ago: executing program 4 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002144000980400002800c00018008000140000000020c00018008000140000000010c"], 0xa8}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@journal_dev={'journal_dev', 0x3d, 0x4b}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000008180800000005b0000000000140002"], 0x30}}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb34a}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f00000024c0)={0xa, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) r11 = dup3(r8, r7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r12}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r12, 0x1a, "811862782013d15d697d90cfa8d2c73833400e37427569c20194"}, &(0x7f00000001c0)=0x22) 1.247403684s ago: executing program 4 (id=699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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") mknod$loop(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000954000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) shutdown(r0, 0x2) 1.118655144s ago: executing program 1 (id=700): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x1094c2) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x44}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) futimesat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4", 0x27}, {&(0x7f0000001040)="fb", 0x1}], 0x2}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x1, "d59365cc2745491bcba899455e518ceb5b2d1413d896d11c9b58a2480f0e3f1b", 0x6, 0xffff5220, 0x100, 0x4254}, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@struct={0xa, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0xd, 0x4, 0x5}, {0x1, 0x4, 0x12}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001cc0)=""/4099, 0x47, 0x1003, 0x6}, 0x20) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0xffffffffffffffff) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x39c5, 0x0) 1.038161011s ago: executing program 0 (id=701): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x3f}, 0x48) 922.313021ms ago: executing program 0 (id=702): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x380}, [@alu={0x4, 0x1, 0x0, 0x6, 0x9, 0x40, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe5a}, @generic={0x7, 0x5, 0x4, 0x8, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf80}}, @ldst={0x2, 0x3, 0x0, 0xf00080e138e2c3c, 0xb, 0xfffffffffffffff0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd, @generic={0x2, 0xc, 0x3, 0xe7, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x200000, 0x2e, &(0x7f00000000c0)=""/46, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x200, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x1, 0x1], &(0x7f0000000400)=[{0x4, 0x5, 0xc, 0x2}, {0x2, 0x5, 0xb, 0xa}, {0x0, 0x1, 0xe, 0xb}, {0x4, 0x5, 0x8, 0x6}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000680)={r1, 0x0, 0x81, 0x0, &(0x7f0000000540)="07f37462e0fe2c5e5d525a2bce343d13f78d3e830238421632d9df71e4c0fb6b1e0c11014a16ba481653050cf647926d605a803e225a66ce6ff3d1b703b8cd479b9eae62f08bc7b4b5a7f88c3de5794f85539f7c09ac4ce8ad4fb9122f868727639c312889cade1d9ff9fad4fd96b637a95b6de5356d363b8f1f1113c391f98339", 0x0, 0x6, 0x0, 0x79, 0x0, &(0x7f0000000600)="512a923e4079460f3e0e73ea0e41f241a7856d4e42734e5cf230ce4e459413018a3ffd38bd31bd2b42e0f752e4c612b6416414562f7056b539957c083c1e00c5ec12d1a8d4de20c27849a58f321c220620cbab4be64234268685a9f2cb0f8694c41b2f57359867f302ca97cfafdbc579eedcfd4f180871c81b", 0x0, 0x2, 0x0, 0xfafc}, 0x50) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd4(r2, &(0x7f0000000040), 0x8, 0x0) ioperm(0x0, 0x5, 0x4000000000000020) timer_create(0xa, 0x0, 0x0) bind$rds(r2, &(0x7f0000000700)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) syz_open_dev$evdev(0x0, 0x0, 0x822b01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xce, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIUqihNRFCbDWGq+EvUI8m/gWe9GLUk8Yr3o0JMVxED2bM7M7A0m7L/uh2i/v5JNO+N/N23vvOzNt9M283gL41kv9JInZGxNWIGKplby8wUvt34/ql6b+vX5pOIsve+jOplvvr+qXpsmj5uh1FZjSNSD9NYn+DeucvXDwzNTs7c77Ijy+cfX98/sLF50+fnTo1c2rm3OTRo0cOT7z04uQLzYQxeKcCu/K27vto7sDeY+9ceWP6+JV3f/w6b+/OYnt9HDXDzdS7ppEYuf1Y1nmq471vLrvq0slADxtCSyoRMVB0oKsxFJW4dfKG4vVPeto4oKuyLMu2rlhbKRNL2U2LGfB/k0SvWwD0RvlBn9//lkts28ABSI9de6V2A5THfaNYalsGIi3KDC67v11PIxFxfOmfz/MlGj6HAABYX9/m45/nlo3/qtJ4sK7cvcXc0HBE3BcRuyPi/ojYExEPRFTLPhQRD7dY/8iy/Mrxzy9dHY3m47+Xi7mt28d/5egvhitFblc1/sHk5OnZmUPFMRmNwa15fmKNOr577dfPqokGs1T14798yesvx4JFO/4YWPaA7sTUwlSncZeufRyxb6BR/MnNmYAkIvZGxL429p8fs9PPfHVgte13jn8N6zDPlH0Z8XTt/C/FsvhLydrzk+P3xOzMofHyqljpp58vv7la/R3Fvw7y87+94fV/M/7hpH6+dr71Oi7/lq16T9Pu9b8lebua3lKs+3BqYeH8RMSWZGnl+slbry3zZfk8/tGDjfv/7oh/vyhetz8i8ov4kYh4NCIeK9r+eEQ8EREH14j/h1effK/9+Lsrj/9ES+d/jUQaDTdVznz/zWr1N3f+j1RTo8WaZt7/7tDSDq5mAAAAuPvUvgOfpGPFM86dkaZjY7Xv8O+J7ens3PzCsyfnPjh3ovZd+eEYTMsnXUN1z0MnimfDZX5yWf5w9blxlmXZtmp+bHputltz6kBzdqzS/3O/V3rdOqDrWppHW+0XbcBdye81oX/p/9C/GvT/a71oB7Cxtvn8h77WqP8vRtzoQVOADebzH/qX/g/9S/+H/qX/Q19q6kfybSR2H+vWnjdRIlusHcSO9lPpdRRtJiLdFM1oL5FujmbUElsjotnCi51dbC0kev3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsD7+CwAA//+VhOcD") 861.164116ms ago: executing program 4 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x5) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x5) (async) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000700)='9', 0x1}]) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r4 = syz_open_pts(r2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x845) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x5c, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc44, 0x62}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x90) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000001f00)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x20000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004840)={0x64, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, @random="088036f960bbaf"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}}, 0x4040000) (async) syz_genetlink_get_family_id$fou(&(0x7f0000004980), 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000004a80)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x0, 0x5, @mcast1, 0x1}, @in6={0xa, 0x4e20, 0x8, @private2, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x4d, @remote, 0xf}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x401}], 0xc0) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb8, 0x43}}}}}, 0x28}}, 0x4010) (async) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x114, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_TESTDATA={0x55, 0x45, "c2132a45c835ee42d521e74dd2f47b96bb028472b2907715ff53d4a35c54f097c94bc418718031eeea6208440ccd51f227e4e7c953277b05eb78df79e51459849346cfe87c38edc9a7cf28eb716c2e9458"}, @NL80211_ATTR_TESTDATA={0x55, 0x45, "e1a7fe51b6036f793f890a5108012d6ad10cf643bec0d5e75da6af9c0daf8d3fb092176ae6b5e8c8d6785850d93803685011e34f8ff29b91f3a35d4db04d15c413cddec37feedeca3a1fa46501d85a81e9"}, @NL80211_ATTR_TESTDATA={0x3a, 0x45, "1374fa8df32cf36e49bcc7d7f5faee92d7c0898916d3139898f8f6541eaaad2b537f4a1edbaf2c5d8d5fb6abb634639367080d9eb979"}]}, 0x114}, 0x1, 0x0, 0x0, 0x8001}, 0x40) (async) r7 = dup3(r4, r2, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "b579fb6acb03ed54", "911a1e5d8b918ee948ba08ac52468dd9", 'l\x00[A', "375bb71e02c67767"}, 0x28) (async) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r9 = dup(r1) write$P9_RLERRORu(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="530000000700004600f592"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 676.420452ms ago: executing program 0 (id=704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000007000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 659.153534ms ago: executing program 4 (id=705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000007000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (fail_nth: 1) 652.155894ms ago: executing program 0 (id=706): socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x38}}, 0x40) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socket(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) socket$igmp6(0xa, 0x3, 0x2) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x38}}, 0x40) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) (async) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async) 286.125435ms ago: executing program 4 (id=707): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@init_itable}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4fc, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 285.907805ms ago: executing program 2 (id=672): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 258.353148ms ago: executing program 0 (id=708): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x8001, 0x0, 0x0, 0x40e00, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff09}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0], 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 111.41695ms ago: executing program 1 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x7c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x100}}, 0x0) 1.987559ms ago: executing program 4 (id=710): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x0, 0x5}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r2}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0) syz_read_part_table(0x637, &(0x7f0000000000)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000640)=0x800000, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x1, 0x8, 0x0, 0x0, 0x1ffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3de}, 0x0, 0x0, 0x1, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=711): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000004c0)=[{0x2, 0x2, {}, {0x0, 0x1}, 0x0, 0x1}], 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffb, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) read$msr(r3, &(0x7f000001a7c0)=""/102393, 0xffffff65) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) kernel console output (not intermixed with test programs): ap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.368349][ T4505] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 48.391553][ T4505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 48.407803][ T4505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.414365][ T4505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.311: bg 0: block 361: padding at end of block bitmap is not set [ 48.430029][ T4505] EXT4-fs (loop2): Remounting filesystem read-only [ 48.430099][ T4430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.458486][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 48.465765][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 48.477962][ T4505] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 48.485059][ T4505] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 48.506212][ T4430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.523920][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.534567][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.583703][ T4430] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.620244][ T4430] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.630870][ T4430] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.661449][ T4430] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.709013][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.722391][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.738789][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.745870][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.755310][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.762393][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.869365][ T4532] loop0: detected capacity change from 0 to 512 [ 48.877829][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.897140][ T4532] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 393250)! [ 48.907625][ T4532] EXT4-fs (loop0): group descriptors corrupted! [ 48.971333][ T4430] veth0_vlan: entered promiscuous mode [ 48.994683][ T4430] veth1_vlan: entered promiscuous mode [ 49.013447][ T4549] loop4: detected capacity change from 0 to 512 [ 49.020744][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.324'. [ 49.033344][ T4430] veth0_macvtap: entered promiscuous mode [ 49.043361][ T4549] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: comm syz.4.325: inode #738197504: comm syz.4.325: iget: illegal inode # [ 49.059719][ T4430] veth1_macvtap: entered promiscuous mode [ 49.072584][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.083181][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.093000][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.103567][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.113380][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.123800][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.133623][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.144172][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.154089][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.159099][ T4549] EXT4-fs (loop4): Remounting filesystem read-only [ 49.164566][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.166586][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.171065][ T4549] EXT4-fs (loop4): no journal found [ 49.181814][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.188039][ T4549] EXT4-fs (loop4): can't get journal size [ 49.209461][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.219265][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.229712][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.239521][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.249926][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.259835][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.270356][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.280248][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.290680][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.303467][ T4549] EXT4-fs (loop4): get root inode failed [ 49.309146][ T4549] EXT4-fs (loop4): mount failed [ 49.310241][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.325009][ T4430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.333717][ T4430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.342582][ T4430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351353][ T4430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.363198][ T4559] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 49.630353][ T4584] loop1: detected capacity change from 0 to 512 [ 49.650190][ T4584] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.656286][ T4588] loop3: detected capacity change from 0 to 256 [ 49.676428][ T4584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 49.685574][ T4584] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.692190][ T4584] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.337: bg 0: block 361: padding at end of block bitmap is not set [ 49.706969][ T4584] EXT4-fs (loop1): Remounting filesystem read-only [ 49.715266][ T4584] EXT4-fs (loop1): 1 truncate cleaned up [ 49.721300][ T4584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 49.744834][ T4584] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 49.751816][ T4584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 49.793200][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.813475][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.054020][ T4599] loop0: detected capacity change from 0 to 512 [ 50.062722][ T4599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.075094][ T4599] EXT4-fs (loop0): 1 truncate cleaned up [ 50.081570][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.109138][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.136699][ T4602] loop0: detected capacity change from 0 to 1024 [ 50.144555][ T4602] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.155460][ T4602] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.166127][ T4602] jbd2_journal_init_inode: Cannot locate journal superblock [ 50.173480][ T4602] EXT4-fs (loop0): Could not load journal inode [ 50.187211][ T4602] loop0: detected capacity change from 0 to 1024 [ 50.194478][ T4602] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 50.374434][ T4622] __nla_validate_parse: 2 callbacks suppressed [ 50.374447][ T4622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.350'. [ 50.389972][ T4622] FAULT_INJECTION: forcing a failure. [ 50.389972][ T4622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.403042][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.0.350 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 50.413632][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.423740][ T4622] Call Trace: [ 50.427010][ T4622] [ 50.429935][ T4622] dump_stack_lvl+0xf2/0x150 [ 50.434562][ T4622] dump_stack+0x15/0x20 [ 50.438750][ T4622] should_fail_ex+0x229/0x230 [ 50.443499][ T4622] should_fail+0xb/0x10 [ 50.447658][ T4622] should_fail_usercopy+0x1a/0x20 [ 50.452680][ T4622] _copy_to_user+0x1e/0xa0 [ 50.457088][ T4622] simple_read_from_buffer+0xa0/0x110 [ 50.462454][ T4622] proc_fail_nth_read+0xff/0x140 [ 50.467381][ T4622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.472917][ T4622] vfs_read+0x1a2/0x6e0 [ 50.477095][ T4622] ? __rcu_read_unlock+0x4e/0x70 [ 50.482060][ T4622] ? __fget_files+0x1da/0x210 [ 50.486724][ T4622] ksys_read+0xeb/0x1b0 [ 50.490931][ T4622] __x64_sys_read+0x42/0x50 [ 50.495536][ T4622] x64_sys_call+0x27d3/0x2d60 [ 50.500203][ T4622] do_syscall_64+0xc9/0x1c0 [ 50.504700][ T4622] ? clear_bhb_loop+0x55/0xb0 [ 50.509371][ T4622] ? clear_bhb_loop+0x55/0xb0 [ 50.514039][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.519925][ T4622] RIP: 0033:0x7f85535488bc [ 50.524324][ T4622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 50.543960][ T4622] RSP: 002b:00007f85521c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.552396][ T4622] RAX: ffffffffffffffda RBX: 00007f85536e5f80 RCX: 00007f85535488bc [ 50.560354][ T4622] RDX: 000000000000000f RSI: 00007f85521c70a0 RDI: 0000000000000004 [ 50.568309][ T4622] RBP: 00007f85521c7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.576384][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.584338][ T4622] R13: 0000000000000000 R14: 00007f85536e5f80 R15: 00007fff1292c658 [ 50.592297][ T4622] [ 50.648671][ T4636] loop0: detected capacity change from 0 to 256 [ 50.664474][ T4636] FAT-fs (loop0): Directory bread(block 64) failed [ 50.671416][ T4637] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.355'. [ 50.679802][ T4636] FAT-fs (loop0): Directory bread(block 65) failed [ 50.680461][ T4637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 50.687351][ T4636] FAT-fs (loop0): Directory bread(block 66) failed [ 50.703000][ T4636] FAT-fs (loop0): Directory bread(block 67) failed [ 50.710812][ T4636] FAT-fs (loop0): Directory bread(block 68) failed [ 50.722873][ T4636] FAT-fs (loop0): Directory bread(block 69) failed [ 50.729423][ T4641] loop1: detected capacity change from 0 to 1024 [ 50.743379][ T4636] FAT-fs (loop0): Directory bread(block 70) failed [ 50.755895][ T4641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.758233][ T4636] FAT-fs (loop0): Directory bread(block 71) failed [ 50.778135][ T4636] FAT-fs (loop0): Directory bread(block 72) failed [ 50.796680][ T4636] FAT-fs (loop0): Directory bread(block 73) failed [ 50.870608][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.970849][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 50.970863][ T29] audit: type=1400 audit(1724825980.020:390): avc: denied { write } for pid=4654 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.999167][ T29] audit: type=1400 audit(1724825980.051:391): avc: denied { bind } for pid=4654 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.151052][ T4664] Â: renamed from pim6reg1 [ 51.206678][ T29] audit: type=1400 audit(1724825980.264:392): avc: denied { ioctl } for pid=4658 comm="syz.1.365" path="socket:[9411]" dev="sockfs" ino=9411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.295891][ T29] audit: type=1400 audit(1724825980.346:393): avc: denied { bind } for pid=4667 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.316675][ T29] audit: type=1400 audit(1724825980.346:394): avc: denied { write } for pid=4667 comm="syz.1.368" path="socket:[8716]" dev="sockfs" ino=8716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.340137][ T29] audit: type=1400 audit(1724825980.376:395): avc: denied { read } for pid=4667 comm="syz.1.368" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.364138][ T29] audit: type=1400 audit(1724825980.376:396): avc: denied { open } for pid=4667 comm="syz.1.368" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.391489][ T29] audit: type=1326 audit(1724825980.376:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.1.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f799e79 code=0x0 [ 51.420192][ T29] audit: type=1400 audit(1724825980.478:398): avc: denied { ioctl } for pid=4667 comm="syz.1.368" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.504476][ T4673] loop2: detected capacity change from 0 to 512 [ 51.513651][ T4673] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.523953][ T4673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 51.533302][ T4673] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.540093][ T4673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.370: bg 0: block 361: padding at end of block bitmap is not set [ 51.555572][ T4673] EXT4-fs (loop2): Remounting filesystem read-only [ 51.562550][ T4673] EXT4-fs (loop2): 1 truncate cleaned up [ 51.564731][ T4684] loop4: detected capacity change from 0 to 512 [ 51.574501][ T4673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 51.574548][ T4673] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 51.574888][ T4673] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 51.589118][ T4684] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.615026][ T4684] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.625248][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.627303][ T4684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 51.641493][ T4684] System zones: 1-12 [ 51.641557][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.646480][ T4684] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.374: corrupted in-inode xattr: e_value size too large [ 51.670654][ T4684] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.374: couldn't read orphan inode 15 (err -117) [ 51.684206][ T4684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.719107][ T4684] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.374: Unrecognised inode hash code 4 [ 51.719842][ T29] audit: type=1400 audit(1724825980.783:399): avc: denied { link } for pid=4683 comm="syz.4.374" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.730373][ T4684] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.374: Corrupt directory, running e2fsck is recommended [ 51.806708][ T4694] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.374: Unrecognised inode hash code 4 [ 51.817988][ T4694] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.374: Corrupt directory, running e2fsck is recommended [ 51.831191][ T4694] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.374: Unrecognised inode hash code 4 [ 51.842422][ T4694] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.374: Corrupt directory, running e2fsck is recommended [ 52.257563][ T4708] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.380'. [ 52.266667][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 52.372316][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 52.388692][ T4710] loop0: detected capacity change from 0 to 2048 [ 52.395409][ T4710] ext4: Unknown parameter 'fowner>00000000000000000000' [ 52.429881][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.475705][ T4714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4714 comm=syz.4.383 [ 52.605240][ T4732] syz.3.390[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.605318][ T4732] syz.3.390[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.639909][ T4734] loop4: detected capacity change from 0 to 512 [ 52.673324][ T4734] EXT4-fs: Ignoring removed i_version option [ 52.679839][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 52.696676][ T4734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 52.705251][ T4734] System zones: 1-12 [ 52.713255][ T4734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.388: bg 0: block 131: padding at end of block bitmap is not set [ 52.736609][ T4734] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 52.768468][ T4734] EXT4-fs (loop4): 1 truncate cleaned up [ 52.785078][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.845284][ T4734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4734 comm=syz.4.388 [ 52.878345][ T4738] loop3: detected capacity change from 0 to 512 [ 52.900443][ T4738] EXT4-fs: Ignoring removed bh option [ 52.929605][ T4738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.959485][ T4738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 52.977952][ T4738] System zones: 1-12 [ 52.997692][ T4738] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.064810][ T4742] loop1: detected capacity change from 0 to 1024 [ 53.088795][ T4738] EXT4-fs (loop3): 1 truncate cleaned up [ 53.110271][ T4742] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.127632][ T4738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.181937][ T4742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.277926][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.346171][ T4747] netlink: 368 bytes leftover after parsing attributes in process `syz.1.393'. [ 53.425136][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.449608][ T4761] loop0: detected capacity change from 0 to 128 [ 53.450616][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.476300][ T4762] loop1: detected capacity change from 0 to 512 [ 53.490690][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.504616][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.516837][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.517685][ T4761] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.543876][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.558515][ T4764] loop2: detected capacity change from 0 to 256 [ 53.562149][ T4762] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 53.565354][ T4761] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.585903][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.597324][ T4762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 53.600555][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.605776][ T4762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.618775][ T4430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.631119][ T4762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.397: bg 0: block 361: padding at end of block bitmap is not set [ 53.635057][ T4764] FAT-fs (loop2): Directory bread(block 64) failed [ 53.645534][ T4762] EXT4-fs (loop1): Remounting filesystem read-only [ 53.652694][ T4764] FAT-fs (loop2): Directory bread(block 65) failed [ 53.660111][ T4762] EXT4-fs (loop1): 1 truncate cleaned up [ 53.671092][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.671408][ T4762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 53.694221][ T4764] FAT-fs (loop2): Directory bread(block 66) failed [ 53.702777][ T4764] FAT-fs (loop2): Directory bread(block 67) failed [ 53.709570][ T4762] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 53.709762][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 53.717211][ T4764] FAT-fs (loop2): Directory bread(block 68) failed [ 53.740828][ T4762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 53.767028][ T4764] FAT-fs (loop2): Directory bread(block 69) failed [ 53.778882][ T4764] FAT-fs (loop2): Directory bread(block 70) failed [ 53.785515][ T4764] FAT-fs (loop2): Directory bread(block 71) failed [ 53.793801][ T4764] FAT-fs (loop2): Directory bread(block 72) failed [ 53.808557][ T4764] FAT-fs (loop2): Directory bread(block 73) failed [ 53.817482][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 53.831055][ T3262] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.833978][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.863978][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.920847][ T4784] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.403'. [ 53.965961][ T4786] netlink: 'syz.2.400': attribute type 10 has an invalid length. [ 53.986144][ T4786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.995524][ T4786] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.127584][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.140266][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.182364][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.244004][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.299275][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 54.310795][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.347362][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.354493][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.363109][ T4789] bridge_slave_0: entered allmulticast mode [ 54.369716][ T4789] bridge_slave_0: entered promiscuous mode [ 54.387283][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.394389][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.402892][ T4789] bridge_slave_1: entered allmulticast mode [ 54.410722][ T4789] bridge_slave_1: entered promiscuous mode [ 54.423466][ T50] bridge_slave_1: left allmulticast mode [ 54.429770][ T50] bridge_slave_1: left promiscuous mode [ 54.435457][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.452092][ T50] bridge_slave_0: left allmulticast mode [ 54.457739][ T50] bridge_slave_0: left promiscuous mode [ 54.463381][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.564432][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.574712][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.584820][ T50] bond0 (unregistering): Released all slaves [ 54.598768][ T4805] netlink: 'syz.2.406': attribute type 29 has an invalid length. [ 54.613462][ T4804] netlink: 'syz.2.406': attribute type 29 has an invalid length. [ 54.638589][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.667277][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.704815][ T4789] team0: Port device team_slave_0 added [ 54.715291][ T4789] team0: Port device team_slave_1 added [ 54.766464][ T50] hsr_slave_0: left promiscuous mode [ 54.777744][ T50] hsr_slave_1: left promiscuous mode [ 54.787339][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.794791][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.812740][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.820152][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.839971][ T50] veth1_macvtap: left promiscuous mode [ 54.845770][ T50] veth0_macvtap: left promiscuous mode [ 54.851340][ T50] veth1_vlan: left promiscuous mode [ 54.856708][ T50] veth0_vlan: left promiscuous mode [ 54.998050][ T50] team0 (unregistering): Port device team_slave_1 removed [ 55.013879][ T50] team0 (unregistering): Port device team_slave_0 removed [ 55.074122][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.081088][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.107066][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.154505][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.161566][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.187470][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.242464][ T4789] hsr_slave_0: entered promiscuous mode [ 55.248592][ T4789] hsr_slave_1: entered promiscuous mode [ 55.446622][ T50] IPVS: stop unused estimator thread 0... [ 55.593427][ T4789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.615447][ T4789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.631576][ T4789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.651014][ T4789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.721159][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.769516][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.789660][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.796885][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.818461][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.825584][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.952673][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.126382][ T4922] loop0: detected capacity change from 0 to 512 [ 56.138406][ T4925] netlink: 'syz.3.418': attribute type 30 has an invalid length. [ 56.167921][ T4922] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.213823][ T4922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 56.222222][ T4789] veth0_vlan: entered promiscuous mode [ 56.232389][ T4789] veth1_vlan: entered promiscuous mode [ 56.237950][ T4922] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.255156][ T4922] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.417: bg 0: block 361: padding at end of block bitmap is not set [ 56.270105][ T4789] veth0_macvtap: entered promiscuous mode [ 56.274560][ T4922] EXT4-fs (loop0): Remounting filesystem read-only [ 56.277459][ T4789] veth1_macvtap: entered promiscuous mode [ 56.297392][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.298519][ T4922] EXT4-fs (loop0): 1 truncate cleaned up [ 56.307894][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.323361][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.333904][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.343744][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.354504][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.361593][ T4922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 56.365673][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.386684][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.396482][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.396895][ T4922] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 56.406972][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.425517][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.433573][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.444211][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.451364][ T4922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 56.454069][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.473464][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.483337][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.493825][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.503707][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.514209][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524124][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.534552][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.554482][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.558203][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.571779][ T4956] __nla_validate_parse: 2 callbacks suppressed [ 56.571792][ T4956] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.421'. [ 56.587068][ T4956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 56.608139][ T4789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.616918][ T4789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.625641][ T4789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.634351][ T4789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.644970][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.696215][ T4971] loop4: detected capacity change from 0 to 128 [ 56.738964][ T4971] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.793412][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 56.793425][ T29] audit: type=1400 audit(1724825985.697:458): avc: denied { ioctl } for pid=4970 comm="syz.4.405" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop4" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.866014][ T4971] /dev/md0: Can't lookup blockdev [ 56.880898][ T29] audit: type=1400 audit(1724825985.773:459): avc: denied { write } for pid=4970 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.899843][ T29] audit: type=1400 audit(1724825985.773:460): avc: denied { mounton } for pid=4970 comm="syz.4.405" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.971231][ T4979] loop4: detected capacity change from 0 to 128 [ 57.081973][ T29] audit: type=1326 audit(1724825985.971:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.105286][ T29] audit: type=1326 audit(1724825985.971:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.128578][ T29] audit: type=1326 audit(1724825985.971:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.151808][ T29] audit: type=1326 audit(1724825985.971:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.175158][ T29] audit: type=1326 audit(1724825985.971:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.198373][ T29] audit: type=1326 audit(1724825985.971:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x0 [ 57.223799][ T29] audit: type=1326 audit(1724825986.018:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f488fe89e79 code=0x7ffc0000 [ 57.418012][ T5002] loop4: detected capacity change from 0 to 1024 [ 57.433828][ T5002] EXT4-fs: Ignoring removed bh option [ 57.540630][ T5009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'. [ 57.597536][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.604953][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.612384][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.619937][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.627429][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.634837][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.642292][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.649768][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.657211][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.664613][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.672098][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.679465][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.686932][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.694334][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.701731][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.709103][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.716709][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.724377][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.731770][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.737856][ T5012] loop4: detected capacity change from 0 to 1024 [ 57.739150][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.739173][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.760225][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.767621][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.774126][ T5012] EXT4-fs: Mount option(s) incompatible with ext2 [ 57.774984][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.788907][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.796300][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.803801][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.811223][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.818617][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.826064][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.833595][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.840980][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.861287][ T3336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.228084][ T5015] loop3: detected capacity change from 0 to 1024 [ 58.235863][ T5015] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.251688][ T5015] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.259826][ T5015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.268309][ T5015] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 58.282852][ T5015] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 58.291137][ T5015] EXT4-fs (loop3): 1 truncate cleaned up [ 58.297480][ T5015] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.434: corrupted in-inode xattr: overlapping e_value [ 58.322905][ T5018] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.434: corrupted in-inode xattr: overlapping e_value [ 58.413727][ T5025] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.435'. [ 58.422937][ T5025] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 58.535371][ T5033] loop4: detected capacity change from 0 to 1024 [ 58.545592][ T5033] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.562714][ T5033] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.575639][ T5033] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.595131][ T5033] EXT4-fs error (device loop4): __ext4_get_inode_loc:4436: comm syz.4.439: Invalid inode table block 0 in block_group 0 [ 58.608854][ T5033] EXT4-fs (loop4): Remounting filesystem read-only [ 58.615380][ T5033] EXT4-fs (loop4): 1 truncate cleaned up [ 58.621796][ T5033] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 58.673298][ T5045] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 58.692646][ T5045] team0: Port device netdevsim1 added [ 58.715552][ T5045] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 58.729753][ T5045] team0: Port device netdevsim1 removed [ 58.741343][ T5045] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 58.767401][ T5050] loop0: detected capacity change from 0 to 512 [ 58.797388][ T5050] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.820257][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 58.832495][ T5050] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.841861][ T5050] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.442: bg 0: block 361: padding at end of block bitmap is not set [ 58.876316][ T5050] EXT4-fs (loop0): Remounting filesystem read-only [ 58.886271][ T5050] EXT4-fs (loop0): 1 truncate cleaned up [ 58.893850][ T5050] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 58.923902][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.960149][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.766632][ T5062] loop0: detected capacity change from 0 to 128 [ 59.816170][ T5064] loop4: detected capacity change from 0 to 2048 [ 59.826288][ T5064] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.836480][ T5066] 9pnet_fd: Insufficient options for proto=fd [ 59.933628][ T5064] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.447: bg 0: block 234: padding at end of block bitmap is not set [ 59.953738][ T5064] EXT4-fs (loop4): Remounting filesystem read-only [ 60.185123][ T5085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 60.213153][ T5085] syzkaller1: entered allmulticast mode [ 60.846260][ T5097] loop3: detected capacity change from 0 to 512 [ 60.853069][ T5097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 60.863274][ T5097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 60.871340][ T5097] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.877860][ T5097] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.458: bg 0: block 361: padding at end of block bitmap is not set [ 60.892775][ T5097] EXT4-fs (loop3): Remounting filesystem read-only [ 60.899500][ T5097] EXT4-fs (loop3): 1 truncate cleaned up [ 60.906868][ T5097] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 60.928419][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.938106][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.976567][ T5101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.459'. [ 61.725357][ T5110] loop3: detected capacity change from 0 to 512 [ 61.755698][ T5110] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 61.777672][ T5110] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.462: invalid indirect mapped block 2683928664 (level 1) [ 61.818361][ T5110] EXT4-fs (loop3): 1 truncate cleaned up [ 61.876330][ T5116] loop3: detected capacity change from 0 to 128 [ 61.937205][ T5118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.946769][ T4430] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 61.954180][ T4430] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 62.107889][ T5125] loop4: detected capacity change from 0 to 2048 [ 62.192886][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 62.192900][ T29] audit: type=1326 audit(1724825990.742:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.4.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488fe89e79 code=0x0 [ 62.274556][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.311653][ T5121] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.350397][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.427319][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.456017][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.545400][ T40] bridge_slave_1: left allmulticast mode [ 62.551140][ T40] bridge_slave_1: left promiscuous mode [ 62.556752][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.572610][ T40] bridge_slave_0: left allmulticast mode [ 62.578270][ T40] bridge_slave_0: left promiscuous mode [ 62.583938][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.725548][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.736777][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.747424][ T40] bond0 (unregistering): Released all slaves [ 62.760329][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 62.823754][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.830906][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.854821][ T5132] bridge_slave_0: entered allmulticast mode [ 62.869203][ T5132] bridge_slave_0: entered promiscuous mode [ 62.879152][ T40] hsr_slave_0: left promiscuous mode [ 62.887056][ T40] hsr_slave_1: left promiscuous mode [ 62.905895][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.913280][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.953570][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.961013][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.974799][ T40] veth1_macvtap: left promiscuous mode [ 62.980295][ T40] veth0_macvtap: left promiscuous mode [ 62.985894][ T40] veth1_vlan: left promiscuous mode [ 62.991344][ T40] veth0_vlan: left promiscuous mode [ 63.121853][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.131689][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.141537][ T5164] loop4: detected capacity change from 0 to 8192 [ 63.171186][ T5164] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.203243][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.210473][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.224289][ T5132] bridge_slave_1: entered allmulticast mode [ 63.238460][ T5132] bridge_slave_1: entered promiscuous mode [ 63.294902][ T5166] netlink: 88 bytes leftover after parsing attributes in process `syz.4.471'. [ 63.305546][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.328324][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.383362][ T5132] team0: Port device team_slave_0 added [ 63.402145][ T5132] team0: Port device team_slave_1 added [ 63.437684][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.444632][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.470576][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.522352][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.529308][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.555438][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.611960][ T5132] hsr_slave_0: entered promiscuous mode [ 63.627907][ T5132] hsr_slave_1: entered promiscuous mode [ 63.643071][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.656458][ T5132] Cannot create hsr debugfs directory [ 64.016563][ T5132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.030071][ T5215] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 64.030073][ T29] audit: type=1400 audit(1724825992.447:535): avc: denied { load_policy } for pid=5211 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.070480][ T5132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.080323][ T5132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.082836][ T5215] SELinux: failed to load policy [ 64.095948][ T5132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.134017][ T5225] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.475'. [ 64.143126][ T5225] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 64.197956][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.227570][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.247897][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.254952][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.276439][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.283885][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.419645][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.562529][ T5132] veth0_vlan: entered promiscuous mode [ 64.580969][ T5132] veth1_vlan: entered promiscuous mode [ 64.612444][ T5132] veth0_macvtap: entered promiscuous mode [ 64.628422][ T5132] veth1_macvtap: entered promiscuous mode [ 64.651711][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.662283][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.672100][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.682521][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.692422][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.702936][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.712763][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.723235][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.733056][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.743554][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.807057][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.827731][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.838201][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.848013][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.858511][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.868327][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.878751][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.888569][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.898993][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.908801][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.919253][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.935230][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.944467][ T5132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953252][ T5132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.961998][ T5132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.970792][ T5132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045582][ T29] audit: type=1400 audit(1724825993.391:536): avc: denied { map } for pid=5277 comm="syz.0.477" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.095771][ T5294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.479'. [ 65.239312][ T29] audit: type=1400 audit(1724825993.567:537): avc: denied { bind } for pid=5295 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.272870][ T29] audit: type=1400 audit(1724825993.586:538): avc: denied { write } for pid=5295 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.390397][ T5324] loop3: detected capacity change from 0 to 512 [ 65.411873][ T5324] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 65.434809][ T5324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 65.443014][ T5324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.460654][ T5324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.482: bg 0: block 361: padding at end of block bitmap is not set [ 65.492934][ T5324] EXT4-fs (loop3): Remounting filesystem read-only [ 65.501836][ T5324] EXT4-fs (loop3): 1 truncate cleaned up [ 65.514770][ T5324] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 65.537810][ T5320] chnl_net:caif_netlink_parms(): no params data found [ 65.571374][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.582029][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.624427][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.631544][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.648016][ T5320] bridge_slave_0: entered allmulticast mode [ 65.654727][ T5320] bridge_slave_0: entered promiscuous mode [ 65.662046][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.669118][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.676700][ T5320] bridge_slave_1: entered allmulticast mode [ 65.683293][ T5320] bridge_slave_1: entered promiscuous mode [ 65.703538][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.714152][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.734788][ T5320] team0: Port device team_slave_0 added [ 65.742064][ T5320] team0: Port device team_slave_1 added [ 65.759165][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.766106][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.792082][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.803747][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.810716][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.836653][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.865623][ T5320] hsr_slave_0: entered promiscuous mode [ 65.871541][ T5320] hsr_slave_1: entered promiscuous mode [ 65.877576][ T5320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.885186][ T5320] Cannot create hsr debugfs directory [ 65.960036][ T5320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.048766][ T5320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.090813][ T5350] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.484' sets config #0 [ 66.156405][ T5320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.231464][ T5320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.261922][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 66.311551][ T5320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.328968][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.336176][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.345883][ T5342] bridge_slave_0: entered allmulticast mode [ 66.370633][ T5342] bridge_slave_0: entered promiscuous mode [ 66.377728][ T5320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.387775][ T5367] loop3: detected capacity change from 0 to 1024 [ 66.398101][ T5320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.407046][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.412849][ T5367] EXT4-fs: Ignoring removed bh option [ 66.414099][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.426980][ T5342] bridge_slave_1: entered allmulticast mode [ 66.433346][ T5342] bridge_slave_1: entered promiscuous mode [ 66.441017][ T5320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.453633][ T5367] EXT4-fs mount: 20 callbacks suppressed [ 66.453646][ T5367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.494684][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.507171][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.507473][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.532418][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.539507][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.546813][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.553904][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.592627][ T5342] team0: Port device team_slave_0 added [ 66.601272][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.609177][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.627045][ T5342] team0: Port device team_slave_1 added [ 66.675573][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.682585][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.708500][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.720255][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.727232][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.753162][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.767829][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.809553][ T5342] hsr_slave_0: entered promiscuous mode [ 66.815776][ T5342] hsr_slave_1: entered promiscuous mode [ 66.822068][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.832625][ T5342] Cannot create hsr debugfs directory [ 66.839695][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.865856][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.872984][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.901366][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.908475][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.057495][ T5342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.087647][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.123886][ T5342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.176331][ T5389] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.191147][ T5342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.261769][ T5320] veth0_vlan: entered promiscuous mode [ 67.292922][ T5342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.329024][ T5320] veth1_vlan: entered promiscuous mode [ 67.343689][ T5320] veth0_macvtap: entered promiscuous mode [ 67.356327][ T5320] veth1_macvtap: entered promiscuous mode [ 67.368034][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.378581][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.388411][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.398854][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.408749][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.419238][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.429059][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.439670][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.449779][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.460293][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.470124][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.480643][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.492724][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.507550][ T5400] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.494'. [ 67.516638][ T5400] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 67.547504][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.557973][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.567808][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.578284][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.588139][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.598577][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.608420][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.618851][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.628664][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.639165][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.648996][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.659489][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.671683][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.680295][ T5320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.689031][ T5320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.697945][ T5320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.706817][ T5320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.754920][ T5342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.785584][ T5342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.811004][ T5342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.816192][ T5342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.923677][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.949842][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.972239][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.979344][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.008927][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.016011][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.079529][ T29] audit: type=1400 audit(1724825996.193:539): avc: denied { shutdown } for pid=5415 comm="syz.1.498" lport=58693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.148180][ T29] audit: type=1400 audit(1724825996.220:540): avc: denied { unmount } for pid=4789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.182019][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.493722][ T5342] veth0_vlan: entered promiscuous mode [ 68.510568][ T5443] loop3: detected capacity change from 0 to 256 [ 68.537022][ T5342] veth1_vlan: entered promiscuous mode [ 68.590960][ T5437] loop1: detected capacity change from 0 to 4096 [ 68.623065][ T29] audit: type=1400 audit(1724825996.692:541): avc: denied { create } for pid=5445 comm="syz.0.505" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.636997][ T5342] veth0_macvtap: entered promiscuous mode [ 68.673556][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.698167][ T5446] ./file0: Can't open blockdev [ 68.704024][ T29] audit: type=1400 audit(1724825996.756:542): avc: denied { mounton } for pid=5445 comm="syz.0.505" path="/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.740829][ T5342] veth1_macvtap: entered promiscuous mode [ 68.769796][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.780409][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.790224][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.800699][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.810543][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.820960][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.830792][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.841272][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.851075][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.861539][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.871347][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.881787][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891602][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.902110][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.914107][ T29] audit: type=1400 audit(1724825996.821:543): avc: denied { unlink } for pid=3262 comm="syz-executor" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.939612][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.954891][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.965403][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.975265][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.985706][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.995549][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.006058][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.015883][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.026353][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.036176][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.046649][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.056477][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.066928][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.076749][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.087180][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.252082][ T5437] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 69.264793][ T5437] File: /3/file0/bus PID: 5437 Comm: syz.1.502 [ 69.290643][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.318786][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.369500][ T29] audit: type=1400 audit(1724825997.385:544): avc: denied { bind } for pid=5463 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.388777][ T29] audit: type=1400 audit(1724825997.385:545): avc: denied { node_bind } for pid=5463 comm="syz.0.508" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 69.400892][ T5342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419263][ T5342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.427991][ T5342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.442395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888148bede00: rx timeout, send abort [ 69.442463][ C0] vcan0: j1939_tp_rxtimer: 0xffff888148beb800: rx timeout, send abort [ 69.451597][ T29] audit: type=1400 audit(1724825997.422:546): avc: denied { write } for pid=5463 comm="syz.0.508" laddr=172.20.20.170 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.451729][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888148bede00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.495763][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888148beb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.510106][ T5342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.567381][ T5472] loop4: detected capacity change from 0 to 512 [ 69.581933][ T5320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.599979][ T5472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.629862][ T29] audit: type=1400 audit(1724825997.615:547): avc: denied { setopt } for pid=5476 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.650830][ T5472] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.717060][ T29] audit: type=1326 audit(1724825997.699:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3339e9e79 code=0x0 [ 69.766557][ T5472] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.510: Directory hole found for htree leaf block 0 [ 69.781642][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 69.784279][ T5489] loop1: detected capacity change from 0 to 512 [ 69.804199][ T5489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.815270][ T5489] EXT4-fs (loop1): 1 truncate cleaned up [ 69.821255][ T5489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.839820][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.850355][ T5489] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.514: corrupted in-inode xattr: overlapping e_value [ 69.865105][ T5489] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1772: inode #15: comm syz.1.514: unable to update i_inline_off [ 69.910686][ T5494] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.934199][ T5489] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.514: corrupted in-inode xattr: overlapping e_value [ 69.968947][ T5489] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.514: corrupted in-inode xattr: overlapping e_value [ 69.980007][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.985679][ T5489] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.514: corrupted in-inode xattr: overlapping e_value [ 70.006689][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.086132][ T5504] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.518'. [ 70.095239][ T5504] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 70.200761][ T5507] netlink: 1916 bytes leftover after parsing attributes in process `syz.0.519'. [ 70.209953][ T5507] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 70.594366][ T5510] loop2: detected capacity change from 0 to 256 [ 70.694457][ T5320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.715705][ T5519] loop3: detected capacity change from 0 to 2048 [ 70.744584][ T5519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.773915][ T5514] loop2: detected capacity change from 0 to 8192 [ 70.819548][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.875279][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 70.890781][ T5529] loop2: detected capacity change from 0 to 2048 [ 70.914126][ T5530] loop1: detected capacity change from 0 to 1024 [ 70.926115][ T5529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.954973][ T5530] EXT4-fs: Ignoring removed bh option [ 70.974537][ T5342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.998917][ T5530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.066294][ T5545] loop2: detected capacity change from 0 to 256 [ 71.076735][ T5543] team0: Port device macvlan1 added [ 71.192362][ T5320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.221876][ T5556] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.534'. [ 71.231197][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'. [ 71.315075][ T5565] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 71.324862][ T5567] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 71.407710][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 71.545452][ T5586] loop3: detected capacity change from 0 to 256 [ 71.599730][ T5589] loop3: detected capacity change from 0 to 1024 [ 71.608556][ T5590] netlink: 1916 bytes leftover after parsing attributes in process `syz.1.543'. [ 71.613051][ T5589] EXT4-fs: Ignoring removed i_version option [ 71.617637][ T5590] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 71.658187][ T5589] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 71.675584][ T5592] tipc: Started in network mode [ 71.680526][ T5592] tipc: Node identity f7, cluster identity 4711 [ 71.686758][ T5592] tipc: Node number set to 247 [ 71.754403][ T5595] loop3: detected capacity change from 0 to 1024 [ 71.761426][ T5595] EXT4-fs: Ignoring removed bh option [ 71.777728][ T5595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.802679][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.838201][ T5600] netlink: 'syz.3.547': attribute type 25 has an invalid length. [ 71.846049][ T5600] netlink: 'syz.3.547': attribute type 7 has an invalid length. [ 71.978639][ T5605] loop3: detected capacity change from 0 to 8192 [ 71.987761][ T5605] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.999707][ T5605] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 72.008539][ T5605] FAT-fs (loop3): Filesystem has been set read-only [ 72.017318][ T5605] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 72.026432][ T5605] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 72.335189][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.348422][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.421737][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.430762][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.648090][ T5628] loop1: detected capacity change from 0 to 256 [ 72.691714][ T5630] loop1: detected capacity change from 0 to 512 [ 72.702358][ T5630] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.556: corrupted in-inode xattr: invalid ea_ino [ 72.716245][ T5630] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.556: couldn't read orphan inode 12 (err -117) [ 72.731669][ T5630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.787988][ T5634] loop3: detected capacity change from 0 to 1024 [ 72.795997][ T5320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.805359][ T5634] EXT4-fs: Ignoring removed bh option [ 72.834156][ T5634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.881971][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.926148][ T5641] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.559'. [ 72.935229][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 72.994765][ T5648] loop3: detected capacity change from 0 to 512 [ 73.197936][ T5650] loop1: detected capacity change from 0 to 512 [ 73.217149][ T5650] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 73.328143][ T5648] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.336341][ T5648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 73.383269][ T5648] System zones: 0-1, 15-15, 18-18, 34-34 [ 73.399194][ T5648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.420426][ T5648] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.435056][ T5648] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 73.461732][ T5648] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.562: bad orphan inode 16 [ 73.481286][ T5648] ext4_test_bit(bit=15, block=18) = 1 [ 73.486761][ T5648] is_bad_inode(inode)=0 [ 73.490941][ T5648] NEXT_ORPHAN(inode)=0 [ 73.495009][ T5648] max_ino=32 [ 73.498220][ T5648] i_nlink=2 [ 73.505515][ T5648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.591855][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.651049][ T5663] loop3: detected capacity change from 0 to 2048 [ 73.687249][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.732147][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.793968][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 73.793983][ T29] audit: type=1400 audit(1724826001.466:678): avc: denied { ioctl } for pid=5671 comm="syz.4.570" path="socket:[13210]" dev="sockfs" ino=13210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.829870][ T5672] wg1: entered promiscuous mode [ 73.834802][ T5672] wg1: entered allmulticast mode [ 73.865461][ T29] audit: type=1400 audit(1724826001.512:679): avc: denied { nlmsg_write } for pid=5667 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 73.896648][ T29] audit: type=1400 audit(1724826001.558:680): avc: denied { append } for pid=5670 comm="syz.3.569" dev="sockfs" ino=13211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.938272][ T5677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 73.944813][ T5677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.952966][ T5677] vhci_hcd vhci_hcd.0: Device attached [ 73.960985][ T29] audit: type=1400 audit(1724826001.586:681): avc: denied { mounton } for pid=5671 comm="syz.4.570" path="/proc/111/task" dev="proc" ino=13225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.993881][ T29] audit: type=1400 audit(1724826001.651:682): avc: denied { wake_alarm } for pid=5685 comm="syz.1.571" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.015359][ T5681] vhci_hcd: connection closed [ 74.015506][ T40] vhci_hcd: stop threads [ 74.024492][ T40] vhci_hcd: release socket [ 74.029041][ T40] vhci_hcd: disconnect device [ 74.051388][ T29] audit: type=1400 audit(1724826001.706:683): avc: denied { create } for pid=5684 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.120874][ T29] audit: type=1400 audit(1724826001.771:684): avc: denied { map } for pid=5685 comm="syz.1.571" path="socket:[13244]" dev="sockfs" ino=13244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.144271][ T5689] loop4: detected capacity change from 0 to 512 [ 74.148727][ T29] audit: type=1400 audit(1724826001.789:685): avc: denied { create } for pid=5685 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.175160][ T5689] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.175822][ T29] audit: type=1400 audit(1724826001.817:686): avc: denied { map } for pid=5685 comm="syz.1.571" path="socket:[13245]" dev="sockfs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.207980][ T29] audit: type=1400 audit(1724826001.817:687): avc: denied { read } for pid=5685 comm="syz.1.571" path="socket:[13245]" dev="sockfs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.232926][ T5689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 74.246717][ T5689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.253204][ T5689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.574: bg 0: block 361: padding at end of block bitmap is not set [ 74.273262][ T5689] EXT4-fs (loop4): Remounting filesystem read-only [ 74.330837][ T5689] EXT4-fs (loop4): 1 truncate cleaned up [ 74.341753][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 74.368819][ T5689] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 74.380050][ T5689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.423789][ T5701] loop3: detected capacity change from 0 to 256 [ 74.460820][ T5706] loop3: detected capacity change from 0 to 512 [ 74.471921][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.485064][ T5706] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.485605][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.508162][ T5706] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 74.522287][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.545786][ T5706] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.581: lblock 0 mapped to illegal pblock 3 (length 1) [ 74.565707][ T5706] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.581: error -117 reading directory block [ 74.616040][ T5713] loop2: detected capacity change from 0 to 2048 [ 74.626620][ T5713] ext3: Unknown parameter 'obj_user' [ 74.667375][ T5717] loop2: detected capacity change from 0 to 2048 [ 74.677197][ T5717] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 74.734707][ T5720] loop2: detected capacity change from 0 to 2048 [ 74.756748][ T5720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.779465][ T5342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.858466][ T5724] loop2: detected capacity change from 0 to 8192 [ 74.917720][ T5724] loop2: p2 p3 p4 [ 74.921618][ T5724] loop2: p2 start 14935 is beyond EOD, truncated [ 74.928036][ T5724] loop2: p3 size 196608 extends beyond EOD, truncated [ 74.935763][ T5724] loop2: p4 start 4026530307 is beyond EOD, truncated [ 74.996585][ T5726] loop2: detected capacity change from 0 to 128 [ 75.076430][ T5733] loop2: detected capacity change from 0 to 1024 [ 75.085763][ T5733] EXT4-fs: Ignoring removed bh option [ 75.102450][ T5733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.127352][ T5342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.257714][ T5741] __nla_validate_parse: 5 callbacks suppressed [ 75.257730][ T5741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.590'. [ 75.273010][ T5741] erspan0: entered promiscuous mode [ 75.370164][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.583209][ T5755] FAULT_INJECTION: forcing a failure. [ 75.583209][ T5755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.596442][ T5755] CPU: 1 UID: 0 PID: 5755 Comm: syz.0.595 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 75.607034][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.617143][ T5755] Call Trace: [ 75.620421][ T5755] [ 75.623398][ T5755] dump_stack_lvl+0xf2/0x150 [ 75.628063][ T5755] dump_stack+0x15/0x20 [ 75.632285][ T5755] should_fail_ex+0x229/0x230 [ 75.636976][ T5755] should_fail+0xb/0x10 [ 75.641136][ T5755] should_fail_usercopy+0x1a/0x20 [ 75.646165][ T5755] _copy_to_user+0x1e/0xa0 [ 75.650592][ T5755] simple_read_from_buffer+0xa0/0x110 [ 75.655970][ T5755] proc_fail_nth_read+0xff/0x140 [ 75.660965][ T5755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.666534][ T5755] vfs_read+0x1a2/0x6e0 [ 75.670699][ T5755] ? __rcu_read_unlock+0x4e/0x70 [ 75.675721][ T5755] ? __fget_files+0x1da/0x210 [ 75.680515][ T5755] ksys_read+0xeb/0x1b0 [ 75.684683][ T5755] __x64_sys_read+0x42/0x50 [ 75.689206][ T5755] x64_sys_call+0x27d3/0x2d60 [ 75.693888][ T5755] do_syscall_64+0xc9/0x1c0 [ 75.698412][ T5755] ? clear_bhb_loop+0x55/0xb0 [ 75.703159][ T5755] ? clear_bhb_loop+0x55/0xb0 [ 75.707843][ T5755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.713759][ T5755] RIP: 0033:0x7f85535488bc [ 75.718185][ T5755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 75.737814][ T5755] RSP: 002b:00007f85521c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.746264][ T5755] RAX: ffffffffffffffda RBX: 00007f85536e5f80 RCX: 00007f85535488bc [ 75.754233][ T5755] RDX: 000000000000000f RSI: 00007f85521c70a0 RDI: 0000000000000004 [ 75.762221][ T5755] RBP: 00007f85521c7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.770192][ T5755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.778162][ T5755] R13: 0000000000000000 R14: 00007f85536e5f80 R15: 00007fff1292c658 [ 75.786184][ T5755] [ 75.934476][ T5759] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 76.142832][ T5765] netlink: 'syz.0.600': attribute type 2 has an invalid length. [ 76.155296][ T5766] netlink: 1916 bytes leftover after parsing attributes in process `syz.2.599'. [ 76.164393][ T5766] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 76.232662][ T5757] loop1: detected capacity change from 0 to 512 [ 76.342678][ T5757] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 76.386222][ T5774] loop3: detected capacity change from 0 to 256 [ 76.434436][ T5776] batadv0: entered promiscuous mode [ 76.457719][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.490172][ T5778] loop1: detected capacity change from 0 to 1024 [ 76.505247][ T5778] EXT4-fs: Ignoring removed bh option [ 76.522285][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.544362][ T5783] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.606'. [ 76.553483][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 76.565254][ T5320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.026087][ T5793] loop2: detected capacity change from 0 to 164 [ 77.037600][ T5793] syz.2.609: attempt to access beyond end of device [ 77.037600][ T5793] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.057856][ T5793] syz.2.609: attempt to access beyond end of device [ 77.057856][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.071404][ T5793] syz.2.609: attempt to access beyond end of device [ 77.071404][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.085172][ T5793] syz.2.609: attempt to access beyond end of device [ 77.085172][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.105837][ T5793] syz.2.609: attempt to access beyond end of device [ 77.105837][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.127855][ T5793] syz.2.609: attempt to access beyond end of device [ 77.127855][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.142001][ T5793] syz.2.609: attempt to access beyond end of device [ 77.142001][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.155402][ T5794] syz.2.609: attempt to access beyond end of device [ 77.155402][ T5794] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.168822][ T5793] syz.2.609: attempt to access beyond end of device [ 77.168822][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.200270][ T5793] syz.2.609: attempt to access beyond end of device [ 77.200270][ T5793] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.405721][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 77.457196][ T5805] batadv0: entered promiscuous mode [ 77.494264][ T5805] macsec1: entered promiscuous mode [ 77.582802][ T5811] loop3: detected capacity change from 0 to 256 [ 77.771299][ T5821] loop3: detected capacity change from 0 to 2048 [ 77.830945][ T5821] Alternate GPT is invalid, using primary GPT. [ 77.833581][ T5822] netlink: 1916 bytes leftover after parsing attributes in process `syz.0.619'. [ 77.837206][ T5821] loop3: p1 p2 p3 [ 77.846185][ T5822] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 77.886640][ T2959] Alternate GPT is invalid, using primary GPT. [ 77.892929][ T2959] loop3: p1 p2 p3 [ 77.964520][ T5802] loop4: detected capacity change from 0 to 65536 [ 77.978240][ T5802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.612'. [ 78.214498][ T5832] loop4: detected capacity change from 0 to 512 [ 78.223085][ T5832] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.245570][ T5832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.623: bg 0: block 64: padding at end of block bitmap is not set [ 78.259953][ T5832] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.623: Failed to acquire dquot type 0 [ 78.272590][ T5832] EXT4-fs (loop4): 1 truncate cleaned up [ 78.279032][ T5832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.358334][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.434882][ T5838] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.624'. [ 78.444084][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 78.638032][ T5840] loop3: detected capacity change from 0 to 1024 [ 78.654437][ T5840] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 78.688154][ T5840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.735172][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.757281][ T5848] netlink: 76 bytes leftover after parsing attributes in process `syz.3.627'. [ 78.791256][ T5850] loop3: detected capacity change from 0 to 256 [ 78.832447][ T5852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=5852 comm=syz.3.629 [ 79.204053][ T5854] loop3: detected capacity change from 0 to 65536 [ 79.248951][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 79.248965][ T29] audit: type=1400 audit(1724826006.497:737): avc: denied { bind } for pid=5855 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.274244][ T29] audit: type=1400 audit(1724826006.497:738): avc: denied { name_bind } for pid=5855 comm="syz.2.632" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 79.294889][ T29] audit: type=1400 audit(1724826006.497:739): avc: denied { node_bind } for pid=5855 comm="syz.2.632" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 79.361460][ T29] audit: type=1400 audit(1724826006.580:740): avc: denied { read } for pid=5855 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.380792][ T29] audit: type=1400 audit(1724826006.580:741): avc: denied { listen } for pid=5855 comm="syz.2.632" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.402095][ T29] audit: type=1400 audit(1724826006.580:742): avc: denied { connect } for pid=5855 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.421484][ T29] audit: type=1400 audit(1724826006.580:743): avc: denied { name_connect } for pid=5855 comm="syz.2.632" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 79.442449][ T29] audit: type=1400 audit(1724826006.580:744): avc: denied { setopt } for pid=5855 comm="syz.2.632" laddr=::1 lport=57324 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.447251][ T5867] loop4: detected capacity change from 0 to 512 [ 79.465626][ T29] audit: type=1400 audit(1724826006.580:745): avc: denied { write } for pid=5855 comm="syz.2.632" laddr=::1 lport=57324 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.495358][ T29] audit: type=1400 audit(1724826006.580:746): avc: denied { accept } for pid=5855 comm="syz.2.632" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.575004][ T5867] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.617589][ T5867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 79.637992][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.645529][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.656555][ T5867] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.667742][ T5885] loop3: detected capacity change from 0 to 256 [ 79.675406][ T5883] loop2: detected capacity change from 0 to 256 [ 79.691650][ T5867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.635: bg 0: block 361: padding at end of block bitmap is not set [ 79.709437][ T5881] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 79.744580][ T5883] FAT-fs (loop2): Directory bread(block 64) failed [ 79.765514][ T5883] FAT-fs (loop2): Directory bread(block 65) failed [ 79.774515][ T5867] EXT4-fs (loop4): Remounting filesystem read-only [ 79.784578][ T5867] EXT4-fs (loop4): 1 truncate cleaned up [ 79.790491][ T5883] FAT-fs (loop2): Directory bread(block 66) failed [ 79.797958][ T5867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 79.810107][ T5883] FAT-fs (loop2): Directory bread(block 67) failed [ 79.816734][ T5883] FAT-fs (loop2): Directory bread(block 68) failed [ 79.826762][ T5867] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 79.833568][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 79.842714][ T5883] FAT-fs (loop2): Directory bread(block 69) failed [ 79.851039][ T5883] FAT-fs (loop2): Directory bread(block 70) failed [ 79.857931][ T5883] FAT-fs (loop2): Directory bread(block 71) failed [ 79.864542][ T5883] FAT-fs (loop2): Directory bread(block 72) failed [ 79.872938][ T5883] FAT-fs (loop2): Directory bread(block 73) failed [ 79.907807][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.916957][ T5883] x_tables: duplicate underflow at hook 1 [ 79.922919][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.968017][ T5899] Cannot find add_set index 0 as target [ 80.543411][ T5915] loop2: detected capacity change from 0 to 4096 [ 80.562844][ T5915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.680446][ T5919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.783160][ T5921] tap0: tun_chr_ioctl cmd 1074812118 [ 80.834697][ T5911] loop1: detected capacity change from 0 to 512 [ 80.859372][ T5911] ext4: Unknown parameter 'hash' [ 80.866550][ T5342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.883573][ T5911] syz.1.645: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 80.898370][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.1.645 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 80.909018][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.919131][ T5911] Call Trace: [ 80.922487][ T5911] [ 80.925417][ T5911] dump_stack_lvl+0xf2/0x150 [ 80.930074][ T5911] dump_stack+0x15/0x20 [ 80.934241][ T5911] warn_alloc+0x145/0x1b0 [ 80.938597][ T5911] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 80.944537][ T5911] ? audit_log_end+0x1d0/0x1e0 [ 80.949316][ T5911] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 80.955364][ T5911] __vmalloc_node_range_noprof+0xaa/0xec0 [ 80.961098][ T5911] ? avc_denied+0xf1/0x110 [ 80.965535][ T5911] ? slow_avc_audit+0xf9/0x140 [ 80.970409][ T5911] ? xskq_create+0x36/0xd0 [ 80.974865][ T5911] vmalloc_user_noprof+0x59/0x70 [ 80.979833][ T5911] ? xskq_create+0x79/0xd0 [ 80.984310][ T5911] xskq_create+0x79/0xd0 [ 80.988566][ T5911] xsk_init_queue+0x82/0xd0 [ 80.993149][ T5911] xsk_setsockopt+0x409/0x520 [ 80.997845][ T5911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.003062][ T5911] __sys_setsockopt+0x1d8/0x250 [ 81.007919][ T5911] __x64_sys_setsockopt+0x66/0x80 [ 81.012999][ T5911] x64_sys_call+0x278d/0x2d60 [ 81.017764][ T5911] do_syscall_64+0xc9/0x1c0 [ 81.022281][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 81.027049][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 81.031791][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.037752][ T5911] RIP: 0033:0x7f359b689e79 [ 81.042165][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.061799][ T5911] RSP: 002b:00007f359a301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.070218][ T5911] RAX: ffffffffffffffda RBX: 00007f359b825f80 RCX: 00007f359b689e79 [ 81.078186][ T5911] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 81.086157][ T5911] RBP: 00007f359b6f793e R08: 0000000000000020 R09: 0000000000000000 [ 81.094184][ T5911] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 81.102147][ T5911] R13: 0000000000000000 R14: 00007f359b825f80 R15: 00007ffe8a9960a8 [ 81.110123][ T5911] [ 81.113288][ T5911] Mem-Info: [ 81.116413][ T5911] active_anon:21239 inactive_anon:1 isolated_anon:0 [ 81.116413][ T5911] active_file:20654 inactive_file:1944 isolated_file:0 [ 81.116413][ T5911] unevictable:2 dirty:8 writeback:0 [ 81.116413][ T5911] slab_reclaimable:2748 slab_unreclaimable:17608 [ 81.116413][ T5911] mapped:35653 shmem:16784 pagetables:841 [ 81.116413][ T5911] sec_pagetables:0 bounce:0 [ 81.116413][ T5911] kernel_misc_reclaimable:0 [ 81.116413][ T5911] free:1817077 free_pcp:48165 free_cma:0 [ 81.161336][ T5911] Node 0 active_anon:84840kB inactive_anon:4kB active_file:82616kB inactive_file:7776kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:142612kB dirty:32kB writeback:0kB shmem:67136kB writeback_tmp:0kB kernel_stack:3200kB pagetables:3364kB sec_pagetables:0kB all_unreclaimable? no [ 81.189051][ T5911] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.213428][ T5934] loop3: detected capacity change from 0 to 512 [ 81.215858][ T5911] lowmem_reserve[]: 0 2866 7844 0 [ 81.222192][ T5911] Node 0 DMA32 free:2950416kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 81.222255][ T5911] lowmem_reserve[]: 0 0 4978 0 [ 81.222278][ T5911] Node 0 Normal free:4302532kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:85072kB inactive_anon:4kB active_file:82616kB inactive_file:7776kB unevictable:8kB writepending:32kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:189096kB local_pcp:184632kB free_cma:0kB [ 81.222428][ T5911] lowmem_reserve[]: 0 0 0 0 [ 81.222527][ T5911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.222668][ T5911] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950416kB [ 81.222863][ T5911] Node 0 Normal: 1*4kB (E) 10*8kB (E) 21*16kB (UE) 240*32kB (UME) 143*64kB (UME) 50*128kB (UME) 40*256kB (UME) 35*512kB (UME) 27*1024kB (UME) 24*2048kB (UME) 1019*4096kB (UM) = 4302436kB [ 81.223235][ T5911] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 81.223251][ T5911] 39369 total pagecache pages [ 81.223257][ T5911] 3 pages in swap cache [ 81.223262][ T5911] Free swap = 124436kB [ 81.223268][ T5911] Total swap = 124996kB [ 81.223273][ T5911] 2097051 pages RAM [ 81.223279][ T5911] 0 pages HighMem/MovableOnly [ 81.223284][ T5911] 80172 pages reserved [ 81.227172][ T5919] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 81.417287][ T5934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.436323][ T5946] loop2: detected capacity change from 0 to 512 [ 81.456952][ T5934] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.487556][ T5946] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.655: corrupted in-inode xattr: invalid ea_ino [ 81.521030][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.655: couldn't read orphan inode 15 (err -117) [ 81.542145][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.565035][ T5962] __nla_validate_parse: 2 callbacks suppressed [ 81.565047][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 81.591032][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.659308][ T5963] loop1: detected capacity change from 0 to 512 [ 81.666381][ T5963] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 81.679322][ T5963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 81.687351][ T5963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.693964][ T5963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.659: bg 0: block 361: padding at end of block bitmap is not set [ 81.704388][ T5974] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.662'. [ 81.717487][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 81.727899][ T5963] EXT4-fs (loop1): Remounting filesystem read-only [ 81.728782][ T5342] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 81.761503][ T5342] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 81.775109][ T5342] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 81.786925][ T5963] EXT4-fs (loop1): 1 truncate cleaned up [ 81.867342][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 81.892197][ T5963] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 81.899958][ T5963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 81.952568][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.974485][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.058467][ T5973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.297713][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 82.336302][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.343400][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.364717][ T5995] bridge_slave_0: entered allmulticast mode [ 82.378322][ T5995] bridge_slave_0: entered promiscuous mode [ 82.386496][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.393666][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.400980][ T5995] bridge_slave_1: entered allmulticast mode [ 82.407709][ T5995] bridge_slave_1: entered promiscuous mode [ 82.430037][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.451347][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.458242][ T6028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.679'. [ 82.486009][ T5995] team0: Port device team_slave_0 added [ 82.502434][ T5995] team0: Port device team_slave_1 added [ 82.536172][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.543211][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.569367][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.593278][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.600261][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.626245][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.663388][ T5995] hsr_slave_0: entered promiscuous mode [ 82.669523][ T5995] hsr_slave_1: entered promiscuous mode [ 82.680673][ T5995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.691359][ T5995] Cannot create hsr debugfs directory [ 82.713533][ T6045] loop3: detected capacity change from 0 to 512 [ 82.858408][ T6045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.892177][ T6045] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.069527][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.073871][ T5995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.095202][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.112541][ T5132] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /57/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 83.204579][ T5995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.302261][ T5995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.392004][ T6066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64544 sclass=netlink_route_socket pid=6066 comm=syz.0.691 [ 83.476807][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.693'. [ 83.508017][ T5995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.844426][ T5995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.870383][ T5995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.885481][ T5995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.898980][ T5995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.934613][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.960776][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.045698][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.075669][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.095695][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.102817][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.128856][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.135977][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.192342][ T5995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.319878][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.364932][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 84.387554][ T6097] loop4: detected capacity change from 0 to 512 [ 84.394229][ T6097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.440895][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.469738][ T5995] veth0_vlan: entered promiscuous mode [ 84.486584][ T6097] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.512137][ T5995] veth1_vlan: entered promiscuous mode [ 84.545575][ T5995] veth0_macvtap: entered promiscuous mode [ 84.592320][ T5995] veth1_macvtap: entered promiscuous mode [ 84.603596][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.625929][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.636515][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.646382][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.656840][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.666746][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.677316][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.687148][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.697629][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.707510][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.718103][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.727941][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.738666][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.748496][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.758925][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.768791][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.779395][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.799177][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.803226][ T6106] loop4: detected capacity change from 0 to 256 [ 84.809104][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.823066][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.832895][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.843367][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.853279][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.863977][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.873813][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.884224][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.894051][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.904475][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.914407][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.924964][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.935144][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.945657][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.959063][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.993850][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 84.993865][ T29] audit: type=1326 audit(1724826011.814:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.023973][ T29] audit: type=1326 audit(1724826011.841:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359b688810 code=0x7ffc0000 [ 85.049284][ T5995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.058188][ T5995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.066886][ T5995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075593][ T5995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087116][ T29] audit: type=1326 audit(1724826011.888:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.113594][ T29] audit: type=1326 audit(1724826011.925:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.136974][ T29] audit: type=1326 audit(1724826011.925:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.160380][ T29] audit: type=1326 audit(1724826011.925:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.184319][ T29] audit: type=1326 audit(1724826011.980:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.208336][ T29] audit: type=1326 audit(1724826011.980:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.232926][ T29] audit: type=1326 audit(1724826011.980:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.256581][ T29] audit: type=1326 audit(1724826012.054:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f359b689e79 code=0x7ffc0000 [ 85.262995][ T6123] FAULT_INJECTION: forcing a failure. [ 85.262995][ T6123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.292993][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.4.705 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 85.303698][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.313748][ T6123] Call Trace: [ 85.317093][ T6123] [ 85.320017][ T6123] dump_stack_lvl+0xf2/0x150 [ 85.324797][ T6123] dump_stack+0x15/0x20 [ 85.328963][ T6123] should_fail_ex+0x229/0x230 [ 85.333741][ T6123] should_fail+0xb/0x10 [ 85.338053][ T6123] should_fail_usercopy+0x1a/0x20 [ 85.343130][ T6123] _copy_from_user+0x1e/0xd0 [ 85.347789][ T6123] __sys_bpf+0x14e/0x7a0 [ 85.352116][ T6123] __x64_sys_bpf+0x43/0x50 [ 85.356592][ T6123] x64_sys_call+0x2625/0x2d60 [ 85.361318][ T6123] do_syscall_64+0xc9/0x1c0 [ 85.365815][ T6123] ? clear_bhb_loop+0x55/0xb0 [ 85.370484][ T6123] ? clear_bhb_loop+0x55/0xb0 [ 85.375152][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.381037][ T6123] RIP: 0033:0x7f488fe89e79 [ 85.385439][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.405043][ T6123] RSP: 002b:00007f488eb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.413445][ T6123] RAX: ffffffffffffffda RBX: 00007f4890025f80 RCX: 00007f488fe89e79 [ 85.421577][ T6123] RDX: 000000000000000c RSI: 0000000020000000 RDI: 000000000000000a [ 85.429559][ T6123] RBP: 00007f488eb07090 R08: 0000000000000000 R09: 0000000000000000 [ 85.437562][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.445518][ T6123] R13: 0000000000000000 R14: 00007f4890025f80 R15: 00007ffe4b51a4a8 [ 85.453623][ T6123] [ 85.565384][ T6128] loop4: detected capacity change from 0 to 512 [ 85.612214][ T6133] loop2: detected capacity change from 0 to 764 [ 85.636466][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.657620][ T6137] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.708'. [ 85.657805][ T6133] rock: directory entry would overflow storage [ 85.666677][ T6137] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 85.680528][ T6133] rock: sig=0x4f50, size=4, remaining=3 [ 85.686090][ T6133] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.710197][ T6128] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.794175][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.998492][ T6140] loop2: detected capacity change from 0 to 4096 [ 86.028856][ T6140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.183999][ C0] ================================================================== [ 86.192105][ T6147] loop4: detected capacity change from 0 to 2048 [ 86.192104][ C0] BUG: KCSAN: data-race in can_send / can_send [ 86.204568][ C0] [ 86.206885][ C0] read-write to 0xffff8881431fe070 of 8 bytes by interrupt on cpu 1: [ 86.214934][ C0] can_send+0x576/0x5d0 [ 86.219099][ C0] j1939_send_one+0x1a9/0x1e0 [ 86.223780][ C0] j1939_tp_txtimer+0xcab/0x1a70 [ 86.228733][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 86.233939][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 86.238968][ C0] handle_softirqs+0xc3/0x280 [ 86.243664][ C0] do_softirq+0x5e/0x90 [ 86.247828][ C0] __local_bh_enable_ip+0x6e/0x70 [ 86.252859][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 86.257796][ C0] icmp6_dst_alloc+0x2c4/0x320 [ 86.262557][ C0] mld_sendpack+0x2f6/0x6d0 [ 86.267069][ C0] mld_send_initial_cr+0x12f/0x1e0 [ 86.272190][ C0] ipv6_mc_dad_complete+0x5f/0x2c0 [ 86.277308][ C0] addrconf_dad_completed+0x4da/0x8a0 [ 86.282677][ C0] addrconf_dad_work+0x891/0xbd0 [ 86.287612][ C0] process_scheduled_works+0x483/0x9a0 [ 86.293083][ C0] worker_thread+0x526/0x6e0 [ 86.297677][ C0] kthread+0x1d1/0x210 [ 86.301755][ C0] ret_from_fork+0x4b/0x60 [ 86.306187][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.310953][ C0] [ 86.313266][ C0] read-write to 0xffff8881431fe070 of 8 bytes by interrupt on cpu 0: [ 86.321328][ C0] can_send+0x576/0x5d0 [ 86.325480][ C0] bcm_can_tx+0x314/0x420 [ 86.329812][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 86.335104][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 86.340304][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 86.345337][ C0] handle_softirqs+0xc3/0x280 [ 86.350024][ C0] irq_exit_rcu+0x3e/0x90 [ 86.354360][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 86.359991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.365981][ C0] get_random_bytes+0x0/0x30 [ 86.370570][ C0] nsim_dev_trap_report_work+0x204/0x5b0 [ 86.376210][ C0] process_scheduled_works+0x483/0x9a0 [ 86.381670][ C0] worker_thread+0x526/0x6e0 [ 86.386269][ C0] kthread+0x1d1/0x210 [ 86.390347][ C0] ret_from_fork+0x4b/0x60 [ 86.394763][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.399528][ C0] [ 86.401840][ C0] value changed: 0x000000000000332e -> 0x000000000000332f [ 86.408936][ C0] [ 86.411251][ C0] Reported by Kernel Concurrency Sanitizer on: [ 86.417385][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 86.427885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.437938][ C0] Workqueue: events nsim_dev_trap_report_work [ 86.444025][ C0] ================================================================== [ 86.610023][ T6147] loop4: p1 < > p3 [ 86.658839][ T6147] loop4: p3 size 134217728 extends beyond EOD, truncated [ 87.000665][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115993000: rx timeout, send abort [ 87.008885][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115c7f200: rx timeout, send abort [ 87.027097][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115993000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.041394][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115c7f200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.381019][ T5995] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.211933][ T50] bridge_slave_1: left allmulticast mode [ 89.217633][ T50] bridge_slave_1: left promiscuous mode [ 89.223255][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.250051][ T50] bridge_slave_0: left allmulticast mode [ 89.255701][ T50] bridge_slave_0: left promiscuous mode [ 89.261407][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.406843][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.426057][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.448071][ T50] bond0 (unregistering): Released all slaves [ 89.544042][ T50] hsr_slave_0: left promiscuous mode [ 89.549681][ T50] hsr_slave_1: left promiscuous mode [ 89.558575][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.565992][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.586373][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.593763][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.604553][ T50] veth1_macvtap: left promiscuous mode [ 89.610121][ T50] veth0_macvtap: left promiscuous mode [ 89.615614][ T50] veth1_vlan: left promiscuous mode [ 89.620999][ T50] veth0_vlan: left promiscuous mode [ 89.801641][ T50] team0 (unregistering): Port device team_slave_1 removed [ 89.824026][ T50] team0 (unregistering): Port device team_slave_0 removed