last executing test programs: 5.371754601s ago: executing program 1 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800004466000000000000000000008ea7543f0010110000", @ANYBLOB="00000000000000f7b6080000000000007b8af8ff000000ffbfa2000000ef9ee93fe321135372da100400d34cec8900000005"], 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e24, 0x101, @local, 0x400a531}], 0x2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x220, 0x1}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x6}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000600), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="1f52b1e28fb3aca878922742780213301800c0e9a23591e351da1faf2ce1af00"/46, @ANYRES8=0x0, @ANYBLOB="0000000000000000b708f100000000007b8af8dc00000000bfa200000000000007020000f8ffffffb703000008000080b72be7dee0e11f9883c429b851ef0277cd583c1ccc2b8a8ad8a6a1dc16fe8fb51e0ebeb2fdda09a9e248a84d302c6707f2b62f596db9b77f35c8ef33cf0983a3524ba28b223529d051674892c21bf9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f0000000000003c0000003c0000000200000000000003000000000000000000000105000000200000000000000003000000000200000002000000000000000000"], 0x0, 0x56}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f00000002c0), &(0x7f0000000a40)=""/4096, &(0x7f00000003c0)="3fd9c627db48509ddac9a6e5c380b022f15518337f5a31ca07490a72f407482e86518ebfbb8c44fd2d4e60ea9d6991f3ab659a24e2dce98f65d766f9921cea1d3efe87741ed78f4a238e6ff52e91142817790040ae84272404b3bbdaa1ba6fbeb8ef7d291414f6902a95a5d7f9f1e315c3ade99b2a16bba6c6cde1e5d1", &(0x7f0000000500)="2a73e4e45a37e41384b29c1920be0e2edfb5568a17cc20307c74121b83eeae745de9240e9acb750c75389e43f9a2e9e5ad90ed6623c3c5af1a1bf8d6f986bac0c4e3a7ac5a18d5fe7623fa362719eb323e17911350f90e202e49a9e0b998abf65f94de6f7165119b7e79f754cf8c83cb73e20aba2552f243d94c161b9436c98004419343e7c1383241fa3de5b2ff96b20e4628451a4d0d9c63cc1d0d24ce67ab286214a5616817e78c0e899c2d6a8837fb10132d1972ff081dc80b65c3e9fa55d8fe7b92b562ab6db590856f8087101c94769e8a7eec21b8336c74a8a28dd10adf18ae8efb1d7715c502205438333d", 0x4, r2}, 0x38) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r6, 0x8982, 0x20000000) (async) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2077, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) 5.046015298s ago: executing program 1 (id=589): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) set_mempolicy_home_node(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2, 0x0) 4.16321169s ago: executing program 3 (id=594): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) syz_io_uring_setup(0x4e5b, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x8000}, &(0x7f0000000100), &(0x7f0000000000)) clock_settime(0x0, &(0x7f0000000340)) 1.775918836s ago: executing program 1 (id=617): openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x1f5885, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800051000000000000006808500000050000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) write(r0, &(0x7f0000004200)='t', 0x1) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ftruncate(r4, 0x2007ffd) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) 1.578482031s ago: executing program 1 (id=621): syz_emit_ethernet(0x8a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000080a00000000000000001312ca0c734891fd780e7e6229aa56c5e6dfa263a2ef1df715fb24b0951e10200000000000000000000000000013122bdd4b74a1f6aa675459bc4d77085aa80000"], 0x0) 1.519297626s ago: executing program 1 (id=623): sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000200)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x4d, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x514}, 0x90) 1.355904929s ago: executing program 4 (id=630): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="82f0de933f44b0b6", 0xfc5b}], 0x11, 0x800, 0xec, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x8040, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x4c02, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 1.198572212s ago: executing program 4 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r2 = open(&(0x7f0000000280)='./file1\x00', 0x143042, 0x100) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x2008002) fallocate(r2, 0x20, 0x0, 0x10000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000010104000000000000a700000000001800018014000180080001007f00000108000200e0000002"], 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_int(r6, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$unix(r4, &(0x7f0000003000), 0x6e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) setsockopt$inet_mreqsrc(r7, 0x0, 0x64, &(0x7f0000000180)={@local, @remote, @broadcast}, 0xc) r9 = dup2(r7, r8) write$P9_RGETLOCK(r9, &(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x88, &(0x7f0000000000)=""/136, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed5, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x10, 0x2000000}, 0x90) 1.150000837s ago: executing program 0 (id=635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x13c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000d80)=ANY=[], 0x0) 1.117106599s ago: executing program 3 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000130001000000000000000000080000000900000008000000ffffffff08001300", @ANYRESOCT, @ANYBLOB="0800318033f1bee1"], 0x30}], 0x1}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='$\x00', &(0x7f0000000140)='\xa1\x00', &(0x7f0000000180)='-\x00', &(0x7f00000001c0)='(:\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='\x00']) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1, &(0x7f0000000400)={'trans=virtio,', {[{@fscache}], [{@seclabel}, {@subj_user={'subj_user', 0x3d, '\xa1\x00'}}, {@subj_user={'subj_user', 0x3d, ']'}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-\x00'}}]}}) 1.116708589s ago: executing program 0 (id=637): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000003580)=ANY=[@ANYRESOCT=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x4}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000540)='jbd2_update_log_tail\x00', r2}, 0x67) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000004c0)=""/83, 0x53) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000040)="aefdda9d24038348466fdbcf839a3aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000840)="acf70f562401a2de4ed4339bbac02bd0062ce995d9b804764e4565180a4f14be332f42ba002d00a3bf639f15319b7f1ef1ca28d21708e33b1add430730098cec4ed8ccc265f807cd68e7c5eede6be32154f5"}], 0x10000000000001d0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x0) ftruncate(r5, 0x801da) read(r4, &(0x7f0000000080)=""/42, 0xffffff9b) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/route\x00') socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x3, 0x4, 0x8, 0xa, 0x90, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000020000000000000000071107f00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0xc1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x40, 0xf7c, 0x0, 0x22, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xa1, 0xc}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000cc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xfc, &(0x7f0000000600)=""/252, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x2, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x7}, 0x10, 0xffffffffffffffff}, 0x90) pread64(0xffffffffffffffff, &(0x7f0000001740)=""/96, 0x60, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000680001000000000000000000020000000400000006000700040000000c00088005000500000000000400040008000500", @ANYRES32=r8, @ANYBLOB="f0fdb6aeb63fb242bf55c91f0a1968f7f4e9a85314b873422ee08f9ea77139ef4ef276a1139a5fe7dd35d865f5641caef900fd"], 0x38}}, 0x0) 1.051317784s ago: executing program 3 (id=638): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff5565, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000680108805400078008000500000000000800050000000000080006000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005000000000008000600000000000800060000000000080005000000000008000500"], 0x1a8}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2f0, &(0x7f0000000240)="$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") clock_nanosleep(0x7, 0x1, &(0x7f00000000c0), 0x0) 1.038443845s ago: executing program 0 (id=639): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) set_mempolicy_home_node(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2, 0x0) 1.014401558s ago: executing program 4 (id=640): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f00000006c0)={[{@user_xattr}, {@data_err_abort}, {@noinit_itable}, {@grpjquota}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@jqfmt_vfsv0}, {@discard}, {@data_err_abort}]}, 0x1, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000001c002f800c00020000000000000000000c000380080001000100000008000300", @ANYRES32=r3, @ANYBLOB="38012f8008000100000100000c0002000203aaaaaaaaaaaa94000380080004006a070000440003800c0004000000000000000000080002000000000006000100000000000c0003000000000006000300a0aa00000600010002000000280003800800020002000000080002000100000008000200020000000c0004006c0741c31fb730b7050002000000000008000400050000000c000500ff0000000000aaaa0800010002000000"], 0x170}}, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_emit_ethernet(0xdb, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x0]}, 0x0) writev(r8, 0x0, 0x0) r9 = socket$inet6(0x10, 0x0, 0x0) write(r9, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, r8) socket$nl_route(0x10, 0x3, 0x0) 963.094572ms ago: executing program 0 (id=641): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xffffffffffffffd9, 0x2001, &(0x7f0000000840)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ada16d826eb914fdbb942c97963272a46dac8b5a9fa29619ca28e209146a76225ffb2bd5f329b0bd10d58751a0fcfecedb7dde436b9bd7382a6bf3000cf1b0b7a46e12c53e700810ed3c1fa8e655ba6fa7f24048f6a7f11236a32731abdbcdf8302956c2306cce92413abfc45e85d89da90705039578491f0bc9055215c451f97057603410af3b1f58952d934b244834d6ab5ff5289be8e7cbd1", &(0x7f0000000180)=""/114, 0x0, 0x1100, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 829.671163ms ago: executing program 0 (id=643): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="82f0de933f44b0b6", 0xfc5b}], 0x11, 0x800, 0xec, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x8040, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x4c02, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 816.071154ms ago: executing program 3 (id=645): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0x138}}], 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) syz_usbip_server_init(0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1895, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040), 0x8) 744.669599ms ago: executing program 0 (id=646): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000340)) 705.281043ms ago: executing program 4 (id=648): r0 = fsopen(&(0x7f0000000040)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2802002, &(0x7f0000001040)=ANY=[], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x254, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x300c480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x8ec00}], 0x12, 0x1400, 0x0, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)=']', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000080a00000000000000001312ca0c734891fd780e7e6229aa56c5e6dfa263a2ef1df715fb24b0951e10200000000000000000000000000013122bdd4b74a1f6aa675459bc4d77085aa80000"], 0x0) 657.650706ms ago: executing program 1 (id=650): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1d3, &(0x7f0000001a00)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") (async) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f00000004c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f00000004c0), 0x0}, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x2801, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0xd, 0x40000000}, {0x13, 0x2}, {}]}]}}, &(0x7f00000021c0)=""/4096, 0x3e, 0x1000, 0x9}, 0x20) futimesat(r1, &(0x7f00000003c0)='./control\x00', &(0x7f00000005c0)={{r2, r3/1000+10000}, {0x77359400}}) (async) futimesat(r1, &(0x7f00000003c0)='./control\x00', &(0x7f00000005c0)={{r2, r3/1000+10000}, {0x77359400}}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) (async) close(r5) inotify_init1(0x0) r6 = gettid() fcntl$setown(r5, 0x8, r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@dev}}}, [@mark={0xc}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xd8}}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="040002000000000000000000000000000000000000000002"]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 544.557795ms ago: executing program 4 (id=651): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair(0x29, 0x5, 0x244b, &(0x7f0000000140)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x1, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f801001ddaaca7bd641ea89de2b7fb0a010000002a00000000000000000000000000000000000000000000000025cefd29d984bd1500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 502.984119ms ago: executing program 2 (id=652): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {}, {@sysvgroups}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@barrier}]}, 0x1, 0x588, &(0x7f0000000700)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/34, 0x22) lseek(r0, 0x8, 0x1) getdents64(r0, 0x0, 0x402) 502.586159ms ago: executing program 4 (id=653): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x40400) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r4, 0x0, 0x7fff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x40, 0x71, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x6}, 0x90) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) accept$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r6 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x59, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) syncfs(r1) 372.62329ms ago: executing program 2 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x25d, &(0x7f00000002c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000580)='GPL\x00'}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r5, r4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000080000000000000000085000000a400000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) 296.609976ms ago: executing program 2 (id=655): pipe2(0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="6465636f646573207c0900000000000000cd20023d0200000000000000cafe505ef3502ac7be75c1bfc9d7f73200000000000000f2"], 0xd) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="6465636f64966aff7ee989986df9b4ae9d4f3cad6573206d656d00"], 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe005f"], 0x24}}, 0x0) fstat(r3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="14e2e45c7218", 'vcan0\x00'}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm], 0x4) r5 = dup2(r4, r4) sendmsg$nl_netfilter(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x2}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000002740)=@urb_type_interrupt={0x1, {}, 0xfffffffd, 0xf4, 0x0, 0x0, 0xffffbffd, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000000)={0x9, 0x0, 0xa, 0x6, 0xa4}) quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0) r8 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000001640)=@ethtool_cmd={0xe, 0x1000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) socket$packet(0x11, 0x3, 0x300) 241.509191ms ago: executing program 2 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f00000008c0)="$eJzs3M9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge97EE8ehN29x/wsrfdy1725mVhDyuL7CyZH5roJO6OZqPr9wMy78zzPOP7khieCc4c/vjvb7WKrVeMlsTTSmIiIkcieYlLIOZv4+44Jd225fOJZw8/Xlxe+a5YKs0uKDVXXPqyoJTKTd39/c+Mn7Y/Lgf5nw+fFp4cvH/w4eHLpV+rtqraqt5oKUOtNh63jFXLVOtVu6YrNW+Zhm2qat02m1684cUrVmNjo62M+vpkdqNp2rYy6m1VM9uq1VCtZlsZvxjVutJ1XU1mJUwq9OhtVd5ZWDCKEYvXrngyiOqF4zgDwk6saCREJHMuUt4Z6rwAAMC1dKb/T7gtfaT+X3Ju/99JPu3/dz+535r4YS/n9//7qbD+/6tH3rl6+v+0iFxp/58OWf35jujG23qT5Ev1/7geps5f08Z69prNopH1/35df/+0O+0O6P8BAAAAAAAAAAAAAAAAAAAAALgJjhxHcxxHC7b+zxenGd6xUc4Rw9Pn9dfG/Tumgv1RzxPDsbi8Imn3xr1kTsT6Z7O8Wfa2fjxInBZNjt33g68zDu48Uh15uWdt+fVbm+WEGylWpCqWmDIjmuTP1jvO3Lel2Rnl6a0fk2x3fUE0eS+8vhBan5LPPu2q10WTB2vSEEvWO+/rY+ek/q8Zpb75vnSmPuPmAQAAAADwLtDVidDrd13vF/fqT66ve78fEOm6Pp8OvT5Pah8lR7t2AAAAAABuC7v9R82wLLM5YJCRi3OiD5LRyscG5SS6VtgTku2+S075Twge3koHDIJ/pKilukJp+d8/HOXMwfqHM+e4RKmaEmfcm9VlfnvwtVG/HJkf9uuV7BP64L87z6OdOeY/tbc79PVe+oKVDm0w9lofHk7ikp8+AAAAAN6moOnP2O5ubNTzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNhrwGLDkVT1ObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LVwEAAP//mxn/6g==") r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xf4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffd}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x10, 0xffff, 0x400, 0x0, 0x80000000, 0xfffffffc, 0x6}}, {0x10, 0x2, [0x1, 0x851, 0xffff, 0x7, 0x6f66, 0x8]}}, {{0x1c, 0x1, {0xe, 0x81, 0x7, 0x7, 0x2, 0x5, 0x96, 0x7}}, {0x12, 0x2, [0x5, 0x1ff, 0x4, 0x4, 0xfff9, 0x800, 0x3]}}, {{0x1c, 0x1, {0xfe, 0x5, 0x101, 0xa7a5, 0x1, 0xc, 0x4, 0x5}}, {0xe, 0x2, [0xfd, 0x6, 0x1ff, 0x9, 0x4e40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0xf4}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x2, @time, {}, {}, @raw32={[0x8c]}}, {0x0, 0x0, 0x0, 0x0, @time={0x5, 0x400}, {}, {}, @connect={{0x1, 0x8}, {0x7, 0x9}}}, {0x92, 0xb, 0xc7, 0x18, @tick=0x7, {0x1, 0x4}, {0xa, 0xe}, @raw8={"660fdd6e846bc99cd4843b26"}}, {0xa4, 0x7, 0x6, 0x5, @tick=0x100, {}, {0x1, 0x9}, @control={0x8, 0x8, 0x5}}], 0x70) read$snapshot(r4, 0x0, 0xffffffbf) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="1b23e2ef7e5fea864050e910f212253a3adad810b48074283bb1df0843a71c0574cbbc904c3135003d3edaa1f904ddda3d5bf9d79584a1464384cf9e16b615b3f4f5e72208c19a90b745697b9d3a99ee6f49a730c3330d085116bfd8318b7f17cecea96738e6f12eed7425221642ce9041b8233a46409dd82a89f3ec574b78a41cffca8f50af46", 0x87, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000300)='trusted\x00', &(0x7f0000000340)) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) 144.673499ms ago: executing program 2 (id=657): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="82f0de933f44b0b6", 0xfc5b}], 0x11, 0x800, 0xec, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x8040, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x4c02, &(0x7f0000000140)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 144.463048ms ago: executing program 3 (id=658): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xd3f, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0\x00', 0x10, 0x1000, 0x1, {0x0, r5}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4ac9, 0x0, 0xfdef, 0x0, 0x0) 95.150242ms ago: executing program 2 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe3c, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[], 0xfffffdef}}, 0x0) 0s ago: executing program 3 (id=660): sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000200)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x4d, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x514}, 0x90) kernel console output (not intermixed with test programs): p1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 74.492188][ T5108] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 74.504070][ T5108] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 74.505228][ T40] bond0 (unregistering): Released all slaves [ 74.546061][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.553015][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.579011][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.590804][ T6092] loop3: detected capacity change from 0 to 8192 [ 74.598603][ T6092] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.625035][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.631987][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.657948][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.686932][ T6052] hsr_slave_0: entered promiscuous mode [ 74.693012][ T6052] hsr_slave_1: entered promiscuous mode [ 74.699235][ T6052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.706880][ T6052] Cannot create hsr debugfs directory [ 74.715577][ T5108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.724641][ T40] hsr_slave_0: left promiscuous mode [ 74.730435][ T40] hsr_slave_1: left promiscuous mode [ 74.737100][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.744614][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.766079][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.773734][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.796954][ T40] veth1_macvtap: left promiscuous mode [ 74.802545][ T40] veth0_macvtap: left promiscuous mode [ 74.808124][ T40] veth1_vlan: left promiscuous mode [ 74.813362][ T40] veth0_vlan: left promiscuous mode [ 74.917066][ T40] team0 (unregistering): Port device team_slave_1 removed [ 74.928844][ T40] team0 (unregistering): Port device team_slave_0 removed [ 75.212311][ T6095] chnl_net:caif_netlink_parms(): no params data found [ 75.309072][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.316686][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.326276][ T6095] bridge_slave_0: entered allmulticast mode [ 75.335168][ T6095] bridge_slave_0: entered promiscuous mode [ 75.350561][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.357697][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.376665][ T6095] bridge_slave_1: entered allmulticast mode [ 75.383054][ T6095] bridge_slave_1: entered promiscuous mode [ 75.391252][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.425400][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.435901][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.474894][ T6095] team0: Port device team_slave_0 added [ 75.509243][ T6144] loop3: detected capacity change from 0 to 1024 [ 75.511899][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.519290][ T6144] EXT4-fs: Ignoring removed oldalloc option [ 75.533770][ T6095] team0: Port device team_slave_1 added [ 75.551149][ T6144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.565973][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.572939][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.598975][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.610422][ T5691] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.627565][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.630653][ T6150] Invalid logical block size (2) [ 75.643360][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.650383][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.676330][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.684144][ T6154] loop3: detected capacity change from 0 to 1024 [ 75.695348][ T6154] EXT4-fs: Ignoring removed orlov option [ 75.701036][ T6154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.712798][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.731108][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.746506][ T6095] hsr_slave_0: entered promiscuous mode [ 75.752585][ T6095] hsr_slave_1: entered promiscuous mode [ 75.758614][ T6095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.766195][ T6095] Cannot create hsr debugfs directory [ 75.774405][ T6154] loop3: detected capacity change from 1024 to 64 [ 75.774925][ T6052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.798070][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.815087][ T6052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.832075][ T6052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.840547][ T6052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.876509][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.890164][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.908120][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.943465][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.954371][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.967824][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.981480][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 75.995157][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 76.009148][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 76.022657][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 76.036507][ T5691] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 76.037568][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.066197][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 76.123994][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.140561][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.181161][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.188836][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.196159][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.205548][ T6140] bridge_slave_0: entered allmulticast mode [ 76.211873][ T6140] bridge_slave_0: entered promiscuous mode [ 76.225057][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.232385][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.242816][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.249914][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.261767][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.280925][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.288093][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.296318][ T6140] bridge_slave_1: entered allmulticast mode [ 76.302739][ T6140] bridge_slave_1: entered promiscuous mode [ 76.326690][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.337276][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.360307][ T6140] team0: Port device team_slave_0 added [ 76.367444][ T6140] team0: Port device team_slave_1 added [ 76.408269][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.415270][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.441174][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.463719][ T40] bridge_slave_1: left allmulticast mode [ 76.469472][ T40] bridge_slave_1: left promiscuous mode [ 76.475186][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.486544][ T40] bridge_slave_0: left allmulticast mode [ 76.492452][ T40] bridge_slave_0: left promiscuous mode [ 76.498159][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.506713][ T40] bridge_slave_1: left allmulticast mode [ 76.512374][ T40] bridge_slave_1: left promiscuous mode [ 76.518171][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.527919][ T5691] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.537424][ T40] bridge_slave_0: left allmulticast mode [ 76.543061][ T40] bridge_slave_0: left promiscuous mode [ 76.543205][ T6157] kmmpd-loop3: attempt to access beyond end of device [ 76.543205][ T6157] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 76.548736][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.562163][ T6157] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 76.767070][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.777321][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.787257][ T40] bond0 (unregistering): Released all slaves [ 76.796133][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.806114][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.816294][ T40] bond0 (unregistering): Released all slaves [ 76.824702][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.831731][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.857739][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.898235][ T6140] hsr_slave_0: entered promiscuous mode [ 76.904143][ T6140] hsr_slave_1: entered promiscuous mode [ 76.911806][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.919456][ T6140] Cannot create hsr debugfs directory [ 76.941189][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.009575][ T40] hsr_slave_0: left promiscuous mode [ 77.015585][ T40] hsr_slave_1: left promiscuous mode [ 77.021302][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.028767][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.036872][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.044308][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.053965][ T40] hsr_slave_0: left promiscuous mode [ 77.060989][ T40] hsr_slave_1: left promiscuous mode [ 77.067186][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.074656][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.082149][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.089555][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.099201][ T40] veth1_macvtap: left promiscuous mode [ 77.104702][ T40] veth0_macvtap: left promiscuous mode [ 77.110176][ T40] veth1_vlan: left promiscuous mode [ 77.115466][ T40] veth0_vlan: left promiscuous mode [ 77.121154][ T40] veth1_macvtap: left promiscuous mode [ 77.126693][ T40] veth0_macvtap: left promiscuous mode [ 77.132169][ T40] veth1_vlan: left promiscuous mode [ 77.137484][ T40] veth0_vlan: left promiscuous mode [ 77.249056][ T40] team0 (unregistering): Port device team_slave_1 removed [ 77.259255][ T40] team0 (unregistering): Port device team_slave_0 removed [ 77.319307][ T40] team0 (unregistering): Port device team_slave_1 removed [ 77.329015][ T40] team0 (unregistering): Port device team_slave_0 removed [ 77.423376][ T6095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.432157][ T6095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.444457][ T6095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.470070][ T6095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.497480][ T6052] veth0_vlan: entered promiscuous mode [ 77.528584][ T6226] chnl_net:caif_netlink_parms(): no params data found [ 77.539197][ T6052] veth1_vlan: entered promiscuous mode [ 77.584427][ T6052] veth0_macvtap: entered promiscuous mode [ 77.604105][ T6052] veth1_macvtap: entered promiscuous mode [ 77.621450][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.632802][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.639992][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.647284][ T6226] bridge_slave_0: entered allmulticast mode [ 77.653886][ T6226] bridge_slave_0: entered promiscuous mode [ 77.660907][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.668156][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.675411][ T6226] bridge_slave_1: entered allmulticast mode [ 77.681673][ T6226] bridge_slave_1: entered promiscuous mode [ 77.701813][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.712327][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722204][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.732710][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.743638][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.757460][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.770766][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.781219][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.791129][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.801576][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.812586][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.821325][ T6052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830054][ T6052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.838781][ T6052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.847573][ T6052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.859689][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.871531][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.888026][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.895162][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.910211][ T6226] team0: Port device team_slave_0 added [ 77.916891][ T6226] team0: Port device team_slave_1 added [ 77.945969][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.953104][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.974851][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.981795][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.007937][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.019516][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.026567][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.052582][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.069013][ T6140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.078300][ T6140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.097511][ T6140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.106645][ T6140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.157598][ T6226] hsr_slave_0: entered promiscuous mode [ 78.165688][ T6226] hsr_slave_1: entered promiscuous mode [ 78.181296][ T6226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.203028][ T6226] Cannot create hsr debugfs directory [ 78.248108][ T3379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.263234][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'. [ 78.289737][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.308106][ T3379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.335279][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.360728][ T3379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.405262][ T3379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.425932][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.445834][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.452922][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.486951][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.494101][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.513459][ T6140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.573846][ T3379] bridge_slave_1: left allmulticast mode [ 78.579592][ T3379] bridge_slave_1: left promiscuous mode [ 78.585318][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.593996][ T3379] bridge_slave_0: left allmulticast mode [ 78.599684][ T3379] bridge_slave_0: left promiscuous mode [ 78.605462][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.706732][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.718445][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.728971][ T3379] bond0 (unregistering): Released all slaves [ 78.753236][ T6095] veth0_vlan: entered promiscuous mode [ 78.763647][ T6095] veth1_vlan: entered promiscuous mode [ 78.776304][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.805504][ T6095] veth0_macvtap: entered promiscuous mode [ 78.813200][ T6095] veth1_macvtap: entered promiscuous mode [ 78.832486][ T3379] hsr_slave_0: left promiscuous mode [ 78.839936][ T3379] hsr_slave_1: left promiscuous mode [ 78.853985][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.861548][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.871612][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.879287][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.889018][ T3379] veth1_macvtap: left promiscuous mode [ 78.894675][ T3379] veth0_macvtap: left promiscuous mode [ 78.900289][ T3379] veth1_vlan: left promiscuous mode [ 78.905690][ T3379] veth0_vlan: left promiscuous mode [ 78.979059][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 78.989446][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 79.034720][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.045252][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.055167][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.065628][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.076514][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.091573][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.102094][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.111951][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.122406][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.133102][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.149159][ T6095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.158069][ T6095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.166878][ T6095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.175582][ T6095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.189267][ T6140] veth0_vlan: entered promiscuous mode [ 79.220514][ T6140] veth1_vlan: entered promiscuous mode [ 79.235164][ T6226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.253836][ T6226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.263385][ T6226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.294729][ T6226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.302271][ T6387] FAULT_INJECTION: forcing a failure. [ 79.302271][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.315458][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.1.380 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 79.326062][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 79.336126][ T6387] Call Trace: [ 79.339405][ T6387] [ 79.342499][ T6387] dump_stack_lvl+0xf2/0x150 [ 79.347209][ T6387] dump_stack+0x15/0x20 [ 79.351369][ T6387] should_fail_ex+0x229/0x230 [ 79.356050][ T6387] should_fail+0xb/0x10 [ 79.360216][ T6387] should_fail_usercopy+0x1a/0x20 [ 79.365364][ T6387] _copy_from_user+0x1e/0xd0 [ 79.369979][ T6387] do_fcntl+0x5f6/0xe20 [ 79.374136][ T6387] ? selinux_file_fcntl+0x1ca/0x1e0 [ 79.379400][ T6387] __se_sys_fcntl+0xc4/0x190 [ 79.384000][ T6387] __x64_sys_fcntl+0x43/0x50 [ 79.388653][ T6387] x64_sys_call+0x209e/0x2d60 [ 79.393377][ T6387] do_syscall_64+0xc9/0x1c0 [ 79.397882][ T6387] ? clear_bhb_loop+0x55/0xb0 [ 79.402553][ T6387] ? clear_bhb_loop+0x55/0xb0 [ 79.407475][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.413388][ T6387] RIP: 0033:0x7eff105079f9 [ 79.417781][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.437492][ T6387] RSP: 002b:00007eff0f187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 79.445943][ T6387] RAX: ffffffffffffffda RBX: 00007eff10695f80 RCX: 00007eff105079f9 [ 79.453906][ T6387] RDX: 0000000020000140 RSI: 0000000000000007 RDI: 0000000000000003 [ 79.461898][ T6387] RBP: 00007eff0f187090 R08: 0000000000000000 R09: 0000000000000000 [ 79.469901][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.477862][ T6387] R13: 0000000000000000 R14: 00007eff10695f80 R15: 00007ffe1ff0b6e8 [ 79.485820][ T6387] [ 79.503558][ T6140] veth0_macvtap: entered promiscuous mode [ 79.522353][ T6396] loop2: detected capacity change from 0 to 1024 [ 79.530111][ T6140] veth1_macvtap: entered promiscuous mode [ 79.545213][ T6396] EXT4-fs: Ignoring removed oldalloc option [ 79.560907][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.571476][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.581382][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.591841][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.597958][ T6398] Invalid logical block size (2) [ 79.601648][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.601662][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.603301][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.632619][ T6396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.638776][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.657779][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.661013][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 79.661026][ T29] audit: type=1400 audit(1723416513.691:484): avc: denied { setopt } for pid=6402 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.667602][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.667617][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.667631][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.667642][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.669093][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.752787][ T6140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761552][ T6140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.766593][ T6396] EXT4-fs (loop2): shut down requested (0) [ 79.770272][ T6140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784876][ T6140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807605][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.828129][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.844248][ T6226] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.857226][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.864294][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.881901][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.889035][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.938902][ T6413] 9pnet_fd: Insufficient options for proto=fd [ 79.961966][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.975999][ T29] audit: type=1400 audit(1723416514.011:485): avc: denied { getopt } for pid=6408 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.019511][ T29] audit: type=1326 audit(1723416514.051:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7905c679f9 code=0x0 [ 80.063700][ T6425] loop0: detected capacity change from 0 to 512 [ 80.075521][ T6226] veth0_vlan: entered promiscuous mode [ 80.083430][ T6425] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.089488][ T6226] veth1_vlan: entered promiscuous mode [ 80.099742][ T6425] EXT4-fs (loop0): invalid journal inode [ 80.106324][ T6425] EXT4-fs (loop0): can't get journal size [ 80.113955][ T6226] veth0_macvtap: entered promiscuous mode [ 80.115541][ T6425] EXT4-fs (loop0): 1 truncate cleaned up [ 80.121505][ T6226] veth1_macvtap: entered promiscuous mode [ 80.139501][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.150010][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.159847][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.170346][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.173033][ T6425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.180170][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.202895][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.212784][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.223227][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.231495][ T29] audit: type=1400 audit(1723416514.251:487): avc: denied { write } for pid=6424 comm="syz.0.397" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.236075][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.265912][ T6140] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.275119][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.285601][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.295412][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.305895][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.315758][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.326246][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.336057][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.346572][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.367545][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.377249][ T6226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.385983][ T6226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.395000][ T6226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.403683][ T6226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.419903][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 80.425470][ T29] audit: type=1400 audit(1723416514.451:488): avc: denied { connect } for pid=6432 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.448400][ T29] audit: type=1400 audit(1723416514.451:489): avc: denied { setattr } for pid=6432 comm="syz.0.399" name="CAN_RAW" dev="sockfs" ino=19560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.471009][ T29] audit: type=1400 audit(1723416514.451:490): avc: denied { setopt } for pid=6432 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.490298][ T29] audit: type=1400 audit(1723416514.451:491): avc: denied { accept } for pid=6432 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.931002][ T6442] loop2: detected capacity change from 0 to 512 [ 80.941776][ T6442] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 80.950725][ T6444] Invalid logical block size (2) [ 80.958679][ T6442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 80.970898][ T6442] System zones: 1-12 [ 80.975884][ T6442] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.977620][ T6447] loop3: detected capacity change from 0 to 1024 [ 80.982374][ T6442] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.400: Inode bitmap for bg 0 marked uninitialized [ 80.989791][ T6447] EXT4-fs: Ignoring removed oldalloc option [ 81.008620][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.026322][ T6447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.028496][ T29] audit: type=1400 audit(1723416515.061:492): avc: denied { remount } for pid=6441 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.054466][ T6447] EXT4-fs (loop3): shut down requested (0) [ 81.063728][ T6442] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.400: Abort forced by user [ 81.075788][ T6442] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 81.086626][ T29] audit: type=1400 audit(1723416515.131:493): avc: denied { view } for pid=6441 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.106396][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.142343][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.165134][ T6456] netlink: 324 bytes leftover after parsing attributes in process `syz.2.405'. [ 81.186166][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 81.314091][ T6471] Invalid logical block size (2) [ 81.552299][ T6481] loop2: detected capacity change from 0 to 2048 [ 81.568622][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.582447][ T6481] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.598616][ T6481] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 81.610834][ T6481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.610834][ T6481] [ 81.620534][ T6481] EXT4-fs (loop2): Total free blocks count 0 [ 81.626706][ T6481] EXT4-fs (loop2): Free/Dirty block details [ 81.632625][ T6481] EXT4-fs (loop2): free_blocks=2415919104 [ 81.638466][ T6481] EXT4-fs (loop2): dirty_blocks=32 [ 81.643581][ T6481] EXT4-fs (loop2): Block reservation details [ 81.649581][ T6481] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 81.663189][ T6480] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 81.723553][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 81.745820][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 81.789078][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.799198][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.804452][ T6499] Invalid logical block size (2) [ 81.809085][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.829083][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.839090][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.849128][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.859060][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.869508][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.889072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.899095][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.909067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.919339][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.929373][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.949072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.952666][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 81.959069][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.979067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.989076][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 81.999082][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.009073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.019070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.029130][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.039066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.049074][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.059075][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.069073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.079078][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.089075][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.099907][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.109072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.119070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.129068][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.139072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.149067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.159070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.169066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.179070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.189070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.199095][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.209067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.219073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.229072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.239072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.254219][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.269071][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.279073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.289065][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.299068][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.309072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.319067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.329066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.339073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.349067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.359073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.369093][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.379070][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.389259][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.399079][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.409071][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.429069][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.433351][ T6520] netlink: 52 bytes leftover after parsing attributes in process `syz.2.432'. [ 82.449086][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.459449][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.462352][ T6520] loop2: detected capacity change from 0 to 1024 [ 82.479073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.485916][ T6520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.493615][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.509072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.515499][ T6520] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 82.519073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.524173][ T6520] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.534547][ T6526] loop0: detected capacity change from 0 to 512 [ 82.549069][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.556193][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.564770][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.575774][ T6526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.582129][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.584370][ T6526] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.607824][ T6530] Invalid logical block size (2) [ 82.622585][ T6522] EXT4-fs: Cannot change quota options when quota turned on [ 82.629068][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.638026][ T6522] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #18: comm syz.0.433: corrupted inode contents [ 82.657646][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.658782][ T6522] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #18: comm syz.0.433: mark_inode_dirty error [ 82.677809][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.682742][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.691293][ T6522] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #18: comm syz.0.433: corrupted inode contents [ 82.699087][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.713551][ T6522] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #18: comm syz.0.433: mark_inode_dirty error [ 82.733110][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.735386][ T6522] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #18: comm syz.0.433: mark inode dirty (error -117) [ 82.755883][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.759083][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.767073][ T6522] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 82.772599][ T6541] loop1: detected capacity change from 0 to 1024 [ 82.779067][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.792039][ T6541] EXT4-fs: Ignoring removed oldalloc option [ 82.799715][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.802543][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 82.813336][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.823718][ T6541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.840693][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.849075][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.856486][ T6541] EXT4-fs (loop1): shut down requested (0) [ 82.859078][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.872132][ T6140] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.879734][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.889512][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.891617][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.899195][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.919066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.929074][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.949126][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.959459][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.989075][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 82.999065][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.019066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.029917][ T6555] loop0: detected capacity change from 0 to 1024 [ 83.039065][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.054265][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.064910][ T6555] EXT4-fs: Invalid want_extra_isize 9 [ 83.079115][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.089074][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.109138][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.129069][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.149066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.169128][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.189062][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.199062][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.219072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.234289][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.249081][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.269064][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.279060][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.299104][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.319116][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.339106][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.359079][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.379066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.389224][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.399089][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.409095][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.419071][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.429074][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.439068][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.449078][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.459071][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.469082][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.495796][ T6560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.445'. [ 83.499066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.508682][ T6560] loop1: detected capacity change from 0 to 1024 [ 83.529075][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.536440][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.539072][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.565168][ T6560] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 83.565186][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.572729][ T6560] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.589712][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.609094][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.617697][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.637485][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.639064][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.659062][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.668691][ T6565] Invalid logical block size (2) [ 83.684416][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.689144][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.709794][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.749089][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.780202][ T6573] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 83.799241][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.818222][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 83.819843][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.859073][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.879134][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.899066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.909193][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.919808][ T6588] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 83.939077][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.942637][ T35] IPVS: starting estimator thread 0... [ 83.956094][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.959163][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.969060][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 83.987551][ T3271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.999077][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.009059][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.039065][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.044330][ T6591] IPVS: using max 2832 ests per chain, 141600 per kthread [ 84.069066][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.078324][ T3271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.079068][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.119074][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.130197][ T3271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.139088][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.163701][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 84.184853][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.189119][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.209065][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.220551][ T3271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.241578][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 84.258963][ T6597] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 84.266986][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.269133][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.289071][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.299115][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.309150][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.334241][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.340554][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.409064][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.419025][ T3271] bridge_slave_1: left allmulticast mode [ 84.432985][ T3271] bridge_slave_1: left promiscuous mode [ 84.439104][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.456933][ T6608] Invalid logical block size (2) [ 84.489636][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.498778][ T3271] bridge_slave_0: left allmulticast mode [ 84.512315][ T3271] bridge_slave_0: left promiscuous mode [ 84.518079][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.525513][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.529923][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.558716][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.592652][ T6610] loop0: detected capacity change from 0 to 164 [ 84.622869][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.626847][ T6610] iso9660: Bad value for 'gid' [ 84.639587][ T6610] iso9660: Bad value for 'gid' [ 84.644946][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.649129][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.669782][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.699349][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.710960][ T3271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.719349][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.729099][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.741728][ T3271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.759776][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.763312][ T3271] bond0 (unregistering): Released all slaves [ 84.778956][ T6493] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.781043][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.795735][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.803822][ T6575] bridge_slave_0: entered allmulticast mode [ 84.841015][ T6575] bridge_slave_0: entered promiscuous mode [ 84.875431][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 84.886246][ T3271] hsr_slave_0: left promiscuous mode [ 84.889908][ T6618] loop3: detected capacity change from 0 to 256 [ 84.898552][ T3271] hsr_slave_1: left promiscuous mode [ 84.906136][ T3271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.908844][ T6618] loop3: detected capacity change from 0 to 128 [ 84.913578][ T3271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.946082][ T6618] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.961129][ T6618] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.976183][ T3271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.983647][ T3271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.024641][ T3271] veth1_macvtap: left promiscuous mode [ 85.030151][ T3271] veth0_macvtap: left promiscuous mode [ 85.035834][ T3271] veth1_vlan: left promiscuous mode [ 85.041088][ T3271] veth0_vlan: left promiscuous mode [ 85.179107][ T3271] team0 (unregistering): Port device team_slave_1 removed [ 85.190317][ T3271] team0 (unregistering): Port device team_slave_0 removed [ 85.231545][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.238734][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.248074][ T6643] loop1: detected capacity change from 0 to 1024 [ 85.254815][ T6575] bridge_slave_1: entered allmulticast mode [ 85.262394][ T6575] bridge_slave_1: entered promiscuous mode [ 85.271698][ T6642] netlink: 52 bytes leftover after parsing attributes in process `syz.1.465'. [ 85.283781][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.308435][ T6226] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.313299][ T6642] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 85.367282][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.386043][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.413535][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.427701][ T6653] Invalid logical block size (2) [ 85.470225][ T6657] loop1: detected capacity change from 0 to 128 [ 85.477362][ T6575] team0: Port device team_slave_0 added [ 85.483716][ T6575] team0: Port device team_slave_1 added [ 85.485592][ T6661] loop3: detected capacity change from 0 to 512 [ 85.490856][ T6657] vfat: Unknown parameter '' [ 85.508254][ T6661] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.469: corrupted in-inode xattr: invalid ea_ino [ 85.525364][ T6661] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.469: couldn't read orphan inode 15 (err -117) [ 85.565406][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.572388][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.598474][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.609956][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.636403][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.643364][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.643387][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.696916][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 85.696929][ T29] audit: type=1400 audit(1723416519.731:507): avc: denied { checkpoint_restore } for pid=6656 comm="syz.1.467" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.740366][ T6575] hsr_slave_0: entered promiscuous mode [ 85.748980][ T6575] hsr_slave_1: entered promiscuous mode [ 85.937541][ T6689] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.469: deleted inode referenced: 15 [ 86.013713][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.142317][ T6575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.153303][ T6575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.167027][ T6575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.194670][ T6575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.279118][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.308333][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.330085][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.337245][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.366461][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.373543][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.455542][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.620795][ T6575] veth0_vlan: entered promiscuous mode [ 86.640187][ T6575] veth1_vlan: entered promiscuous mode [ 86.665572][ T6575] veth0_macvtap: entered promiscuous mode [ 86.682207][ T6575] veth1_macvtap: entered promiscuous mode [ 86.700187][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.710824][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.720689][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.731318][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.741191][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.751964][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.761858][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.772317][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.794746][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.807464][ T6629] loop2: detected capacity change from 0 to 512 [ 86.813782][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.818324][ T29] audit: type=1400 audit(1723416520.841:508): avc: denied { mounton } for pid=6623 comm="syz.2.464" path="/45/file1" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.824411][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.852346][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 86.856586][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.875965][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.885928][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.896514][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.906604][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.917052][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.929678][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.970378][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.475'. [ 86.980898][ T6775] FAULT_INJECTION: forcing a failure. [ 86.980898][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 86.981491][ T6575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.993997][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.1.475 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 87.002679][ T6575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.013203][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.013216][ T6775] Call Trace: [ 87.013224][ T6775] [ 87.013232][ T6775] dump_stack_lvl+0xf2/0x150 [ 87.021886][ T6575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.021920][ T6575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.031961][ T6775] dump_stack+0x15/0x20 [ 87.064419][ T6775] should_fail_ex+0x229/0x230 [ 87.069129][ T6775] ? __alloc_skb+0x10b/0x310 [ 87.073719][ T6775] should_failslab+0x8f/0xb0 [ 87.078531][ T6775] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 87.084394][ T6775] ? __rtnl_unlock+0x99/0xb0 [ 87.089168][ T6775] __alloc_skb+0x10b/0x310 [ 87.093658][ T6775] netlink_ack+0xef/0x4f0 [ 87.098075][ T6775] ? __dev_queue_xmit+0x161/0x1fe0 [ 87.103198][ T6775] netlink_rcv_skb+0x19c/0x230 [ 87.107964][ T6775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.113595][ T6775] rtnetlink_rcv+0x1c/0x30 [ 87.118025][ T6775] netlink_unicast+0x593/0x670 [ 87.122843][ T6775] netlink_sendmsg+0x5cc/0x6e0 [ 87.127678][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.133000][ T6775] __sock_sendmsg+0x140/0x180 [ 87.137699][ T6775] ____sys_sendmsg+0x312/0x410 [ 87.142612][ T6775] __sys_sendmsg+0x1e9/0x280 [ 87.147215][ T6775] __x64_sys_sendmsg+0x46/0x50 [ 87.152008][ T6775] x64_sys_call+0x2689/0x2d60 [ 87.156685][ T6775] do_syscall_64+0xc9/0x1c0 [ 87.161285][ T6775] ? clear_bhb_loop+0x55/0xb0 [ 87.165961][ T6775] ? clear_bhb_loop+0x55/0xb0 [ 87.170642][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.176529][ T6775] RIP: 0033:0x7eff105079f9 [ 87.180979][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.200704][ T6775] RSP: 002b:00007eff0f187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.209108][ T6775] RAX: ffffffffffffffda RBX: 00007eff10695f80 RCX: 00007eff105079f9 [ 87.217083][ T6775] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 87.225045][ T6775] RBP: 00007eff0f187090 R08: 0000000000000000 R09: 0000000000000000 [ 87.233004][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.241328][ T6775] R13: 0000000000000000 R14: 00007eff10695f80 R15: 00007ffe1ff0b6e8 [ 87.249360][ T6775] [ 87.257591][ T6779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.477'. [ 87.291494][ T6779] loop2: detected capacity change from 0 to 1024 [ 87.310933][ T6793] Invalid logical block size (2) [ 87.329485][ T6779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.358611][ T6779] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.383025][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.416589][ T6811] loop1: detected capacity change from 0 to 512 [ 87.662311][ T6835] loop1: detected capacity change from 0 to 8192 [ 87.678224][ T6835] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.450834][ T6861] loop3: detected capacity change from 0 to 1024 [ 88.461740][ T6861] EXT4-fs: Ignoring removed oldalloc option [ 88.478430][ T29] audit: type=1400 audit(1723416522.515:509): avc: denied { mount } for pid=6862 comm="syz.4.494" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.509141][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.536599][ T6861] EXT4-fs (loop3): shut down requested (0) [ 88.551455][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.583901][ T6871] loop3: detected capacity change from 0 to 1024 [ 88.599674][ T6871] EXT4-fs: Ignoring removed oldalloc option [ 88.622418][ T29] audit: type=1326 audit(1723416522.655:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.1.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff105079f9 code=0x0 [ 88.647474][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.661666][ T6871] EXT4-fs (loop3): shut down requested (0) [ 88.675987][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.721168][ T6885] Invalid logical block size (2) [ 88.815711][ T6896] loop4: detected capacity change from 0 to 1024 [ 88.826565][ T6896] EXT4-fs: Ignoring removed oldalloc option [ 88.845590][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.861599][ T6896] EXT4-fs (loop4): shut down requested (0) [ 88.873747][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.258751][ T6907] loop1: detected capacity change from 0 to 8192 [ 89.266163][ T6907] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.552343][ T6911] loop3: detected capacity change from 0 to 1024 [ 89.575231][ T6911] EXT4-fs: Ignoring removed oldalloc option [ 89.616665][ T6911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.647650][ T6911] EXT4-fs (loop3): shut down requested (0) [ 89.682541][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.819422][ T29] audit: type=1326 audit(1723416523.855:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.3.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71ad0579f9 code=0x0 [ 89.871941][ T6919] \b}Y4`Ҙ: renamed from lo (while UP) [ 89.937314][ T29] audit: type=1400 audit(1723416523.975:512): avc: denied { ioctl } for pid=6918 comm="syz.4.511" path="socket:[20862]" dev="sockfs" ino=20862 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.938831][ T6923] loop3: detected capacity change from 0 to 1024 [ 89.968852][ T6923] EXT4-fs: Ignoring removed oldalloc option [ 89.985761][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.034435][ T6923] EXT4-fs (loop3): shut down requested (0) [ 90.047829][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.056983][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.065988][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.074845][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.083771][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.093553][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.103255][ T6226] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 90.158248][ T6930] loop1: detected capacity change from 0 to 1024 [ 90.165065][ T6930] EXT4-fs: Ignoring removed oldalloc option [ 90.178567][ T6930] EXT4-fs (loop1): shut down requested (0) [ 90.350159][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.397802][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.448762][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.500672][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.529528][ T6943] chnl_net:caif_netlink_parms(): no params data found [ 90.562685][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.569829][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.577451][ T6943] bridge_slave_0: entered allmulticast mode [ 90.584071][ T6943] bridge_slave_0: entered promiscuous mode [ 90.593230][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.600325][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.607595][ T6943] bridge_slave_1: entered allmulticast mode [ 90.614018][ T6943] bridge_slave_1: entered promiscuous mode [ 90.640459][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.651011][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.680250][ T50] bridge_slave_1: left allmulticast mode [ 90.686036][ T50] bridge_slave_1: left promiscuous mode [ 90.691846][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.701419][ T50] bridge_slave_0: left allmulticast mode [ 90.707133][ T50] bridge_slave_0: left promiscuous mode [ 90.712820][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.743781][ T29] audit: type=1326 audit(1723416524.775:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d39f779f9 code=0x0 [ 90.826811][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.843204][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.854140][ T50] bond0 (unregistering): Released all slaves [ 90.860408][ T29] audit: type=1326 audit(1723416524.895:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.4.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d39f779f9 code=0x0 [ 90.887061][ T6943] team0: Port device team_slave_0 added [ 90.916045][ T6943] team0: Port device team_slave_1 added [ 90.943876][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.950881][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.976785][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.992262][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.999277][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.025209][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.056629][ T50] hsr_slave_0: left promiscuous mode [ 91.062370][ T50] hsr_slave_1: left promiscuous mode [ 91.068975][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.076471][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.084492][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.091933][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.101535][ T50] veth1_macvtap: left promiscuous mode [ 91.107069][ T50] veth0_macvtap: left promiscuous mode [ 91.112582][ T50] veth1_vlan: left promiscuous mode [ 91.117918][ T50] veth0_vlan: left promiscuous mode [ 91.231021][ T50] team0 (unregistering): Port device team_slave_1 removed [ 91.241839][ T50] team0 (unregistering): Port device team_slave_0 removed [ 91.287279][ T6943] hsr_slave_0: entered promiscuous mode [ 91.293490][ T6943] hsr_slave_1: entered promiscuous mode [ 91.299676][ T6943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.312089][ T6943] Cannot create hsr debugfs directory [ 91.488161][ T7003] loop2: detected capacity change from 0 to 1024 [ 91.494984][ T7003] EXT4-fs: Ignoring removed orlov option [ 91.501012][ T7003] /dev/loop2: Can't open blockdev [ 91.528213][ T29] audit: type=1400 audit(1723416525.565:515): avc: denied { execute } for pid=7002 comm="syz.2.526" path="/51/cgroup.stat" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.618445][ T7017] loop2: detected capacity change from 0 to 1024 [ 91.625618][ T7017] EXT4-fs: Ignoring removed oldalloc option [ 91.646813][ T7023] loop1: detected capacity change from 0 to 128 [ 91.664719][ T7017] EXT4-fs (loop2): shut down requested (0) [ 91.671302][ T7023] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.724118][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.530'. [ 91.737256][ T7023] (unnamed net_device) (uninitialized): option ad_select: invalid value (46) [ 91.769033][ T7041] Invalid logical block size (2) [ 91.778085][ T6943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.801726][ T6943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.813340][ T6943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.831744][ T6943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.857812][ T7047] loop2: detected capacity change from 0 to 2048 [ 91.898948][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.910148][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.932331][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.939439][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.950575][ T7059] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.960628][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.972404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.979883][ T7059] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 91.988587][ T6943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.992332][ T7059] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.992332][ T7059] [ 92.002560][ T6943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.022719][ T7059] EXT4-fs (loop2): Total free blocks count 0 [ 92.029077][ T7059] EXT4-fs (loop2): Free/Dirty block details [ 92.035137][ T7059] EXT4-fs (loop2): free_blocks=2415919104 [ 92.040855][ T7059] EXT4-fs (loop2): dirty_blocks=16 [ 92.046000][ T7059] EXT4-fs (loop2): Block reservation details [ 92.052062][ T7059] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 92.098032][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 92.110336][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.110336][ T11] [ 92.141954][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.295517][ T6943] veth0_vlan: entered promiscuous mode [ 92.299411][ T7096] loop2: detected capacity change from 0 to 1024 [ 92.310089][ T6943] veth1_vlan: entered promiscuous mode [ 92.321754][ T7096] EXT4-fs: Ignoring removed oldalloc option [ 92.341350][ T6943] veth0_macvtap: entered promiscuous mode [ 92.356469][ T6943] veth1_macvtap: entered promiscuous mode [ 92.376002][ T7096] EXT4-fs (loop2): shut down requested (0) [ 92.388932][ T7112] Invalid logical block size (2) [ 92.395645][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.406285][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.416275][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.427627][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.438666][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.449217][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459157][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.469623][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.480672][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.493252][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.503741][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.513721][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.524162][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.533986][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.544477][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.554408][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.557693][ T29] audit: type=1400 audit(1723416526.600:516): avc: denied { map } for pid=7117 comm="syz.1.546" path="socket:[21905]" dev="sockfs" ino=21905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.564832][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.567679][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.588131][ T29] audit: type=1400 audit(1723416526.600:517): avc: denied { read } for pid=7117 comm="syz.1.546" path="socket:[21905]" dev="sockfs" ino=21905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.599436][ T6943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637094][ T6943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.645897][ T6943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.654701][ T6943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.665199][ T7120] loop1: detected capacity change from 0 to 128 [ 92.665607][ T7118] netlink: 'syz.1.546': attribute type 12 has an invalid length. [ 92.674498][ T7120] vfat: Unknown parameter '' [ 92.679365][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.546'. [ 92.727420][ T7124] FAULT_INJECTION: forcing a failure. [ 92.727420][ T7124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.732054][ T7122] loop4: detected capacity change from 0 to 2048 [ 92.740692][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.2.547 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 92.740720][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 92.740730][ T7124] Call Trace: [ 92.740736][ T7124] [ 92.740743][ T7124] dump_stack_lvl+0xf2/0x150 [ 92.740777][ T7124] dump_stack+0x15/0x20 [ 92.740809][ T7124] should_fail_ex+0x229/0x230 [ 92.787498][ T7124] should_fail_alloc_page+0xfd/0x110 [ 92.792836][ T7124] __alloc_pages_noprof+0x109/0x360 [ 92.798070][ T7124] ___kmalloc_large_node+0x7a/0x120 [ 92.803258][ T7124] __kmalloc_large_noprof+0x1f/0xb0 [ 92.808488][ T7124] bpf_check+0x78/0xa200 [ 92.812749][ T7124] ? pcpu_block_update_hint_alloc+0x1f4/0x6a0 [ 92.818831][ T7124] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 92.824892][ T7124] ? cgroup_rstat_updated+0x99/0x550 [ 92.830240][ T7124] ? pcpu_chunk_relocate+0x183/0x280 [ 92.835554][ T7124] ? __mod_memcg_state+0x10d/0x200 [ 92.840652][ T7124] ? __rcu_read_unlock+0x4e/0x70 [ 92.845581][ T7124] ? bpf_prog_alloc+0x59/0x150 [ 92.850371][ T7124] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 92.855608][ T7124] ? should_fail_ex+0xd7/0x230 [ 92.860368][ T7124] ? selinux_bpf_prog_load+0x35/0xe0 [ 92.865684][ T7124] ? should_failslab+0x8f/0xb0 [ 92.870440][ T7124] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 92.876008][ T7124] ? selinux_bpf_prog_load+0xbb/0xe0 [ 92.881289][ T7124] bpf_prog_load+0xed4/0x1060 [ 92.885970][ T7124] __sys_bpf+0x463/0x7a0 [ 92.890233][ T7124] __x64_sys_bpf+0x43/0x50 [ 92.894708][ T7124] x64_sys_call+0x2625/0x2d60 [ 92.899444][ T7124] do_syscall_64+0xc9/0x1c0 [ 92.903946][ T7124] ? clear_bhb_loop+0x55/0xb0 [ 92.908617][ T7124] ? clear_bhb_loop+0x55/0xb0 [ 92.913335][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.919550][ T7124] RIP: 0033:0x7f7905c679f9 [ 92.923958][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.943569][ T7124] RSP: 002b:00007f79048e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.951972][ T7124] RAX: ffffffffffffffda RBX: 00007f7905df5f80 RCX: 00007f7905c679f9 [ 92.959998][ T7124] RDX: 0000000000000090 RSI: 0000000020000500 RDI: 0000000000000005 [ 92.967975][ T7124] RBP: 00007f79048e7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.975977][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.983986][ T7124] R13: 0000000000000000 R14: 00007f7905df5f80 R15: 00007ffdc45fdaf8 [ 92.991959][ T7124] [ 93.049472][ T7131] loop1: detected capacity change from 0 to 2048 [ 93.078670][ T7122] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.101293][ T7122] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 93.105873][ T7138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.551'. [ 93.113619][ T7122] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.113619][ T7122] [ 93.132342][ T7122] EXT4-fs (loop4): Total free blocks count 0 [ 93.138448][ T7122] EXT4-fs (loop4): Free/Dirty block details [ 93.144448][ T7122] EXT4-fs (loop4): free_blocks=2415919104 [ 93.150192][ T7122] EXT4-fs (loop4): dirty_blocks=16 [ 93.155361][ T7122] EXT4-fs (loop4): Block reservation details [ 93.161352][ T7122] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 93.169354][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'. [ 93.178897][ T7141] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 93.182548][ T7143] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 93.191231][ T7141] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.191231][ T7141] [ 93.225305][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7131 comm=syz.1.550 [ 93.237899][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7131 comm=syz.1.550 [ 93.261902][ T7145] FAULT_INJECTION: forcing a failure. [ 93.261902][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 93.274641][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.3.554 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 93.285300][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.295443][ T7145] Call Trace: [ 93.298710][ T7145] [ 93.301651][ T7145] dump_stack_lvl+0xf2/0x150 [ 93.306356][ T7145] dump_stack+0x15/0x20 [ 93.310546][ T7145] should_fail_ex+0x229/0x230 [ 93.315227][ T7145] ? anon_vma_fork+0x12c/0x2d0 [ 93.320051][ T7145] should_failslab+0x8f/0xb0 [ 93.324650][ T7145] kmem_cache_alloc_noprof+0x4c/0x290 [ 93.330034][ T7145] anon_vma_fork+0x12c/0x2d0 [ 93.334665][ T7145] copy_mm+0x680/0x10e0 [ 93.338959][ T7145] copy_process+0xee1/0x1f90 [ 93.343583][ T7145] kernel_clone+0x167/0x5e0 [ 93.348077][ T7145] __se_sys_clone3+0x1b5/0x1f0 [ 93.352837][ T7145] __x64_sys_clone3+0x31/0x40 [ 93.357530][ T7145] x64_sys_call+0x287d/0x2d60 [ 93.362201][ T7145] do_syscall_64+0xc9/0x1c0 [ 93.366708][ T7145] ? clear_bhb_loop+0x55/0xb0 [ 93.371391][ T7145] ? clear_bhb_loop+0x55/0xb0 [ 93.376085][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.382011][ T7145] RIP: 0033:0x7f7b08c379f9 [ 93.386414][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.406011][ T7145] RSP: 002b:00007f7b078b6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 93.414415][ T7145] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7b08c379f9 [ 93.422379][ T7145] RDX: 00007f7b078b6f20 RSI: 0000000000000058 RDI: 00007f7b078b6f20 [ 93.430412][ T7145] RBP: 00007f7b078b7090 R08: 0000000000000000 R09: 0000000000000058 [ 93.438370][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.446370][ T7145] R13: 0000000000000000 R14: 00007f7b08dc5f80 R15: 00007ffe17f19e08 [ 93.454344][ T7145] [ 93.463716][ T7147] Invalid logical block size (2) [ 93.486787][ T7150] loop4: detected capacity change from 0 to 1024 [ 93.493468][ T7150] EXT4-fs: Ignoring removed oldalloc option [ 93.524575][ T7150] EXT4-fs (loop4): shut down requested (0) [ 93.531399][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.560'. [ 93.575529][ T7164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.563'. [ 93.626898][ T7174] loop1: detected capacity change from 0 to 2048 [ 93.650554][ T7170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7170 comm=syz.4.565 [ 93.679977][ T7170] netlink: 'syz.4.565': attribute type 9 has an invalid length. [ 93.695097][ T7180] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.715581][ T7170] bond0: entered promiscuous mode [ 93.720788][ T7170] bond_slave_0: entered promiscuous mode [ 93.726576][ T7170] bond_slave_1: entered promiscuous mode [ 93.739794][ T7170] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.753138][ T7180] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 93.765540][ T7180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.765540][ T7180] [ 93.775189][ T7180] EXT4-fs (loop1): Total free blocks count 0 [ 93.781258][ T7180] EXT4-fs (loop1): Free/Dirty block details [ 93.787208][ T7180] EXT4-fs (loop1): free_blocks=2415919104 [ 93.792921][ T7180] EXT4-fs (loop1): dirty_blocks=16 [ 93.798059][ T7180] EXT4-fs (loop1): Block reservation details [ 93.804126][ T7180] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 93.814088][ T7170] bond0: left promiscuous mode [ 93.818903][ T7170] bond_slave_0: left promiscuous mode [ 93.824481][ T7170] bond_slave_1: left promiscuous mode [ 93.846289][ T7174] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 93.858505][ T7174] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.858505][ T7174] [ 93.905633][ T7184] FAULT_INJECTION: forcing a failure. [ 93.905633][ T7184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.918796][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.1.568 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 93.929379][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.939503][ T7184] Call Trace: [ 93.942775][ T7184] [ 93.945700][ T7184] dump_stack_lvl+0xf2/0x150 [ 93.950298][ T7184] dump_stack+0x15/0x20 [ 93.954461][ T7184] should_fail_ex+0x229/0x230 [ 93.959216][ T7184] should_fail+0xb/0x10 [ 93.963441][ T7184] should_fail_usercopy+0x1a/0x20 [ 93.967741][ T7187] Invalid logical block size (2) [ 93.968543][ T7184] _copy_from_iter+0xd3/0xb00 [ 93.968574][ T7184] ? kmalloc_reserve+0x16e/0x190 [ 93.968592][ T7184] ? __build_skb_around+0x196/0x1f0 [ 93.988301][ T7184] ? __alloc_skb+0x21f/0x310 [ 93.992933][ T7184] ? __virt_addr_valid+0x1ed/0x250 [ 93.998078][ T7184] ? __check_object_size+0x35b/0x510 [ 94.003446][ T7184] netlink_sendmsg+0x460/0x6e0 [ 94.008227][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.013579][ T7184] __sock_sendmsg+0x140/0x180 [ 94.018267][ T7184] ____sys_sendmsg+0x312/0x410 [ 94.023041][ T7184] __sys_sendmsg+0x1e9/0x280 [ 94.027718][ T7184] __x64_sys_sendmsg+0x46/0x50 [ 94.032573][ T7184] x64_sys_call+0x2689/0x2d60 [ 94.037264][ T7184] do_syscall_64+0xc9/0x1c0 [ 94.041775][ T7184] ? clear_bhb_loop+0x55/0xb0 [ 94.046467][ T7184] ? clear_bhb_loop+0x55/0xb0 [ 94.051176][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.057271][ T7184] RIP: 0033:0x7eff105079f9 [ 94.061604][ T7193] loop2: detected capacity change from 0 to 1024 [ 94.061670][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.072137][ T7193] EXT4-fs: Ignoring removed oldalloc option [ 94.087680][ T7184] RSP: 002b:00007eff0f187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.087719][ T7184] RAX: ffffffffffffffda RBX: 00007eff10695f80 RCX: 00007eff105079f9 [ 94.087731][ T7184] RDX: 0000000000000004 RSI: 00000000200017c0 RDI: 0000000000000003 [ 94.087742][ T7184] RBP: 00007eff0f187090 R08: 0000000000000000 R09: 0000000000000000 [ 94.087753][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.087764][ T7184] R13: 0000000000000000 R14: 00007eff10695f80 R15: 00007ffe1ff0b6e8 [ 94.087784][ T7184] [ 94.182007][ T7193] EXT4-fs (loop2): shut down requested (0) [ 94.245506][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.578'. [ 94.272973][ T7206] loop4: detected capacity change from 0 to 8192 [ 94.277709][ T7214] loop2: detected capacity change from 0 to 2048 [ 94.331063][ T7214] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.373782][ T7214] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 94.386187][ T7214] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.386187][ T7214] [ 94.395851][ T7214] EXT4-fs (loop2): Total free blocks count 0 [ 94.401854][ T7214] EXT4-fs (loop2): Free/Dirty block details [ 94.407786][ T7214] EXT4-fs (loop2): free_blocks=2415919104 [ 94.413640][ T7214] EXT4-fs (loop2): dirty_blocks=16 [ 94.418824][ T7214] EXT4-fs (loop2): Block reservation details [ 94.424958][ T7214] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 94.433252][ T7222] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.445542][ T7222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.445542][ T7222] [ 94.574802][ T7232] Invalid logical block size (2) [ 94.682309][ T7240] 9pnet_fd: Insufficient options for proto=fd [ 94.812798][ T7252] loop4: detected capacity change from 0 to 256 [ 94.837929][ T7252] FAT-fs (loop4): Directory bread(block 64) failed [ 94.844664][ T7252] FAT-fs (loop4): Directory bread(block 65) failed [ 94.851541][ T7252] FAT-fs (loop4): Directory bread(block 66) failed [ 94.861514][ T7252] FAT-fs (loop4): Directory bread(block 67) failed [ 94.876821][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.887184][ T7252] FAT-fs (loop4): Directory bread(block 68) failed [ 94.887207][ T7252] FAT-fs (loop4): Directory bread(block 69) failed [ 94.887307][ T7252] FAT-fs (loop4): Directory bread(block 70) failed [ 94.911704][ T7254] loop2: detected capacity change from 0 to 1024 [ 94.918746][ T7254] EXT4-fs: Ignoring removed oldalloc option [ 94.941441][ T7252] FAT-fs (loop4): Directory bread(block 71) failed [ 94.949727][ T7252] FAT-fs (loop4): Directory bread(block 72) failed [ 94.960502][ T7254] EXT4-fs (loop2): shut down requested (0) [ 94.970116][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.975478][ T7252] FAT-fs (loop4): Directory bread(block 73) failed [ 95.035905][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.072042][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 95.169587][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.209904][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.217237][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.275957][ T7271] syz.4.587: attempt to access beyond end of device [ 95.275957][ T7271] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 95.289676][ T7271] syz.4.587: attempt to access beyond end of device [ 95.289676][ T7271] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 95.302800][ T7271] Buffer I/O error on dev loop4, logical block 442, async page read [ 95.333958][ T7238] bridge_slave_0: entered allmulticast mode [ 95.362091][ T7238] bridge_slave_0: entered promiscuous mode [ 95.458059][ T40] bridge_slave_1: left allmulticast mode [ 95.463736][ T40] bridge_slave_1: left promiscuous mode [ 95.469549][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.514127][ T40] bridge_slave_0: left allmulticast mode [ 95.519923][ T40] bridge_slave_0: left promiscuous mode [ 95.525565][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.572308][ T7273] FAULT_INJECTION: forcing a failure. [ 95.572308][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 95.584991][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.3.592 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 95.595586][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.605687][ T7273] Call Trace: [ 95.608957][ T7273] [ 95.611872][ T7273] dump_stack_lvl+0xf2/0x150 [ 95.616510][ T7273] dump_stack+0x15/0x20 [ 95.620659][ T7273] should_fail_ex+0x229/0x230 [ 95.625340][ T7273] ? skb_clone+0x154/0x1f0 [ 95.629985][ T7273] should_failslab+0x8f/0xb0 [ 95.634638][ T7273] kmem_cache_alloc_noprof+0x4c/0x290 [ 95.640028][ T7273] skb_clone+0x154/0x1f0 [ 95.644282][ T7273] __netlink_deliver_tap+0x2bd/0x4c0 [ 95.649644][ T7273] netlink_unicast+0x641/0x670 [ 95.654420][ T7273] netlink_sendmsg+0x5cc/0x6e0 [ 95.659218][ T7273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.664503][ T7273] __sock_sendmsg+0x140/0x180 [ 95.669247][ T7273] ____sys_sendmsg+0x312/0x410 [ 95.674089][ T7273] __sys_sendmsg+0x1e9/0x280 [ 95.678679][ T7273] __x64_sys_sendmsg+0x46/0x50 [ 95.683433][ T7273] x64_sys_call+0x2689/0x2d60 [ 95.688111][ T7273] do_syscall_64+0xc9/0x1c0 [ 95.692608][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 95.697330][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 95.702054][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.707952][ T7273] RIP: 0033:0x7f7b08c379f9 [ 95.712362][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.732048][ T7273] RSP: 002b:00007f7b078b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.740524][ T7273] RAX: ffffffffffffffda RBX: 00007f7b08dc5f80 RCX: 00007f7b08c379f9 [ 95.748516][ T7273] RDX: 0000000000000004 RSI: 00000000200017c0 RDI: 0000000000000003 [ 95.756523][ T7273] RBP: 00007f7b078b7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.764482][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.772441][ T7273] R13: 0000000000000000 R14: 00007f7b08dc5f80 R15: 00007ffe17f19e08 [ 95.780446][ T7273] [ 95.829384][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.850025][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.859189][ T7279] loop4: detected capacity change from 0 to 2048 [ 95.867767][ T40] bond0 (unregistering): Released all slaves [ 95.875878][ T7279] EXT4-fs mount: 23 callbacks suppressed [ 95.875892][ T7279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.894034][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.901290][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.914998][ T7238] bridge_slave_1: entered allmulticast mode [ 95.921419][ T7238] bridge_slave_1: entered promiscuous mode [ 95.943928][ T7284] Invalid logical block size (2) [ 95.949997][ T7279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.968066][ T7279] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 95.980449][ T7279] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.980449][ T7279] [ 95.990149][ T7279] EXT4-fs (loop4): Total free blocks count 0 [ 95.996212][ T7279] EXT4-fs (loop4): Free/Dirty block details [ 96.002128][ T7279] EXT4-fs (loop4): free_blocks=2415919104 [ 96.007911][ T7279] EXT4-fs (loop4): dirty_blocks=16 [ 96.013019][ T7279] EXT4-fs (loop4): Block reservation details [ 96.019033][ T7279] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 96.036807][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.053417][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 96.054232][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.073563][ T40] hsr_slave_0: left promiscuous mode [ 96.081097][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 96.100486][ T40] hsr_slave_1: left promiscuous mode [ 96.107668][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.107862][ T7303] loop2: detected capacity change from 0 to 1024 [ 96.115141][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.122789][ T7303] EXT4-fs: Ignoring removed oldalloc option [ 96.134915][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.142416][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.145391][ T7303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.163424][ T40] veth1_macvtap: left promiscuous mode [ 96.167042][ T7303] EXT4-fs (loop2): shut down requested (0) [ 96.168967][ T40] veth0_macvtap: left promiscuous mode [ 96.180212][ T40] veth1_vlan: left promiscuous mode [ 96.185566][ T40] veth0_vlan: left promiscuous mode [ 96.207501][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.226426][ T7309] nfs4: Unknown parameter 'c' [ 96.262331][ T7311] loop2: detected capacity change from 0 to 256 [ 96.270711][ T7311] loop2: detected capacity change from 0 to 128 [ 96.280049][ T7311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.294461][ T7311] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.309548][ T40] team0 (unregistering): Port device team_slave_1 removed [ 96.322059][ T40] team0 (unregistering): Port device team_slave_0 removed [ 96.330578][ T6052] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.396389][ T7238] team0: Port device team_slave_0 added [ 96.406052][ T7238] team0: Port device team_slave_1 added [ 96.442881][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.449885][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.476010][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.525736][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.532729][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.558875][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.609690][ T29] audit: type=1400 audit(1723416530.649:518): avc: denied { write } for pid=7334 comm="syz.4.605" name="net" dev="proc" ino=22182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.636508][ T7335] loop4: detected capacity change from 0 to 512 [ 96.643471][ T7335] EXT4-fs: Invalid want_extra_isize 534 [ 96.651801][ T29] audit: type=1400 audit(1723416530.669:519): avc: denied { add_name } for pid=7334 comm="syz.4.605" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.671829][ T29] audit: type=1400 audit(1723416530.669:520): avc: denied { create } for pid=7334 comm="syz.4.605" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 96.691685][ T29] audit: type=1400 audit(1723416530.669:521): avc: denied { associate } for pid=7334 comm="syz.4.605" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.743135][ T29] audit: type=1400 audit(1723416530.779:522): avc: denied { unmount } for pid=6575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.766568][ T7238] hsr_slave_0: entered promiscuous mode [ 96.780755][ T7238] hsr_slave_1: entered promiscuous mode [ 96.790439][ T7238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.801451][ T7238] Cannot create hsr debugfs directory [ 97.095044][ T7374] loop2: detected capacity change from 0 to 2048 [ 97.117038][ T7374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.133790][ T7238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.145925][ T7238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.154658][ T7238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.163885][ T7238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.203050][ T7374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.205621][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.231992][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.239618][ T7374] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 97.252006][ T7374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.252006][ T7374] [ 97.258295][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.261721][ T7374] EXT4-fs (loop2): Total free blocks count 0 [ 97.268731][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.275164][ T7374] EXT4-fs (loop2): Free/Dirty block details [ 97.284168][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.288183][ T7374] EXT4-fs (loop2): free_blocks=2415919104 [ 97.288196][ T7374] EXT4-fs (loop2): dirty_blocks=16 [ 97.288206][ T7374] EXT4-fs (loop2): Block reservation details [ 97.295331][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.301013][ T7374] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 97.322768][ T7238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.352570][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 97.409251][ T7402] loop2: detected capacity change from 0 to 1024 [ 97.416745][ T7402] EXT4-fs: Ignoring removed oldalloc option [ 97.430540][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.440630][ T7402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.458149][ T7402] EXT4-fs (loop2): shut down requested (0) [ 97.478721][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.543172][ T7238] veth0_vlan: entered promiscuous mode [ 97.555414][ T7238] veth1_vlan: entered promiscuous mode [ 97.569610][ T29] audit: type=1400 audit(1723416531.609:523): avc: denied { setopt } for pid=7429 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.603454][ T7238] veth0_macvtap: entered promiscuous mode [ 97.607461][ T7430] loop2: detected capacity change from 0 to 2048 [ 97.611548][ T7238] veth1_macvtap: entered promiscuous mode [ 97.630092][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.640782][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.650683][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.661542][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.673016][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.683468][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.693287][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.699941][ T7439] loop4: detected capacity change from 0 to 512 [ 97.703702][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.722136][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.733406][ T7430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.741130][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.756003][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.765886][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.776368][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.786560][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.797037][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.806859][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.816937][ T7439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.817283][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.849790][ T7439] EXT4-fs (loop4): 1 truncate cleaned up [ 97.854873][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.861447][ T7439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.868315][ T7238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.883482][ T7238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.892235][ T7238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.900967][ T7238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.977247][ T7464] FAULT_INJECTION: forcing a failure. [ 97.977247][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 97.989913][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.0.618 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 97.992127][ T7459] loop1: detected capacity change from 0 to 2048 [ 98.000520][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.000535][ T7464] Call Trace: [ 98.000543][ T7464] [ 98.000550][ T7464] dump_stack_lvl+0xf2/0x150 [ 98.000615][ T7464] dump_stack+0x15/0x20 [ 98.000638][ T7464] should_fail_ex+0x229/0x230 [ 98.000665][ T7464] ? shmem_initxattrs+0x1b7/0x2f0 [ 98.000683][ T7464] should_failslab+0x8f/0xb0 [ 98.000722][ T7464] __kmalloc_noprof+0xa5/0x370 [ 98.051128][ T7464] shmem_initxattrs+0x1b7/0x2f0 [ 98.055981][ T7464] security_inode_init_security+0x19d/0x290 [ 98.061965][ T7464] ? __pfx_shmem_initxattrs+0x10/0x10 [ 98.067453][ T7464] shmem_mknod+0xa8/0x180 [ 98.071806][ T7464] shmem_create+0x34/0x40 [ 98.076234][ T7464] ? __pfx_shmem_create+0x10/0x10 [ 98.081431][ T7464] path_openat+0xdbc/0x1f10 [ 98.086002][ T7464] do_filp_open+0xf7/0x200 [ 98.090417][ T7464] do_sys_openat2+0xab/0x120 [ 98.095069][ T7464] __x64_sys_creat+0x66/0x90 [ 98.099657][ T7464] x64_sys_call+0x2cbf/0x2d60 [ 98.104327][ T7464] do_syscall_64+0xc9/0x1c0 [ 98.108877][ T7464] ? clear_bhb_loop+0x55/0xb0 [ 98.113690][ T7464] ? clear_bhb_loop+0x55/0xb0 [ 98.118362][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.124248][ T7464] RIP: 0033:0x7fa2ff7079f9 [ 98.128798][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.148478][ T7464] RSP: 002b:00007fa2fe387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 98.156959][ T7464] RAX: ffffffffffffffda RBX: 00007fa2ff895f80 RCX: 00007fa2ff7079f9 [ 98.164951][ T7464] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000000020000000 [ 98.172914][ T7464] RBP: 00007fa2fe387090 R08: 0000000000000000 R09: 0000000000000000 [ 98.180974][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.188931][ T7464] R13: 0000000000000000 R14: 00007fa2ff895f80 R15: 00007ffee1b64d08 [ 98.196915][ T7464] [ 98.222653][ T7459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.227440][ T7472] loop0: detected capacity change from 0 to 1024 [ 98.241634][ T7472] EXT4-fs: Ignoring removed oldalloc option [ 98.259183][ T7472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.289699][ T7472] EXT4-fs (loop0): shut down requested (0) [ 98.303139][ T7459] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.318832][ T7238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.320373][ T7459] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 98.340147][ T7459] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.340147][ T7459] [ 98.349934][ T7459] EXT4-fs (loop1): Total free blocks count 0 [ 98.356033][ T7459] EXT4-fs (loop1): Free/Dirty block details [ 98.362012][ T7459] EXT4-fs (loop1): free_blocks=2415919104 [ 98.367743][ T7459] EXT4-fs (loop1): dirty_blocks=16 [ 98.372866][ T7459] EXT4-fs (loop1): Block reservation details [ 98.378862][ T7459] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 98.399757][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 98.437603][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.479138][ T7486] netlink: 'syz.2.622': attribute type 5 has an invalid length. [ 98.501923][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.625'. [ 98.526222][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.550454][ T7496] mmap: syz.2.627 (7496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.568937][ T7500] openvswitch: netlink: ct_state flags 00001eac unsupported [ 98.581520][ T29] audit: type=1400 audit(1723416532.619:524): avc: denied { watch } for pid=7498 comm="syz.4.626" path="/35/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.603138][ T7502] program syz.2.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.608700][ T7503] netlink: 392 bytes leftover after parsing attributes in process `syz.0.629'. [ 98.641446][ T7505] loop4: detected capacity change from 0 to 1024 [ 98.650418][ T7505] EXT4-fs: Ignoring removed oldalloc option [ 98.681232][ T7509] loop2: detected capacity change from 0 to 2048 [ 98.689044][ T7505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.707003][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.726295][ T29] audit: type=1400 audit(1723416532.769:525): avc: denied { setopt } for pid=7506 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.758276][ T7505] EXT4-fs (loop4): shut down requested (0) [ 98.780397][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.820508][ T7519] loop4: detected capacity change from 0 to 1024 [ 98.835916][ T7509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.850809][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 98.861418][ T7519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.875178][ T7509] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 98.887571][ T7509] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.887571][ T7509] [ 98.887936][ T7528] loop3: detected capacity change from 0 to 512 [ 98.897236][ T7509] EXT4-fs (loop2): Total free blocks count 0 [ 98.897253][ T7509] EXT4-fs (loop2): Free/Dirty block details [ 98.915514][ T7509] EXT4-fs (loop2): free_blocks=2415919104 [ 98.921233][ T7509] EXT4-fs (loop2): dirty_blocks=16 [ 98.926535][ T7509] EXT4-fs (loop2): Block reservation details [ 98.932690][ T7509] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 98.942203][ T29] audit: type=1400 audit(1723416532.969:526): avc: denied { name_bind } for pid=7518 comm="syz.4.633" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 98.950796][ T7515] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 98.968804][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.994758][ T7528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.015799][ T7528] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.036223][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 99.038985][ T7537] loop4: detected capacity change from 0 to 1024 [ 99.045212][ T7528] netlink: 228 bytes leftover after parsing attributes in process `syz.3.638'. [ 99.062139][ T7537] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 99.064480][ T29] audit: type=1400 audit(1723416533.099:527): avc: denied { setopt } for pid=7527 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.108545][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.111589][ T7542] loop0: detected capacity change from 0 to 1024 [ 99.131304][ T7537] netlink: 140 bytes leftover after parsing attributes in process `syz.4.640'. [ 99.140330][ T7537] netlink: 'syz.4.640': attribute type 2 has an invalid length. [ 99.144251][ T7542] EXT4-fs: Ignoring removed oldalloc option [ 99.148163][ T7537] netlink: 'syz.4.640': attribute type 2 has an invalid length. [ 99.159394][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 99.161792][ T7537] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 99.178322][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 99.186210][ T7542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.195834][ T6943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.204670][ T7542] EXT4-fs (loop0): shut down requested (0) [ 99.234725][ T7238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.246752][ T7550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.273211][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.289583][ T7556] loop2: detected capacity change from 0 to 1024 [ 99.296120][ T7556] EXT4-fs: Ignoring removed orlov option [ 99.301794][ T7556] EXT4-fs: Ignoring removed oldalloc option [ 99.310880][ T7556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.321200][ T7556] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.332191][ T7556] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 99.337013][ T7558] loop4: detected capacity change from 0 to 256 [ 99.347530][ T7561] loop1: detected capacity change from 0 to 256 [ 99.355700][ T7556] EXT4-fs (loop2): invalid journal inode [ 99.359575][ T7558] loop4: detected capacity change from 0 to 128 [ 99.368360][ T7561] msdos: Unknown parameter 'dotots' [ 99.370519][ T7558] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.378146][ T7556] EXT4-fs (loop2): can't get journal size [ 99.393527][ T7558] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.398455][ T7562] loop1: detected capacity change from 0 to 256 [ 99.419662][ T7556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.434124][ T7562] msdos: Unknown parameter 'dotots' [ 99.440461][ T6575] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.459783][ T7566] Invalid logical block size (2) [ 99.478668][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.499694][ T7570] loop2: detected capacity change from 0 to 1024 [ 99.506683][ T7570] EXT4-fs: Ignoring removed i_version option [ 99.512748][ T7570] EXT4-fs: Ignoring removed orlov option [ 99.518708][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.536843][ T7570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.562710][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.583925][ T7578] loop2: detected capacity change from 0 to 128 [ 99.591683][ T7578] FAT-fs (loop2): invalid media value (0x00) [ 99.597723][ T7578] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 99.607005][ T7578] FAT-fs (loop2): Can't find a valid FAT filesystem [ 99.661575][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 99.698140][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 99.745502][ T7584] loop2: detected capacity change from 0 to 128 [ 99.756499][ T7584] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 99.816100][ T7586] loop2: detected capacity change from 0 to 1024 [ 99.822891][ T7586] EXT4-fs: Ignoring removed oldalloc option [ 99.847513][ T7586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.883566][ T6052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.963950][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.163116][ T7573] ================================================================== [ 100.171190][ T7573] BUG: KCSAN: data-race in io_req_defer_failed / io_wq_free_work [ 100.178896][ T7573] [ 100.181196][ T7573] write to 0xffff888117aa6e48 of 8 bytes by task 7572 on cpu 0: [ 100.188890][ T7573] io_req_defer_failed+0x6e/0x280 [ 100.193895][ T7573] io_req_task_cancel+0x21/0x30 [ 100.198734][ T7573] io_handle_tw_list+0x1b9/0x200 [ 100.203737][ T7573] tctx_task_work_run+0x6c/0x1b0 [ 100.208665][ T7573] tctx_task_work+0x40/0x80 [ 100.213156][ T7573] task_work_run+0x13a/0x1a0 [ 100.217819][ T7573] get_signal+0xeee/0x1080 [ 100.222227][ T7573] arch_do_signal_or_restart+0x95/0x4b0 [ 100.227758][ T7573] syscall_exit_to_user_mode+0x59/0x130 [ 100.233301][ T7573] do_syscall_64+0xd6/0x1c0 [ 100.237894][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.243769][ T7573] [ 100.246073][ T7573] read to 0xffff888117aa6e48 of 8 bytes by task 7573 on cpu 1: [ 100.253597][ T7573] io_wq_free_work+0x21/0x160 [ 100.258353][ T7573] io_worker_handle_work+0x4cb/0x9d0 [ 100.263657][ T7573] io_wq_worker+0x286/0x820 [ 100.268140][ T7573] ret_from_fork+0x4b/0x60 [ 100.272534][ T7573] ret_from_fork_asm+0x1a/0x30 [ 100.277291][ T7573] [ 100.279598][ T7573] value changed: 0x00000000000c0059 -> 0x00000000004c0119 [ 100.286702][ T7573] [ 100.289002][ T7573] Reported by Kernel Concurrency Sanitizer on: [ 100.295132][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: iou-wrk-7572 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 100.305954][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 100.315986][ T7573] ==================================================================