last executing test programs: 34.49691419s ago: executing program 3 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}}, 0x20040040) 34.49678489s ago: executing program 3 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010027bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0200100000000001400030076657468305f6d61637674617000000008002800860f00000c0019"], 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) 34.429302427s ago: executing program 3 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1, 0x1}, 0xc) 34.386898651s ago: executing program 3 (id=437): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3000000, &(0x7f00000032c0)=ANY=[@ANYBLOB='showassoc,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c00375a0d26e295ef7f5ba0f22f3af1926fdef654764a0d8ad209625010d69fc11cd5d0eab877e5eb02a30081fe753343865d75550c96430dae90"], 0xa, 0x419, &(0x7f0000000100)="$eJzs3Ntu2zYYwHEqtTsvA7oBxdo0zQB23UV2UVdSFgdGrzSZdtjKkiDJRXI1FEtSBEu6Yu2ANTdtbnYANmCv0Ns9xN5hD1Jsb+BBB6c52HHO2or/DwhIWx/Jj7IhIkooAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhOG2TNMyhKf93pIczW1FQfeQ44P+Pt1THDKuEEb6I2o1MZW/NXX17eGP806u56+ui1pa1MTWB9c+une1MjFof0hCF+LZi61vHm1srH53pOiqrPzTz5x7YsdmvMpP9bBjlZGtOsrXcaC7TkdJHQey2WiYdxfbsWxrT8XLcaK60o2UkwSRnHU/l1azOSdVfTno+Z2W46nBmwt3bNNsyPv1UDlRHPh379djd1F7nvY7WUx6OI1ZSL+ID3QiE+V0pVxb31idGze1NMgaH1QbMftdbNO2Lcu2rcZ8c37BNCu2acs9b5j7iKLJ5Z2I8r+0KNdZXr6BU+kX6z8AAAAAAHh3Gdk99ldCiGp2H94Qbe0ps+y0AAAAAADAGcr+8n89LappbUoY/P4PAAAAAMC75ufde+zeH7bHLg7XxJ9/iyiqGtvh0mfGppOGO5uikrW7tL/HpD1tXCk6yYpGpXjlqhnjRh50YxD9pijWxu31Mw4kUIy8P4F8h13/5ZAExK9iOg+aXsnLlcGRfJTJtvZU3Q28e5ZwnCsTiVpKvn+y/oPIpv+L371iiLX1jdX6199urGS5bKe9bG8WGygO7KMYfTLE8519j8NnXM1uxBTjTubjmrvnP5E3nzjGmD+Km3nMzcm8nNw7/1o6plUfNfsiC+tYM/9LHMxiJo+Zmb2dFrdnh2Rhj8vC3p3Fic7FEbKYG5fF3CmzAICyrI1ZhYxPisBTrTtnt7offkW/lcfcms4urJXpIVd0c9wV3Tzluv7HgWcgjFpj03F/27eqvk4bvB45buzZRnoKLz3ffCquPXuxdWd989Hj1cerT2x7rmF+YZrztqhm0ygK1h4AwBAqemNMJj8ZUaTDr6xm03KSRSWjwH0gI93qKKn9REXuouN3lAyjIAncwEsrD3VLxTLuhWEQJbIdRDIMYr2UPflFFo9+iVXX8RPtxqGnnFhJN/ATx01kS8euDHtfejpeVFHWOA6Vq9vadRId+DIOepGr6lLGSu0K1C3lJ7qt06ovw/6HQkTL8mHg9bpKtlTsRjpMgrzDwVjabwdRN+u2XvbJBgDgP2LnCXZHr2T/KCjeE0IcrVW/33+5d1AeNwQAQKneLtdlZwIAAAAAAAAAAAAAAAAAAAAAAEY5wf6/kiuGEOLiBv39qRClT/kcKhd5DsuuVP4vn+Dlk34o/XPIp+wrE4Dz9m8AAAD//4Trp34=") mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x81899, 0x0) 34.130255797s ago: executing program 3 (id=445): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff}) shutdown(r0, 0x2) 33.069015006s ago: executing program 3 (id=465): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000180)='a', 0x1) 33.060960336s ago: executing program 32 (id=465): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000180)='a', 0x1) 28.286190934s ago: executing program 5 (id=565): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, 0x0, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)='*', 0x1}, {&(0x7f0000000440)='\x00', 0x1}, {0x0}, {&(0x7f00000005c0)="ff", 0x1}, {&(0x7f0000000600)='m', 0x1}, {&(0x7f0000000640)='d', 0x1}, {&(0x7f0000000680)="0f", 0x1}], 0x7}}], 0x1, 0x4000000) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}}], 0x1, 0x0) 28.172884155s ago: executing program 5 (id=568): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000440)="830a5864c4", 0x5}], 0x1) 27.782785545s ago: executing program 5 (id=573): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffff7fffffff, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000300)=""/140, 0x8c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$md(0xffffffffffffff9c, &(0x7f00000005c0)='./md0\x00', 0x6180, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000600)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000006c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) 27.334330521s ago: executing program 5 (id=576): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000001900)=0x40) 27.192963405s ago: executing program 5 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) r1 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) read(r3, &(0x7f0000000440)=""/4067, 0xfe3) write(r0, &(0x7f0000000180)='27', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 26.906453884s ago: executing program 5 (id=582): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000280)="feffff7f02000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlinkat(0x0, r0, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00') sched_setscheduler(0x0, 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{}], 0x1f4) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r3, 0x7, 0x40, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x1, 0x0, 0x0) 11.85104956s ago: executing program 33 (id=582): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000280)="feffff7f02000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlinkat(0x0, r0, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00') sched_setscheduler(0x0, 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{}], 0x1f4) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r3, 0x7, 0x40, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x1, 0x0, 0x0) 4.216825159s ago: executing program 1 (id=824): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_bp={0x0, 0xe}, 0x82, 0x0, 0x0, 0x1, 0x1ac4, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 4.216092959s ago: executing program 1 (id=825): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x20, 0x0, 0x7, 0x20520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffc, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x10ec48, 0xd43, 0x800040, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000003}, 0x0, 0xffffffffffffffff, r1, 0x8) socket(0x10, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) prlimit64(0x0, 0xb, &(0x7f0000001340)={0xa, 0x10000000000087}, 0x0) ptrace(0x4207, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001380)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x11, &(0x7f0000000340)=ANY=[@ANYRES64], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, &(0x7f0000000500)="000000000000000002", 0x0}, 0x50) connect$unix(r4, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001480), 0x651, 0x0) recvmmsg(r4, &(0x7f00000014c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000001500)={0x4, 0x80, 0x1, 0xf7, 0x2, 0xff, 0x0, 0x8, 0x624, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x7, 0x9, 0x2, 0x9, 0x4671, 0x200, 0x0, 0xfd6c, 0x0, 0x51}, r3, 0x1, 0xffffffffffffffff, 0x8) r8 = perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x1, 0xfc, 0x4, 0x4, 0x0, 0x7, 0xaf499e99ddf20e0e, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001600)}, 0x104080, 0x6, 0x4, 0x3, 0xfffffffffffffffe, 0x9, 0x5, 0x0, 0x5, 0x0, 0x400}, 0x0, 0x100000000212, r7, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001640)={0x5, r8, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0x7, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xb8, &(0x7f0000000280)=""/184, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c, r2, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)=@security={'security\x00', 0xe, 0x4, 0x548, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f0000001ec0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0xa, [0x19, 0x34, 0x3e, 0x5, 0x21, 0x0, 0x2, 0xd, 0x3e, 0x6, 0x17, 0x23, 0xa, 0x1, 0x2f, 0x26], 0x0, 0x10, 0x9}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x319}}}, {{@uncond, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@icmp={{0x28}, {0xd, '+\t'}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3a, 0x0, [{0x2, 0x7f, 0x87, 0x8000}, {0x7, 0x6, 0x40, 0x6}, {0xfff9, 0x0, 0x81, 0x1}, {0x8000, 0x6e, 0x81, 0x2}, {0x1, 0x71, 0x8, 0xff}, {0xada5, 0x18, 0x1, 0x8}, {0x3, 0x8d, 0x1, 0x9}, {0x7ff, 0x8, 0x9, 0xc062}, {0x6, 0xa5, 0x3, 0xff5}, {0xbb, 0x7b, 0x0, 0xe}, {0x8, 0x80, 0x9, 0x8}, {0x6b9b, 0x1, 0x2, 0x4}, {0x10, 0x7, 0x2, 0x3db}, {0x80, 0x4, 0xc0, 0x2}, {0x9, 0x0, 0x8}, {0x7f, 0x2, 0x1, 0x5}, {0x1000, 0x6, 0x4, 0x2}, {0xe, 0x20, 0x5, 0x8}, {0xff, 0x2, 0x3, 0x33}, {0x1, 0x10, 0x6, 0x8000}, {0x0, 0x3, 0xdc, 0xc4ac}, {0xe0f0, 0x0, 0x9, 0xf}, {0xd265, 0xf0, 0x2, 0x4}, {0x1ff, 0xfd, 0x60, 0xffffff7f}, {0x2, 0x8, 0x6, 0x9}, {0x3, 0x8, 0x0, 0x7}, {0xd, 0x7, 0x4, 0x2}, {0x1ff, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x8, 0xfb6}, {0x1, 0x2f, 0x7, 0x6}, {0xfffc, 0x3, 0x2, 0xcf0}, {0xff01, 0x6, 0x3}, {0x3, 0x3, 0x1, 0x5}, {0xfe00, 0x3c, 0x8, 0xa}, {0xb, 0x3, 0x8, 0xe5a5}, {0x55, 0xe4, 0x0, 0x7ff}, {0x3, 0x14, 0x7}, {0x8, 0xd7, 0x4, 0xdac}, {0xeb, 0x5, 0x6, 0x4a}, {0x5, 0x4, 0x5, 0x8}, {0xe, 0x3, 0x10, 0x7}, {0x4bb4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x7, 0x5}, {0x9, 0x1c, 0x3, 0x8}, {0x8001, 0x7, 0x3, 0x6}, {0xc40, 0x38, 0xee, 0xde}, {0x1, 0x6, 0x1}, {0x3, 0x2, 0x3b, 0x2}, {0xd, 0x5, 0x1, 0x2}, {0x1ec, 0x0, 0xb, 0x3}, {0x0, 0x3, 0x5e, 0x7}, {0x1, 0x9, 0x2, 0x4}, {0x2, 0x7, 0x8, 0x1}, {0x8, 0xf, 0x5, 0x80000000}, {0x0, 0x2c, 0x5, 0x9}, {0x1d0, 0x2b, 0x80}, {0x7, 0x73, 0x85}, {0x5, 0x80, 0x0, 0x7f}, {0xff01, 0x3, 0x2f, 0x2}, {0x44, 0x0, 0x4, 0x3ff}, {0x2, 0x4, 0x2, 0x9}, {0x7, 0x6, 0x40, 0xff}, {0x9, 0x7, 0x80, 0x2}, {0x7, 0xc, 0x4}], {0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xb, [0x21, 0x28, 0x30, 0x1d, 0x3b, 0x2c, 0x27, 0x3e, 0x2f, 0xb, 0x10, 0x2, 0x1e, 0x26, 0x34, 0x6], 0x1, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) syz_open_procfs(0x0, &(0x7f0000001f00)='fd/3\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001f40), 0x0) 3.539178628s ago: executing program 6 (id=843): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x419183a9) ptrace$pokeuser(0x6, r2, 0x388, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$pokeuser(0x6, r2, 0x388, 0x419183a9) (async) ptrace$pokeuser(0x6, r2, 0x388, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (async) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) 3.513040481s ago: executing program 2 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='6'], 0x20) r2 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000200)) getpgid(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3000600}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000fedbd7250f00000008030054a3c22ee8f7bbc5abdc846ce77b93d720171a376a31cc317f13586ca77d2d91393f51613fc4dd9cf0bc2088659fd09490575a9589d60f6cfc68d8bcd91690479285762b70ee7be2b8e065d745a8fd7f9f9379e7738ed85bd435", @ANYRES32=0x0, @ANYBLOB="08007e00020000000500d50002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x2000c080) 3.474214175s ago: executing program 2 (id=845): pipe2(0x0, 0x800) r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000000000)) futimesat(r0, 0x0, 0x0) 3.397374143s ago: executing program 2 (id=846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x2000c080) (fail_nth: 2) 3.347369158s ago: executing program 2 (id=847): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2008215, &(0x7f00000002c0), 0x1, 0x624, &(0x7f0000000300)="$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") r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 3.346970758s ago: executing program 6 (id=848): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/file0\x00', 0x0, 0xb0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000500)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x268, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = syz_open_dev$loop(&(0x7f0000000b80), 0x195d, 0xec4d2770249a3ef5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000009708d08b7ba9d9b52f7f53b7672629102806af9338969bbbbb472c5f6e23f0f6f3d2869004a39339adddd0fba7dd248fa968ccc9d9f49c2d6b01de812d425521199938365ce0f801ad089d8cc9df6a14008e074f0fa5a3bab65be77f185b106faae02ed4634c1fa1d2fd0c42d5537abaabb12dc1e2d9badc03c1573617e1a85c077e2d8464e2d861415198ff27af795afdda2e3e48d70a2f046cdc871e35b5b39a76a2", @ANYRES16=r4, @ANYBLOB="0b022abd7000fbdbdf250b0000000400068038000180080006000000000005000200040000001400040020010000000000000000000000000001060005004e230000080003000a010101"], 0x50}, 0x1, 0x0, 0x0, 0x20085}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001040)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000001140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)) renameat2(r8, &(0x7f00000011c0)='./cgroup\x00', r8, &(0x7f0000001200)='./file1\x00', 0x2) prlimit64(0x0, 0x7, &(0x7f0000001240), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001280)={0xffffffffffffffff, r5, 0x4, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x9}}, 0x30) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x2000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) close(r1) clock_adjtime(0x0, &(0x7f0000001400)={0xffff, 0x2, 0x2000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x7, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfa}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc8044) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 3.073581926s ago: executing program 2 (id=849): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000740), 0x10) sendmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f00000008c0), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r4, &(0x7f0000000900)=""/249, 0xf9, 0x10022, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000240)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000600)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001c40)={0x0}) sendmsg$nl_generic(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001f00)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x4000) bind$inet6(r6, &(0x7f0000000700)={0xa, 0x4e24, 0x2, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.997103044s ago: executing program 1 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001380)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0xffff, 0x0, 0x0, {[@md5sig={0x13, 0x12, "e30782e1bc2842c2ee7fa8e7de584599"}]}}}}}}}}, 0x0) 2.964744047s ago: executing program 1 (id=851): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000240)={[], [{@dont_appraise}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_user={'obj_user', 0x3d, 'ex\x90\xe9\xdf\x8db<\xc7\xa7\xf5\x014\x00'}}, {@uid_gt}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, '-{/,\xd7-]'}}]}, 0x1, 0xbe9, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000600)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x2000002, 0x0, 0x4b, 0x0, 0x0, 0x80000000, 0x0, 0xff41, 0x0, 0x0, 0x0, 0x5}, 0x50) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001c40)={0x0}) sendmsg$nl_generic(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001f00)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x4000) bind$inet6(r3, &(0x7f0000000700)={0xa, 0x4e24, 0x2, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x4000840) 2.306190524s ago: executing program 0 (id=855): gettid() socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fb000000000000006151a90f38688e3007000000000000000000000000000000000060b08ef04310b0950d0c6612611e0947cb37971ab8affa9d8a4b1112dbe52324bb0503adeab6474c02b1c05c763a6f5f0c2d2b0977a23164ac087c7b5e72798c128e7ea5b3"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3b3, &(0x7f0000000dc0)="$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") write$cgroup_int(r2, &(0x7f0000001180)=0x1, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r0, &(0x7f00000011c0)="6e4d24f93be88174d78f202b70d659c4a4298f268d7a5cc7d9bffa63c82d00fc540210b803ee21d958c7fc7b3a6fd1703299b694bb8e4e1f2da556b11d3da4fbbdecf6900a43d5d1464662c1603d5287c311a4fea3e28ea130b819eef8e302d3ea1accdc0bf943a9e9beb73b257fb5c59a6838d012853db67b74c90f5ca4ef15d488e84ecbcf2d3de523e2db25c2aa3ce9c5093bf7bda3c470b7d4f4b1cb6aab5030011d1b04a9134cede3157a9aad4a90bbe23fc475d1de9f23ebf61a76f9ee6bd80d157142d64bd3dbd9007c84131d9f276959de136f47e41ba4f5e1df364ce0b2f64dd8aa3da4a0be79bea475b7fa98d802f9b93fa62639", &(0x7f00000012c0)=""/157}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x7, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="80", 0x26892}], 0x1}, 0xfc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x891d, &(0x7f0000000840)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="548753b403000b81d48acdf54a3bd7202a3592832a94b7f4fdae11f89585e22b5aaee787e59434abf0ae820e20fc2971e4184c39799a55e58e1c1001619ce002391be9f2be1295196339899ec8aac6ee193e7c3326a034562e792dd35f1a9bd2", @ANYRES32=0x0, @ANYBLOB="03000000000000002c00128009000100766c616e000000001c0002800600010001000000100003800c00fe00ff0000000700000008000500", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 642.112704ms ago: executing program 0 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) r1 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) read(r3, &(0x7f0000000440)=""/4067, 0xfe3) write(r0, &(0x7f0000000180)='27', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 559.875472ms ago: executing program 4 (id=866): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001840), 0x161042, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, &(0x7f0000000040), &(0x7f00000000c0), 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001ac0)=0x2) r1 = socket(0xa, 0x2, 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000002c0)=""/153, 0x99}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) tkill(r2, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000001b00)={0x1, &(0x7f0000001b40)=[{0x9, 0xfd}]}) write$ppp(r0, &(0x7f0000001bc0)="1829", 0x2) 443.216904ms ago: executing program 4 (id=867): r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, 0x0) futimesat(r0, 0x0, 0x0) 139.854595ms ago: executing program 6 (id=868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000001900)=0x40) 110.253608ms ago: executing program 6 (id=869): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffff7f00000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3b3, &(0x7f0000000240)="$eJzs3U1rY+UXAPDTdPoy/f/bdCGCivgwOzehrV9gisyAWFDqRMZZiHdsOobeaUoSKhlEuxDc+g3cDy7dCeIX6EL37tx143IWw0Ty1qad2I70JQz+fhDuyX3OSZ6bS8LZhHNw9/uHW5uN0mbWjMLNFIWIKDyJWOxGPRP9Y6EbT8ewvXi7ePePNz/65N77q2trt9ZTur16552VlNLCW798+dWPN35t/u/jnxZ+non9xU8P/lr5c//V/dcOnt35otpI1UbarjVTlu7Xas3sfl5JG9XGVimlD/NK1qik6najUm+mztv31zfz2s5OK2XbG/NzO/VKo5Gy7VbaqrRSs5aa9VbKHmTV7VQqldL8XHCW8uP19Wy1F8+eknfzqjbEJajXV7POl2jmuZXy47FsCAAYq3P1/4OFM/v/e4Wh/n82/rH/n4oR/f/Quv7/BU29WNpw/z/C3sVtiPHp9P/T/e/vcfp/AAAAAAAAAAAAAAB4GTxpt4vtdrs4OLa7fxIuRPSfj3t/XK7n7v+Jx7j3x+Ua+uPebET+3W55t9w79tZXN6MaeVRiKYrxtPOzMNCLb7+3dmspdS3G/MNvuvU3fosoTx6vX45iLI6uX+7Vp8P66BynYm64fiU+i1dG16+MrJ+OpR+G6ktRjN8/j1rksRGd2qP6r5dTeveDtRP1M908AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4bSmngjejNvd8tR1yP3f78/tJRwmLMTw3Nx+/VH87XX4piPB09n39p5Hz+a/H6tfFeOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNFqPtrI8r9SvKhjM/M/yfCKme8FpVRO99L0TS9fjePLMWa9zzqBwZk4Ujs5c71/kiORn7Xa7Gzz49sK3Onu1t/I8wVREnJLT7n+A53+v/0fE8JnJ4zkzEfHvXnDy2Jn2aVfRCRY6QeFCP8PJK7lN4/g1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPE6HPrdeTIx7t0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLo3Wo60szyv1SwzGfY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk78DAAD//8jCBxE=") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 80.847421ms ago: executing program 1 (id=870): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xe0c0, 0x8, 0x43a1bd76, 0x9, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000800)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000840)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0\x00') 737.11µs ago: executing program 2 (id=871): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote, 0x1}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x30}, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff], 'wlan1\x00', 'pim6reg1\x00', {0xff}, {}, 0x3c, 0x2, 0xa, 0x10}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x5c, 0x7f, 0xf, 0x80, 0x6, 0x8a0}}, @common=@ipv6header={{0x28}, {0x20, 0xc0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x4}, {0x4, 0x4, 0x1}, 0xfffffbff, 0x9}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1670, 0x0, 0x0, [0x364d, 0x3, 0x4, 0x8, 0x2, 0x7, 0x0, 0x7, 0x3, 0x7, 0xc1f3, 0x8, 0xbaec, 0xa, 0x800, 0x3d], 0x2}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xffffffff], 'veth1_to_bridge\x00', 'pimreg1\x00', {0xff}, {}, 0x21, 0x5e, 0x2, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"ad1d", 0x1}}, @common=@mh={{0x28}, {"d954", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000540)) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000580)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4e22}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x1}}, 0x4e22}, &(0x7f0000000800)=0x90) r3 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0xe, 0x72, {0x72, 0xa, "fb270f79e1cdc7ac0229bd7e2039cbf9a614a0c352db6fe4cf263fd439d60737b7257b827a2b5fb7e71c051544d5822135e3f2b00816539f3e83869964cb02cd4ceb345bbea2dd030cf09abe16464a87addaba189614ad9c825bfe04f4d2d93ecac295a74bf7e06eb3880324eab7892d"}}, &(0x7f0000000900)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "6c34add4c457c358e673820e2258def8b26e7d7404b8da4310efd18ceecd21571562732e25296fa2fac52cad5f761981c78562037a537d63326c281df42f355d874bf2365e566b799e0918e9ff9ad7deabacfd38fd7b40b66481043707e99ad46ed184a699ebf80c43bb6fca95cb51d8d7113bde89232a240163b350a2c9fd0ed945420bd49e9a315fe9ec6a"}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0x15, 0xb3, "3e07d835b8684d888f6b4bb0c2cd124244471d85073a091510bec055350aa618d27a08e5c27ede829648edecb94716d17de6ba91a1153ced0cdab66c0e3c608879956db3737e20c2e3777b0fce1fbe808685ff930eddf1105c41b7e54172798408830c6bb5922a855520510ddab450a5be241bf3fb28eaa2afb8035f4fa2bdf5c028d913b0e09200e2cb3ed1269f6db52a3d18988bd14412f92c78d93d9f2e9bae37daca90a92d1febcb8aea1cd43563d0db01"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000b40)={0xc0, 0x5, 0x1, "1e"}, &(0x7f0000000b80)={0x40, 0x5, 0x3, "1f56f0"}}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000c40)) writev(r4, &(0x7f0000000e40)=[{&(0x7f0000000c80)="7e1ceaf0a5fdf37e1c5ccc2a3adf88637e525e27b402de09a3b714a5d82d1564e368ce7b1dafcdbe9fb0d9d18c5a97decf903716e8223e6b519f6c198ba03e19e6b2b8a55266c989322126f78df9e210f575bd7d2c554be76fe5a0388eef588a7a2c9aa05660b861f42c67f6b97a4980bcc0a987ee30bd893d3c3c56231f89d2c7f4080da3033f3d41ee3c8af8b36dc0c30c130e6f6f836f03eebcd98f3ce6b83dd817d3b021e6f2af7b8877dd317108d979f97072dca00e8d9e538e0f078cbe90409d339f05453add8cc8ac8557b73db96be76dba1dd07fef7521d7313384baacbfdddec5bc814e2da10a", 0xeb}, {&(0x7f0000000d80)="198de76865c3f4bde683efab1fc9896dd99bb0a89c5fd738653084b47f9361290f7a04681b85c784a89f7b5459476bf1430967b65a48c28970af8e4a50ff9ee471d1d3adfe99cdf587def97e3afcfcb15bfa9220330114f6fc84ae5d730ab4bdff2805502246104ebe72e3ace2147fae532118cdab76e67addda53ba966205a0319cd198b2a1db5f76c920b5819c015f931cfbc4a56b06ccb254d22a29f69e39f106b88286a922dff04b18f85b4ac6593ce75530bf878c8f3266e77ffe", 0xbd}], 0x2) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000e80)={0xffffffffffffffff}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001780)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000001880)=0xe8) (async) r9 = getgid() sendmmsg$unix(r6, &(0x7f0000001900)=[{{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f40)="f3e1eb174e434d7865937f984e4c1db24b2e4647779fe9aff7c55769af09ce7a7ba67b4771d059c8c4c233f66c21ddd24e79963c9dbfd0a977b21ac438dd671c34d9777f642b606d3f1a4440a3d8f5a9bc9bab49bc36cc76f97859bfb3ae43e394377d6b1e669f2cd820883ab8cb8230836f8a43a32b39e7a2c2c10edffa897aa4eb53237b25a97e44ef40c84303ccdbceafd71df30811d27476f56078c4848191675f6e901b041505a013cf51a81d157af9870ef6983e62ad33db8d8e443804f33e44b596dd52d7b97127d810ec68226d3ef0e843a96a315c13aeecdcd777a14c87b88d7950d83899d7ddc1866903266e9a5d1a44", 0xf5}, {&(0x7f0000001040)="3a356dd3dfc0269f326b36cf4ecb327440ebb8d79c9ac7e9e42f6be4cbbb03108479a1ee07d2bc21a10707d5845d5727870f98078b95fb7ef6041d5878e3d83241be32a6d20d2f6b70a207a6432a7e61ea14e5baca7e1744a8fc86fdd71c681ad92688fe5e7357e41ede72dd7d41f07836d7", 0x72}, {&(0x7f00000010c0)}], 0x3, 0x0, 0x0, 0x4004}}, {{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000011c0)="c7ea903f229946442b0e2f247fb44c8b9faee66074084ceca2483027f7420e37117988cfbfb7e9e87312cbe167fe5301edd8c3033ae0c5d9871794b4f583c05193d182e035f0838ac8e7616749f87295055828dcb73827ce5e4ccf4f52709797cb82ff07899466bab1ca5be2e9be2dabeda9d04b79b921fc3324dcf037", 0x7d}], 0x1, &(0x7f0000001280)=[@rights={{0x18, 0x1, 0x1, [r0, r4]}}], 0x18, 0x1}}, {{&(0x7f00000012c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001340)="a19f91ff2342c99564f33549aabdd82ee457ce07af2e5e6418256d354235035e4b1dd14a05f075610d1ead414472740a259314d4402494cead59bed74b7b26a2126526e97c66f0e83d8d4005274aaf771800e57bf08200b849c834509ed5719deb72ded6d481273e9caa035b76ad605fe7a7a3e3e0adf9dec82ba118e041955fe3dc71b379daae0bf1e18e72652dcc084a494d8564f22ec5f84c3df3ac47090b861ff8", 0xa3}, {&(0x7f0000001400)="39359344ee14ea0c056dd2b58bc41d1c144a4769a4fa3bf3a92cfca76c4678a8693ff9f4680258ea3b4332bb517ad932c0f24ae41bcb623f12ad1d63ff2df7b93bfd07136e2eb8d89509370e11f7b15c178c5b1e9fa4c81faf531ed328bddba839ff6dee30dd05f5db852a592d0a4ffb7a626c42b5bcb3aee447c94272133b88a1999986f94cf669d435c981ed1f163765b54dc6f64adb0c5c58399077df8f443418474f48c6a9079dc7a9193baa47d48d78f7d595cb9b23c8a67b36595e5fc9b541767c6e075dce41e240f319210053e311538265ced98ef1095b6da47aff49c7d305502aff8c3726b43e55b9eef46952e4e348ff09a7619f", 0xf9}, {&(0x7f0000001500)="6876bd587ac303dcc93693fab9e6adbf34a91676e3c975b5de3459151a3591516ad750bdcafaaabc71f1e7de3bd954f3ea7b7d8a22f20eb8ab51eaccfd072599b9a47bc70b83f684c5e0a4ea57a76113e7bf7f8a", 0x54}, {&(0x7f0000001580)="3c03f2b980bff7718006848cb7b43f691256c673276b7fa27143bf54a62a3807f6839797b7c0366814175bb53da54baee6fbd6b8e6d2c03700a0edeb8c5bd87a39f999dd0b629e922a55f65ee9225b7ce2a1acd7c1ec3f97b3c3b5e7329e755d487dc6ffe2aa3e673b195eed1069f16c2d1e40897352adfe4a3e098dbe2dcd67e4b2b13c602c8cff113d1e1276b5f03001c3a9404d98179d6f42e49f9417752cc327757bb2da3919643f3654e5528f72244e275457d9b7528cd059f9bd10c48c382c670b0498a5588b95082a3db58073791054e2ba7402dc35354a85499c", 0xde}, {&(0x7f0000001680)="d451327d3d1fb5c5a763552c9514d49d2b117fb6d44751721f1e97aa8d03d034787128aef5ddc75aac96b9b8c01e02cd51edfebeee92acfc4524a0a101fca80e0d92b91c5467260fb8bb68be", 0x4c}], 0x5, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}], 0x20, 0x4090}}], 0x3, 0x40081) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000019c0)={0x4, 0x7}) (async) fchmodat(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x40) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001a40)={r2, 0x2, 0x400, 0x4}, &(0x7f0000001a80)=0x10) r10 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0x4, 0x5, 0x15}, {0x9, 0x5, 0xf, 0x2, 0x8, 0x6, 0x3, 0xfa}, {0x9, 0x5, 0xa, 0x3, 0x10, 0x8, 0x95, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r10, &(0x7f0000001c40)={0x14, &(0x7f0000001b00)={0x20, 0x5, 0xf0, {0xf0, 0x7, "486d73f6030cf7ae2232e468a0efda2132326a861ab327aebe08b5df90d0e1fa913707b77d567fc54588593802e726bc3a7c11d0e9aff0fba600b221bc2ff8a2b8c02df21c905e4806ed07d2004dfa0eb47db0282063e38f3d79d2a8e458d32360a2dc3d866bca3604c7490aa8423b89b32758e2bf6cb4fc9774d4ca768448795d9dcafc9f2cb579ee4f7c666bf2ac7dea62d9e7e9d690bf0d10fe7f0ac58387387beb603fb2654fc9abc2496509c5c71363924be0b4a508821f38839caafbfb2b4cd75b086c12e29b87d6f9c90c0076100487ed2e32032e01c21ef5aee535e464781ccfb51a6159df7efcc1f88d"}}, &(0x7f0000001c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000002140)={0x1c, &(0x7f0000001c80)={0x0, 0x10, 0x14, "7dc82b92abc9f6b4459cca5bec67d2043d4a3a50"}, &(0x7f0000001cc0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000002100)={0x21, 0x0, 0x3, "a41168"}}) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002200)={0x1b, 0x0, 0x0, 0x101, 0x0, r11, 0x63c, '\x00', r7, r1, 0x3, 0x4, 0x1}, 0x50) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) removexattr(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r12, 0x80105873, &(0x7f0000002380)) 385.33µs ago: executing program 6 (id=872): openat(0xffffffffffffffff, 0x0, 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000b80)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "36c949197541497cf12157dde842745d9444a7ac9c01356538b10d7d6900b041", "fabe1dcc13f04e092803fa0c4289a310", {"d0543bf38fcd64ea724074c86fc1f644", "2bfca2825571eb4a9ea7e7d674b0403b"}}}}}}}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000400)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x411, {{}, {0x0}, 0x0}}], 0x48}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000380)={{}, {r3, r4+60000000}}, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x3000010, &(0x7f00000005c0)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f0000000600)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") fchownat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0xee01, 0x0, 0x1000) 0s ago: executing program 6 (id=873): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x37, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x6a040000) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x6, 0x0, 0x0, 0xb45, 0x20100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xe}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_targets\x00') preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4093, 0xffd}], 0x1, 0xfffffffe, 0x1000, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600), 0x5, r3}, 0x38) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xd, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x15, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000019c0)={r5, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) unshare(0x50010900) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000200)={r7, 0x45, "3e6f90eb387370e39b1ef8a04965140b55c40ab8df419167db1cf4de6085bd26241c2d3709d1ba8bdc17ed93f195c2921196c09d82bb12e7774d9397650b6f3a7b8f874fea"}, &(0x7f0000000280)=0x4d) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @private2, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): hout journal. Quota mode: writeback. [ 47.762080][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.889432][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.893383][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.925132][ T4030] loop2: detected capacity change from 0 to 128 [ 48.006415][ T4030] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.441948][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.443897][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.487432][ T4054] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 15 [ 48.527931][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 48.546090][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.546130][ T3935] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.546189][ T3935] bridge_slave_0: entered allmulticast mode [ 48.546695][ T3935] bridge_slave_0: entered promiscuous mode [ 48.563853][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.567970][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.568068][ T3935] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.571905][ T3935] bridge_slave_1: entered allmulticast mode [ 48.573130][ T3935] bridge_slave_1: entered promiscuous mode [ 48.667170][ T3935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.677652][ T3935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.698136][ T3935] team0: Port device team_slave_0 added [ 48.705108][ T3935] team0: Port device team_slave_1 added [ 48.731255][ T3935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.731274][ T3935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.731310][ T3935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.738896][ T3935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.738933][ T3935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.739042][ T3935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.839957][ T4072] loop4: detected capacity change from 0 to 2048 [ 48.859545][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.863242][ T3935] hsr_slave_0: entered promiscuous mode [ 48.863689][ T3935] hsr_slave_1: entered promiscuous mode [ 48.865350][ T3935] debugfs: 'hsr0' already exists in 'hsr' [ 48.865369][ T3935] Cannot create hsr debugfs directory [ 48.906157][ T4073] loop3: detected capacity change from 0 to 1024 [ 48.920848][ T4073] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.933542][ T4073] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #3: block 1: comm syz.3.192: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.933627][ T4073] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.938372][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 48.938408][ C0] EXT4-fs (loop3): initial error at time 111: ext4_map_blocks:951: inode 3: block 1 [ 48.938451][ C0] EXT4-fs (loop3): last error at time 111: ext4_map_blocks:951: inode 3: block 1 [ 48.959775][ T4073] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.192: Failed to acquire dquot type 0 [ 48.959838][ T4073] loop3: lost filesystem error report for type 5 error -117 [ 48.960151][ T4073] EXT4-fs error (device loop3): ext4_free_blocks:6717: comm syz.3.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.960241][ T4073] loop3: lost filesystem error report for type 5 error -117 [ 48.960624][ T4073] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.192: Invalid inode bitmap blk 0 in block_group 0 [ 48.960710][ T4073] loop3: lost filesystem error report for type 5 error -117 [ 48.960993][ T4073] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 48.961090][ T4073] loop3: lost filesystem error report for type 5 error -117 [ 48.964491][ T4073] EXT4-fs (loop3): 1 orphan inode deleted [ 48.965342][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.999648][ T287] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.000143][ T287] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 49.006236][ T4078] loop2: detected capacity change from 0 to 512 [ 49.012555][ T4078] EXT4-fs: Ignoring removed bh option [ 49.041726][ T4078] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.041817][ T4078] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 49.041873][ T4078] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.194: Corrupt directory, running e2fsck is recommended [ 49.051850][ T4078] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 49.051943][ T4078] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.194: corrupted in-inode xattr: e_name out of bounds [ 49.052020][ T4078] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.058539][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 49.058616][ C1] EXT4-fs (loop2): initial error at time 111: ext4_iget_extra_inode:6027: inode 15 [ 49.058724][ C1] EXT4-fs (loop2): last error at time 111: ext4_iget_extra_inode:6027: inode 15 [ 49.063215][ T4078] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.194: couldn't read orphan inode 15 (err -117) [ 49.063364][ T4078] loop2: lost filesystem error report for type 5 error -117 [ 49.067900][ T4078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.123132][ T4078] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.123266][ T4078] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 49.123358][ T4078] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.194: Corrupt directory, running e2fsck is recommended [ 49.150871][ T4078] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.150993][ T4078] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 49.151120][ T4078] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.194: Corrupt directory, running e2fsck is recommended [ 49.183621][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.192910][ T4078] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.192989][ T4078] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 49.193043][ T4078] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.194: Corrupt directory, running e2fsck is recommended [ 49.228938][ T4078] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.383989][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.495409][ T4100] loop3: detected capacity change from 0 to 512 [ 49.508215][ T4100] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 49.508233][ T4100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.522164][ T4100] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #16: comm syz.3.199: invalid indirect mapped block 32768 (level 2) [ 49.522317][ T4100] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.525176][ T4100] EXT4-fs (loop3): 1 orphan inode deleted [ 49.525233][ T4100] EXT4-fs (loop3): 1 truncate cleaned up [ 49.526222][ T4100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.575729][ T4106] loop2: detected capacity change from 0 to 512 [ 49.577515][ T4106] EXT4-fs: test_dummy_encryption option not supported [ 49.878668][ T3964] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 49.879665][ T3964] EXT4-fs (loop4): Remounting filesystem read-only [ 50.010267][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.081217][ T3935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.091742][ T3935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.094833][ T3935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.103483][ T3935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.106019][ T3935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.118062][ T3935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.122036][ T3935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.132045][ T3935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.300641][ T3935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.329630][ T4117] ip_tables: iptables: counters copy to user failed while replacing table [ 50.336960][ T3935] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.358789][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.358861][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.384987][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.385097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.447487][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.513484][ T4135] loop4: detected capacity change from 0 to 512 [ 50.525309][ T4135] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 50.525370][ T4135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.551720][ T4135] EXT4-fs (loop4): 1 truncate cleaned up [ 50.552277][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.578702][ T4135] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 50.598864][ T4142] loop2: detected capacity change from 0 to 512 [ 50.605561][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.613725][ T4142] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 50.635610][ T4142] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.635739][ T4142] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.636355][ T4142] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.636398][ T4142] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 50.638143][ T4142] EXT4-fs (loop2): 1 orphan inode deleted [ 50.638813][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.705312][ T4143] No such timeout policy "syz1" [ 50.728254][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.772967][ T4151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.803364][ T4151] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.807210][ T4162] pimreg: entered allmulticast mode [ 50.835777][ T4168] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.864072][ T3292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.888753][ T3471] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 50.888791][ T3471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.888791][ T3471] [ 50.888809][ T3471] EXT4-fs (loop4): Total free blocks count 0 [ 50.888837][ T3471] EXT4-fs (loop4): Free/Dirty block details [ 50.888852][ T3471] EXT4-fs (loop4): free_blocks=65281 [ 50.888870][ T3471] EXT4-fs (loop4): dirty_blocks=4 [ 50.888922][ T3471] EXT4-fs (loop4): Block reservation details [ 50.888937][ T3471] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 50.893329][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.978720][ T4162] EXT4-fs: Ignoring removed orlov option [ 51.003955][ T3935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.005018][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.123048][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.203498][ T3935] veth0_vlan: entered promiscuous mode [ 51.215442][ T4205] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.215882][ T3935] veth1_vlan: entered promiscuous mode [ 51.248875][ T3935] veth0_macvtap: entered promiscuous mode [ 51.249372][ T4203] EXT4-fs: Ignoring removed i_version option [ 51.251509][ T3935] veth1_macvtap: entered promiscuous mode [ 51.262943][ T3935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.273282][ T3935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.289372][ T3471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.289451][ T3471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.289540][ T3471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.289575][ T3471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.296024][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.479895][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.896637][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 51.896653][ T29] audit: type=1400 audit(114.560:383): avc: denied { getopt } for pid=4202 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.904063][ T4221] No such timeout policy "syz1" [ 51.954659][ T4227] mmap: syz.4.226 (4227): VmData 167424000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 51.999411][ T4225] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.023788][ T29] audit: type=1400 audit(114.690:384): avc: denied { load_policy } for pid=4233 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.027936][ T4236] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.103857][ T4236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.103880][ T4236] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 52.104265][ T4236] EXT4-fs error (device loop4): ext4_clear_blocks:893: inode #13: comm syz.4.227: attempt to clear invalid blocks 2 len 1 [ 52.104361][ T4236] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.104498][ T4236] EXT4-fs (loop4): Remounting filesystem read-only [ 52.104764][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 52.146407][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.174097][ T4241] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.229: corrupted in-inode xattr: invalid ea_ino [ 52.174132][ T4241] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.174290][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 52.174346][ T4241] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.229: couldn't read orphan inode 15 (err -117) [ 52.174372][ T4241] loop0: lost filesystem error report for type 5 error -117 [ 52.174955][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.188501][ T29] audit: type=1400 audit(114.850:385): avc: denied { write } for pid=4240 comm="syz.0.229" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.318105][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.352639][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.396351][ T4255] set_capacity_and_notify: 7 callbacks suppressed [ 52.396373][ T4255] loop3: detected capacity change from 0 to 512 [ 52.407524][ T29] audit: type=1400 audit(115.070:386): avc: denied { write } for pid=4228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.435068][ T4255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.233: bg 0: block 5: invalid block bitmap [ 52.435110][ T4255] loop3: lost filesystem error report for type 5 error -117 [ 52.438455][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.438552][ C1] EXT4-fs (loop3): initial error at time 115: ext4_validate_block_bitmap:436 [ 52.438626][ C1] EXT4-fs (loop3): last error at time 115: ext4_validate_block_bitmap:436 [ 52.455450][ T29] audit: type=1400 audit(115.120:387): avc: denied { write } for pid=4263 comm="syz.2.235" path="socket:[7870]" dev="sockfs" ino=7870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.481688][ T4255] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 52.481711][ T4255] loop3: lost filesystem error report for type 5 error -117 [ 52.482840][ T4255] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #11: comm syz.3.233: invalid indirect mapped block 3 (level 2) [ 52.483008][ T4255] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.483557][ T4255] EXT4-fs (loop3): 1 orphan inode deleted [ 52.483700][ T4255] EXT4-fs (loop3): 1 truncate cleaned up [ 52.484707][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.509151][ T29] audit: type=1400 audit(115.180:388): avc: denied { write } for pid=4254 comm="syz.3.233" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.597178][ T4266] loop4: detected capacity change from 0 to 256 [ 52.613645][ T4266] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 52.613677][ T4266] FAT-fs (loop4): Filesystem has been set read-only [ 52.644170][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.684572][ T29] audit: type=1400 audit(115.350:389): avc: denied { write } for pid=4272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.844669][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 52.882342][ T4294] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4294 comm=syz.3.246 [ 52.935683][ T29] audit: type=1400 audit(115.600:390): avc: denied { read } for pid=4302 comm="syz.0.249" name="dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.964384][ T29] audit: type=1400 audit(115.630:391): avc: denied { write } for pid=4287 comm="syz.1.244" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 Û•ËM?§øG ü¥8=Y²¯ ø÷Ã#YYþ½Måh¾œ¯r³7|py|GáÏÉ#åbK»`2ÜÉÑW0óñ ‰ç5Î ÇUë_¶¶n2â›í*ƒ§j8«»@Ù´ #}bÛ›M¯²ßB¬©v«PDV90ªu «FÇùùh„{JJµ ? •ZþÈÐÛÎÑôqw’¡'¿›°éLÖî\ú:ÿïÖ)~Úüô© íH L°@¹klµ3JÝÙ•8+RqŒ‡dö‡iDÖÿ©é<Ÿ¶ŸÞT_¢£yüÌ ~I%_M ÒlìôT‡{úºgaŒàðÁœíwX‚½ìׯL{} 2üw ªÙ×?ê G|Ô}÷Áô}îõ@MlhêYó¸®ÞLÀŠY‚S‡G'|šk{•ÍÙ"3w*—@a…§š¯Y œÞÛÈóOÒS1AØ!>tͪdÒlqK±mïyQ æ%í]x²kýìÃJ%ª>"+Ì2ã6“ª0š›¶TÐþÄšÃR&­(~±{Œ4^Ú^œ)Ñ›j¿°ª#dÓíCO‰hò¼ö²ú‚ØœºÈXó.tSoÝÃ+¤2¤Ä¦Z wâO8Ó ÓVºúS³àÙVÙÜ-&‰‡ÔÕ¬`'øŽØ¸²;Ó`ä˨èêJI]5ÌÑQw±w¶õ)|‡EÞþY ò%phäˆ\+ÿ-ÑÙ]ºÞm‡©ÎêÂXc6[ 53.255457][ T4321] loop2: detected capacity change from 0 to 128 [ 53.257383][ T29] audit: type=1400 audit(115.920:392): avc: denied { write } for pid=4290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.322342][ T4321] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.517500][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.641291][ T4343] loop4: detected capacity change from 0 to 256 [ 53.642103][ T4343] vfat: Bad value for 'utf8' [ 53.689087][ T4349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.264'. [ 53.920542][ T4357] loop1: detected capacity change from 0 to 512 [ 53.939604][ T4357] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.942328][ T4357] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.945238][ T4357] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 53.945775][ T4357] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 53.945842][ T4357] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.948377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 53.948410][ C0] EXT4-fs (loop1): last error at time 116: ext4_ext_check_inode:521: inode 13 [ 53.955454][ T4357] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.267: couldn't read orphan inode 13 (err -117) [ 53.955482][ T4357] loop1: lost filesystem error report for type 5 error -117 [ 53.971604][ T4357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.991217][ T4357] EXT4-fs error (device loop1): ext4_lookup:1787: comm syz.1.267: inode #15: comm syz.1.267: iget: illegal inode # [ 54.156038][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.241879][ T4361] loop1: detected capacity change from 0 to 512 [ 54.258200][ T4361] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.268: iget: bad i_size value: 38620345925642 [ 54.258263][ T4361] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.258455][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 54.258471][ C1] EXT4-fs (loop1): initial error at time 116: ext4_orphan_get:1404: inode 15 [ 54.258508][ C1] EXT4-fs (loop1): last error at time 116: ext4_orphan_get:1404: inode 15 [ 54.260723][ T4361] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 54.260815][ T4361] loop1: lost filesystem error report for type 5 error -117 [ 54.262843][ T4361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.399649][ T4369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.268: bg 0: block 5: invalid block bitmap [ 54.404719][ T4369] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 516 with error 28 [ 54.404754][ T4369] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.404754][ T4369] [ 54.404772][ T4369] EXT4-fs (loop1): Total free blocks count 0 [ 54.404803][ T4369] EXT4-fs (loop1): Free/Dirty block details [ 54.404829][ T4369] EXT4-fs (loop1): free_blocks=0 [ 54.404846][ T4369] EXT4-fs (loop1): dirty_blocks=536 [ 54.404859][ T4369] EXT4-fs (loop1): Block reservation details [ 54.404870][ T4369] EXT4-fs (loop1): i_reserved_data_blocks=536 [ 54.689147][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.085775][ T4391] loop4: detected capacity change from 0 to 512 [ 55.098450][ T4391] EXT4-fs: Ignoring removed orlov option [ 55.107641][ T4391] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 55.107763][ T4391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.163815][ T4391] EXT4-fs (loop4): 1 truncate cleaned up [ 55.177184][ T4391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.222517][ T4391] EXT4-fs (loop4): shut down requested (2) [ 55.293940][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.392059][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.392246][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.425975][ T4403] IPv6: addrconf: prefix option has invalid lifetime [ 55.471465][ T4407] loop1: detected capacity change from 0 to 2048 [ 55.494965][ T4407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.531062][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.696842][ T4430] type: 33 invalid [ 55.718686][ T4432] loop1: detected capacity change from 0 to 512 [ 55.841620][ T4442] loop3: detected capacity change from 0 to 512 [ 55.878720][ T4442] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz.3.301: invalid size [ 55.932884][ T4454] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syze0 [ 55.976635][ T4458] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.306: Parent and EA inode have the same ino 15 [ 55.976674][ T4458] loop3: lost filesystem error report for type 5 error -117 [ 55.977270][ T4458] EXT4-fs (loop3): 1 orphan inode deleted [ 55.993469][ T4458] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.306: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 56.125160][ T4477] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.125753][ T4477] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.237723][ T4494] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.291428][ T4502] wireguard0: entered promiscuous mode [ 56.291450][ T4502] wireguard0: entered allmulticast mode [ 56.307098][ T4505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 56.307223][ T4505] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 56.560344][ T4517] loop4: p4 < > [ 56.657542][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.158520][ T29] kauditd_printk_skb: 1626 callbacks suppressed [ 57.158553][ T29] audit: type=1400 audit(119.810:2019): avc: denied { lock } for pid=4540 comm="syz.4.340" path="socket:[8316]" dev="sockfs" ino=8316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 57.502410][ T4551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.502529][ T4551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.504110][ T29] audit: type=1400 audit(120.170:2020): avc: denied { bind } for pid=4548 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.516836][ T29] audit: type=1400 audit(120.180:2021): avc: denied { create } for pid=4552 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.516872][ T29] audit: type=1400 audit(120.180:2022): avc: denied { connect } for pid=4552 comm="syz.3.346" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.516903][ T29] audit: type=1400 audit(120.180:2023): avc: denied { write } for pid=4552 comm="syz.3.346" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.740457][ T4565] netlink: 64 bytes leftover after parsing attributes in process `syz.3.351'. [ 57.740566][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 57.784518][ T29] audit: type=1400 audit(120.450:2024): avc: denied { setopt } for pid=4548 comm="syz.2.344" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.177981][ T4599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.366'. [ 58.178453][ T4601] set_capacity_and_notify: 7 callbacks suppressed [ 58.178471][ T4601] loop3: detected capacity change from 0 to 128 [ 58.195936][ T4601] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 58.223218][ T29] audit: type=1400 audit(120.890:2025): avc: denied { write } for pid=4600 comm="syz.3.364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.223887][ T29] audit: type=1400 audit(120.890:2026): avc: denied { write } for pid=4600 comm="syz.3.364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.228136][ T29] audit: type=1400 audit(120.890:2027): avc: denied { write } for pid=4600 comm="syz.3.364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.253004][ T4601] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.364: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 58.257190][ T4598] loop2: detected capacity change from 0 to 2048 [ 58.270583][ T29] audit: type=1400 audit(120.920:2028): avc: denied { write } for pid=4600 comm="syz.3.364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.345395][ T4610] IPv6: addrconf: prefix option has invalid lifetime [ 58.347513][ T4611] loop4: detected capacity change from 0 to 128 [ 59.430856][ T4658] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.506082][ T4664] loop4: detected capacity change from 0 to 1024 [ 59.530509][ T4664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003] [ 59.639708][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 60.010707][ T4701] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.404' sets config #6 [ 60.129798][ T4711] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 60.129892][ T4711] SELinux: failed to load policy [ 60.165944][ T4713] Illegal XDP return value 4294967274 on prog (id 30) dev syz_tun, expect packet loss! [ 60.230152][ T4717] loop2: detected capacity change from 0 to 512 [ 60.387109][ T4743] loop1: detected capacity change from 0 to 1024 [ 60.449464][ T4743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 60.449544][ T4743] System zones: 0-1, 3-12 [ 60.456189][ T4743] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 61.044555][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 61.044583][ T4762] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 61.058930][ T4759] loop4: detected capacity change from 0 to 4096 [ 61.059966][ T4759] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.060070][ T4759] EXT4-fs: test_dummy_encryption option not supported [ 61.132174][ T4771] loop4: detected capacity change from 0 to 1024 [ 61.166947][ T4776] loop3: detected capacity change from 0 to 136 [ 61.177066][ T4765] loop0: detected capacity change from 0 to 4096 [ 61.177880][ T4765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.224527][ T4771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.434: bg 0: block 112: padding at end of block bitmap is not set [ 61.245486][ T4771] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 50 with error 28 [ 61.245528][ T4771] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.245528][ T4771] [ 61.245548][ T4771] EXT4-fs (loop4): Total free blocks count 0 [ 61.245567][ T4771] EXT4-fs (loop4): Free/Dirty block details [ 61.245589][ T4771] EXT4-fs (loop4): free_blocks=0 [ 61.245609][ T4771] EXT4-fs (loop4): dirty_blocks=64 [ 61.245700][ T4771] EXT4-fs (loop4): Block reservation details [ 61.245717][ T4771] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 61.352569][ T3300] rock: directory entry would overflow storage [ 61.352583][ T3300] rock: sig=0x4f50, size=4, remaining=3 [ 61.352598][ T3300] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 61.366356][ T3300] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 61.366491][ T3300] VFS: Lookup of '' in iso9660 loop3 would have caused loop [ 61.375427][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 61.375492][ T4788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 61.490145][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.490247][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.642060][ T4826] EXT4-fs: Ignoring removed bh option [ 62.912457][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 62.912593][ T29] audit: type=1400 audit(125.580:2056): avc: denied { watch } for pid=4851 comm="syz.4.471" path="/97/file0" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.999739][ T29] audit: type=1400 audit(125.670:2057): avc: denied { map } for pid=4855 comm="syz.2.473" path="/104/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.117415][ T4859] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.364689][ T4844] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.488683][ T4875] set_capacity_and_notify: 1 callbacks suppressed [ 63.488722][ T4875] loop0: detected capacity change from 0 to 512 [ 63.512339][ T4875] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 63.536305][ T4875] EXT4-fs (loop0): 1 orphan inode deleted [ 63.549495][ T3471] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.549533][ T3471] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1 [ 63.549567][ T3471] loop0: lost filesystem error report for type 5 error -117 [ 63.594249][ T29] audit: type=1400 audit(126.260:2058): avc: denied { write } for pid=4874 comm="syz.0.477" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.627030][ T4881] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.928781][ T4844] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.928841][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.928966][ T4844] bridge_slave_0: entered allmulticast mode [ 63.929669][ T4844] bridge_slave_0: entered promiscuous mode [ 63.959498][ T4844] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.959530][ T4844] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.961180][ T4844] bridge_slave_1: entered allmulticast mode [ 63.961770][ T4844] bridge_slave_1: entered promiscuous mode [ 64.006246][ T4844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.007554][ T4844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.039855][ T4844] team0: Port device team_slave_0 added [ 64.040675][ T4844] team0: Port device team_slave_1 added [ 64.074643][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.074662][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.074700][ T4844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.075967][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.075983][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.076013][ T4844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.105636][ T4915] loop1: detected capacity change from 0 to 128 [ 64.109168][ T4915] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.114152][ T4915] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.164926][ T3471] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.235088][ T4844] hsr_slave_0: entered promiscuous mode [ 64.235567][ T4844] hsr_slave_1: entered promiscuous mode [ 64.235816][ T4844] debugfs: 'hsr0' already exists in 'hsr' [ 64.235829][ T4844] Cannot create hsr debugfs directory [ 64.250228][ T29] audit: type=1400 audit(126.910:2059): avc: denied { read append } for pid=4919 comm="syz.4.493" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.250324][ T29] audit: type=1400 audit(126.910:2060): avc: denied { open } for pid=4919 comm="syz.4.493" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.256254][ T29] audit: type=1400 audit(126.920:2061): avc: denied { map } for pid=4916 comm="syz.0.491" path="socket:[8829]" dev="sockfs" ino=8829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.256299][ T29] audit: type=1400 audit(126.920:2062): avc: denied { read } for pid=4916 comm="syz.0.491" path="socket:[8829]" dev="sockfs" ino=8829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.385203][ T4929] loop2: detected capacity change from 0 to 512 [ 64.390721][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.396785][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.405643][ T4929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 64.405794][ T4929] System zones: 1-12 [ 64.423287][ T4929] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.496: Directory hole found for htree index block 0 [ 64.423320][ T4929] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.425036][ T4929] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 64.425077][ T4929] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.496: Directory hole found for htree index block 0 [ 64.425110][ T4929] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.425268][ T4929] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 64.451723][ T4929] EXT4-fs (loop2): shut down requested (2) [ 64.510273][ T4936] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 64.510299][ T4936] SELinux: failed to load policy [ 64.559364][ T4844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.560915][ T4940] FAULT_INJECTION: forcing a failure. [ 64.560915][ T4940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.560967][ T4940] CPU: 0 UID: 0 PID: 4940 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.560998][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.561012][ T4940] Call Trace: [ 64.561061][ T4940] [ 64.561068][ T4940] __dump_stack+0x1d/0x30 [ 64.561122][ T4940] dump_stack_lvl+0x95/0xd0 [ 64.561235][ T4940] dump_stack+0x15/0x1b [ 64.561264][ T4940] should_fail_ex+0x259/0x270 [ 64.561303][ T4940] should_fail+0xb/0x20 [ 64.561335][ T4940] should_fail_usercopy+0x1a/0x20 [ 64.561365][ T4940] _copy_to_user+0x20/0xa0 [ 64.561464][ T4940] bpf_verifier_vlog+0x36e/0x5a0 [ 64.561500][ T4940] __btf_verifier_log+0x7f/0xb0 [ 64.561603][ T4940] __btf_verifier_log_type+0x22f/0x330 [ 64.561642][ T4940] btf_struct_check_meta+0x18e/0x6e0 [ 64.561667][ T4940] ? sort+0x6a/0xa0 [ 64.561732][ T4940] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 64.561807][ T4940] btf_parse_type_sec+0x28c/0x1590 [ 64.561845][ T4940] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 64.561882][ T4940] ? btf_parse_hdr+0x43a/0x440 [ 64.561914][ T4940] ? btf_parse_str_sec+0x1ae/0x1b0 [ 64.561986][ T4940] btf_new_fd+0x2ec/0x6a0 [ 64.562018][ T4940] bpf_btf_load+0x116/0x130 [ 64.562051][ T4940] __sys_bpf+0xbee/0xc50 [ 64.562154][ T4940] ? do_futex+0x2c0/0x460 [ 64.562188][ T4940] __x64_sys_bpf+0x69/0x80 [ 64.562226][ T4940] x64_sys_call+0xf26/0x2550 [ 64.562268][ T4940] do_syscall_64+0x112/0x360 [ 64.562303][ T4940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.562330][ T4940] RIP: 0033:0x7f808348f559 [ 64.562360][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.562379][ T4940] RSP: 002b:00007f8081edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.562478][ T4940] RAX: ffffffffffffffda RBX: 00007f8083715fa0 RCX: 00007f808348f559 [ 64.562494][ T4940] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 64.562588][ T4940] RBP: 00007f8083526b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.562607][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.562662][ T4940] R13: 00007f8083716038 R14: 00007f8083715fa0 R15: 00007ffc8288c018 [ 64.562670][ T4844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.562689][ T4940] [ 64.563190][ T4844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.563577][ T4939] loop1: detected capacity change from 0 to 2048 [ 64.617861][ T4844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.626636][ T4844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.644778][ T4844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.653155][ T4844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.666809][ T4939] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.680839][ T4844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.698562][ T4939] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 64.698667][ T4939] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.698667][ T4939] [ 64.698704][ T4939] EXT4-fs (loop1): Total free blocks count 0 [ 64.698807][ T4939] EXT4-fs (loop1): Free/Dirty block details [ 64.698911][ T4939] EXT4-fs (loop1): free_blocks=2415919504 [ 64.698952][ T4939] EXT4-fs (loop1): dirty_blocks=48 [ 64.699003][ T4939] EXT4-fs (loop1): Block reservation details [ 64.699043][ T4939] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 64.704273][ T4937] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.704359][ T4937] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.704359][ T4937] [ 64.813972][ T29] audit: type=1400 audit(127.460:2063): avc: denied { connect } for pid=4952 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.814009][ T29] audit: type=1400 audit(127.480:2064): avc: denied { setopt } for pid=4951 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.012606][ T4957] loop1: detected capacity change from 0 to 512 [ 65.025151][ T4957] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 65.025193][ T4957] System zones: 1-12 [ 65.025544][ T4957] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.505: missing EA_INODE flag [ 65.025578][ T4957] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 65.025979][ T4957] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.505: error while reading EA inode 12 err=-117 [ 65.026014][ T4957] loop1: lost filesystem error report for type 5 error -117 [ 65.026184][ T4957] EXT4-fs (loop1): 1 orphan inode deleted [ 65.096257][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.135099][ T4844] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.144058][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.144285][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.166212][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.166255][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.179079][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 65.179158][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 65.267291][ T4980] loop2: detected capacity change from 0 to 1024 [ 65.360585][ T4999] GUP no longer grows the stack in syz.0.521 (4999): 200000004000-20000000a000 (200000002000) [ 65.360660][ T4999] CPU: 1 UID: 0 PID: 4999 Comm: syz.0.521 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.360704][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.360718][ T4999] Call Trace: [ 65.360725][ T4999] [ 65.360777][ T4999] __dump_stack+0x1d/0x30 [ 65.360813][ T4999] dump_stack_lvl+0x95/0xd0 [ 65.360846][ T4999] dump_stack+0x15/0x1b [ 65.360878][ T4999] __get_user_pages+0x1bd9/0x1ea0 [ 65.360977][ T4999] ? __rcu_read_unlock+0x4e/0x70 [ 65.361014][ T4999] get_user_pages_remote+0x1d0/0x6c0 [ 65.361093][ T4999] __access_remote_vm+0x156/0x4d0 [ 65.361121][ T4999] access_remote_vm+0x32/0x40 [ 65.361149][ T4999] proc_pid_cmdline_read+0x334/0x710 [ 65.361181][ T4999] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 65.361216][ T4999] vfs_readv+0x417/0x6d0 [ 65.361255][ T4999] __x64_sys_preadv+0xfd/0x1c0 [ 65.361302][ T4999] x64_sys_call+0x20e8/0x2550 [ 65.361334][ T4999] do_syscall_64+0x112/0x360 [ 65.361433][ T4999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.361490][ T4999] RIP: 0033:0x7f847f17f559 [ 65.361512][ T4999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.361538][ T4999] RSP: 002b:00007f847dbcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 65.361559][ T4999] RAX: ffffffffffffffda RBX: 00007f847f405fa0 RCX: 00007f847f17f559 [ 65.361635][ T4999] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004 [ 65.361652][ T4999] RBP: 00007f847f216b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.361713][ T4999] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 65.361735][ T4999] R13: 00007f847f406038 R14: 00007f847f405fa0 R15: 00007fff54020178 [ 65.361761][ T4999] [ 65.598778][ T5010] loop0: detected capacity change from 0 to 1024 [ 65.599268][ T5010] EXT4-fs: Ignoring removed bh option [ 65.601907][ T4844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.683624][ T5020] loop2: detected capacity change from 0 to 512 [ 65.686014][ T5020] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 65.686928][ T5020] EXT4-fs (loop2): invalid journal inode [ 65.728278][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.735957][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.817377][ T5037] loop2: detected capacity change from 0 to 1024 [ 65.849176][ T4844] veth0_vlan: entered promiscuous mode [ 65.852145][ T4844] veth1_vlan: entered promiscuous mode [ 65.871107][ T4844] veth0_macvtap: entered promiscuous mode [ 65.875878][ T4844] veth1_macvtap: entered promiscuous mode [ 65.890951][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.895273][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.920652][ T5042] loop2: detected capacity change from 0 to 512 [ 65.932372][ T5042] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.941957][ T32] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942262][ T32] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942713][ T32] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942862][ T32] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.946678][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #17: comm syz.2.531: inode has both inline data and extents flags [ 65.946768][ T5042] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 65.947273][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.531: couldn't read orphan inode 17 (err -117) [ 65.947364][ T5042] loop2: lost filesystem error report for type 5 error -117 [ 65.961983][ T5042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.531: bg 0: block 65: padding at end of block bitmap is not set [ 65.962651][ T5042] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.531: Failed to acquire dquot type 0 [ 66.083038][ T5050] UDC core: g1: couldn't find an available UDC or it's busy [ 66.149751][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.537'. [ 66.217122][ T5067] netlink: 68 bytes leftover after parsing attributes in process `syz.5.539'. [ 66.359994][ T5092] netlink: 'syz.2.550': attribute type 49 has an invalid length. [ 66.385333][ T5092] bond0: (slave bond_slave_0): Releasing backup interface [ 66.439142][ T5099] 9p: Bad value for 'wfdno' [ 66.663463][ T5092] bond_slave_0: entered promiscuous mode [ 66.663492][ T5092] bond_slave_0: entered allmulticast mode [ 66.836419][ T5121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.836519][ T5121] block device autoloading is deprecated and will be removed. [ 67.010849][ T5121] md: could not open device unknown-block(1,4). [ 67.010977][ T5121] md: md_import_device returned -6 [ 67.041651][ T5133] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 67.226502][ T5133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.226525][ T5133] block device autoloading is deprecated and will be removed. [ 67.921209][ T5188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.921368][ T5188] block device autoloading is deprecated and will be removed. [ 68.153103][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 68.153135][ T29] audit: type=1400 audit(130.820:2104): avc: denied { create } for pid=5195 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.165409][ T29] audit: type=1400 audit(130.830:2105): avc: denied { setopt } for pid=5195 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.217181][ T5198] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 68.252825][ T5198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.252845][ T5198] block device autoloading is deprecated and will be removed. [ 68.277519][ T5153] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 68.357652][ T29] audit: type=1326 audit(131.020:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.357704][ T29] audit: type=1326 audit(131.020:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.357743][ T29] audit: type=1326 audit(131.020:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.357833][ T29] audit: type=1326 audit(131.020:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.358185][ T29] audit: type=1326 audit(131.020:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.358225][ T29] audit: type=1326 audit(131.020:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.365383][ T5198] md: could not open device unknown-block(1,2). [ 68.365509][ T5198] md: error, md_import_device() returned -6 [ 68.408184][ T5198] md: md1 stopped. [ 68.469504][ T29] audit: type=1326 audit(131.020:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.469627][ T29] audit: type=1326 audit(131.020:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 68.598646][ T5205] FAULT_INJECTION: forcing a failure. [ 68.598646][ T5205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.598699][ T5205] CPU: 0 UID: 0 PID: 5205 Comm: syz.5.580 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.598725][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.598770][ T5205] Call Trace: [ 68.598795][ T5205] [ 68.598803][ T5205] __dump_stack+0x1d/0x30 [ 68.598832][ T5205] dump_stack_lvl+0x95/0xd0 [ 68.598929][ T5205] dump_stack+0x15/0x1b [ 68.598951][ T5205] should_fail_ex+0x259/0x270 [ 68.598986][ T5205] should_fail+0xb/0x20 [ 68.599074][ T5205] should_fail_usercopy+0x1a/0x20 [ 68.599105][ T5205] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 68.599151][ T5205] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 68.599195][ T5205] ? x86_task_fpu+0x36/0x60 [ 68.599225][ T5205] get_sigframe+0x34f/0x470 [ 68.599322][ T5205] ? _raw_spin_unlock_irq+0x9/0x30 [ 68.599357][ T5205] x64_setup_rt_frame+0xa7/0x4e0 [ 68.599397][ T5205] arch_do_signal_or_restart+0x27c/0x480 [ 68.599453][ T5205] exit_to_user_mode_loop+0x15d/0x8c0 [ 68.599544][ T5205] ? ksys_read+0x194/0x1a0 [ 68.599590][ T5205] do_syscall_64+0x212/0x360 [ 68.599627][ T5205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.599677][ T5205] RIP: 0033:0x7f531f20f557 [ 68.599699][ T5205] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 68.599725][ T5205] RSP: 002b:00007f531dc5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.599752][ T5205] RAX: 0000000000000000 RBX: 00007f531f495fa0 RCX: 00007f531f20f559 [ 68.599771][ T5205] RDX: 0000000000000fe3 RSI: 0000200000000440 RDI: 0000000000000004 [ 68.599790][ T5205] RBP: 00007f531f2a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 68.599881][ T5205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.599905][ T5205] R13: 00007f531f496038 R14: 00007f531f495fa0 R15: 00007ffd915f6f98 [ 68.599933][ T5205] [ 68.602471][ T5214] md: could not open device unknown-block(1,3). [ 68.602495][ T5214] md: md_import_device returned -6 [ 69.488757][ T5229] set_capacity_and_notify: 6 callbacks suppressed [ 69.488803][ T5229] loop1: detected capacity change from 0 to 512 [ 69.644410][ T5235] md: could not open device unknown-block(1,8). [ 69.644457][ T5235] md: md_import_device returned -6 [ 69.855926][ T5250] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.876135][ T5153] syz.2.564 (5153) used greatest stack depth: 9928 bytes left [ 69.941569][ T5254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.947169][ T3284] team_slave_0: entered promiscuous mode [ 69.947198][ T3284] team_slave_1: entered promiscuous mode [ 69.967855][ T5256] FAULT_INJECTION: forcing a failure. [ 69.967855][ T5256] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.967895][ T5256] CPU: 1 UID: 0 PID: 5256 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.967930][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.967949][ T5256] Call Trace: [ 69.967959][ T5256] [ 69.967970][ T5256] __dump_stack+0x1d/0x30 [ 69.968002][ T5256] dump_stack_lvl+0x95/0xd0 [ 69.968038][ T5256] dump_stack+0x15/0x1b [ 69.968070][ T5256] should_fail_ex+0x259/0x270 [ 69.968111][ T5256] should_fail_alloc_page+0xf2/0x100 [ 69.968158][ T5256] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 69.968216][ T5256] alloc_pages_mpol+0xaf/0x1d0 [ 69.968251][ T5256] alloc_pages_noprof+0x94/0x140 [ 69.968286][ T5256] __pud_alloc+0x47/0x460 [ 69.968321][ T5256] copy_page_range+0x30e6/0x3320 [ 69.968369][ T5256] ? __account_obj_stock+0x27f/0x2d0 [ 69.968414][ T5256] ? mas_wr_store_type+0x5af/0xc60 [ 69.968467][ T5256] ? mas_store+0x42b/0x5b0 [ 69.968518][ T5256] dup_mmap+0x874/0x1120 [ 69.968552][ T5256] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 69.968595][ T5256] ? __list_add_valid_or_report+0x38/0xe0 [ 69.968665][ T5256] copy_mm+0xf5/0x340 [ 69.968709][ T5256] copy_process+0x10e9/0x23f0 [ 69.968761][ T5256] kernel_clone+0x1c0/0x5f0 [ 69.968799][ T5256] ? do_futex+0x391/0x460 [ 69.968836][ T5256] __x64_sys_clone+0x143/0x180 [ 69.968890][ T5256] x64_sys_call+0x2479/0x2550 [ 69.968924][ T5256] do_syscall_64+0x112/0x360 [ 69.968964][ T5256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.968995][ T5256] RIP: 0033:0x7f808348f559 [ 69.969018][ T5256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.969044][ T5256] RSP: 002b:00007f8081edefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 69.969072][ T5256] RAX: ffffffffffffffda RBX: 00007f8083715fa0 RCX: 00007f808348f559 [ 69.969092][ T5256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 69.969109][ T5256] RBP: 00007f8083526b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.969124][ T5256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 69.969141][ T5256] R13: 00007f8083716038 R14: 00007f8083715fa0 R15: 00007ffc8288c018 [ 69.969173][ T5256] [ 70.227318][ T5260] loop2: detected capacity change from 0 to 512 [ 70.232940][ T5260] EXT4-fs: Ignoring removed orlov option [ 70.242801][ T5260] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 70.242827][ T5260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.242929][ T5260] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29249!=33349) [ 70.242975][ T5260] EXT4-fs (loop2): group descriptors corrupted! [ 70.270554][ T5261] loop0: detected capacity change from 0 to 512 [ 70.525114][ T5270] netlink: 'syz.2.596': attribute type 21 has an invalid length. [ 70.525173][ T5270] netlink: 'syz.2.596': attribute type 6 has an invalid length. [ 70.525190][ T5270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.596'. [ 70.789536][ T3471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.849294][ T3471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.939710][ T12] IPVS: starting estimator thread 0... [ 70.945721][ T5278] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 71.011961][ T3471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.048548][ T5280] IPVS: using max 2256 ests per chain, 112800 per kthread [ 71.081467][ T3471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.189089][ T3935] EXT4-fs unmount: 58 callbacks suppressed [ 71.189111][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.266112][ T3471] bridge_slave_1: left allmulticast mode [ 71.266136][ T3471] bridge_slave_1: left promiscuous mode [ 71.266376][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.267592][ T3471] bridge_slave_0: left allmulticast mode [ 71.267615][ T3471] bridge_slave_0: left promiscuous mode [ 71.267708][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.288236][ T3471] pimreg: left allmulticast mode [ 71.370734][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.600998][ T5311] tmpfs: Bad value for 'mpol' [ 71.649973][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.651976][ T3471] bond0 (unregistering): Released all slaves [ 71.656629][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 71.801468][ T5316] 9p: Bad value for 'wfdno' [ 71.802330][ T3471] hsr_slave_0: left promiscuous mode [ 71.803757][ T3471] hsr_slave_1: left promiscuous mode [ 71.804137][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.804153][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.805532][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.805624][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.820152][ T3471] veth1_macvtap: left promiscuous mode [ 71.820238][ T3471] veth0_macvtap: left promiscuous mode [ 71.820289][ T3471] veth1_vlan: left promiscuous mode [ 71.820382][ T3471] veth0_vlan: left promiscuous mode [ 71.826696][ T5319] loop4: detected capacity change from 0 to 128 [ 71.841710][ T5319] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.183058][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.223444][ T5339] FAULT_INJECTION: forcing a failure. [ 72.223444][ T5339] name fail_futex, interval 1, probability 0, space 0, times 1 [ 72.223482][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.607 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.223594][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.223686][ T5339] Call Trace: [ 72.223699][ T5339] [ 72.223708][ T5339] __dump_stack+0x1d/0x30 [ 72.223742][ T5339] dump_stack_lvl+0x95/0xd0 [ 72.223842][ T5339] dump_stack+0x15/0x1b [ 72.223908][ T5339] should_fail_ex+0x259/0x270 [ 72.223970][ T5339] should_fail+0xb/0x20 [ 72.223999][ T5339] get_futex_key+0x12c/0xc40 [ 72.224021][ T5339] ? release_sock+0x10c/0x180 [ 72.224079][ T5339] ? sk_setsockopt+0x202d/0x2150 [ 72.224119][ T5339] futex_wake+0x89/0x400 [ 72.224188][ T5339] do_futex+0x3f8/0x460 [ 72.224218][ T5339] ? udpv6_setsockopt+0x67/0xa0 [ 72.224293][ T5339] __se_sys_futex+0x2f6/0x370 [ 72.224326][ T5339] ? fput+0x91/0xc0 [ 72.224354][ T5339] __x64_sys_futex+0x78/0x90 [ 72.224381][ T5339] x64_sys_call+0x22e2/0x2550 [ 72.224433][ T5339] do_syscall_64+0x112/0x360 [ 72.224471][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.224494][ T5339] RIP: 0033:0x7f847f17f559 [ 72.224512][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.224617][ T5339] RSP: 002b:00007f847dbae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.224647][ T5339] RAX: ffffffffffffffda RBX: 00007f847f406098 RCX: 00007f847f17f559 [ 72.224667][ T5339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f847f40609c [ 72.224686][ T5339] RBP: 00007f847f406090 R08: 3fffffffffffffff R09: 0000000000000000 [ 72.224701][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.224715][ T5339] R13: 00007f847f406128 R14: 00007fff54020090 R15: 00007fff54020178 [ 72.224736][ T5339] [ 72.263773][ T5342] FAULT_INJECTION: forcing a failure. [ 72.263773][ T5342] name failslab, interval 1, probability 0, space 0, times 0 [ 72.263882][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.263996][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.264122][ T5342] Call Trace: [ 72.264145][ T5342] [ 72.264176][ T5342] __dump_stack+0x1d/0x30 [ 72.264264][ T5342] dump_stack_lvl+0x95/0xd0 [ 72.264358][ T5342] dump_stack+0x15/0x1b [ 72.264420][ T5342] should_fail_ex+0x259/0x270 [ 72.264515][ T5342] should_failslab+0x8c/0xb0 [ 72.264664][ T5342] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 72.264773][ T5342] ? sock_alloc_inode+0x36/0xf0 [ 72.264857][ T5342] ? sock_alloc_inode+0x36/0xf0 [ 72.265022][ T5342] ? selinux_socket_create+0xfd/0x180 [ 72.265225][ T5342] ? __pfx_sock_alloc_inode+0x10/0x10 [ 72.265313][ T5342] sock_alloc_inode+0x36/0xf0 [ 72.265390][ T5342] alloc_inode+0x40/0x170 [ 72.265429][ T5342] __sock_create+0x121/0x580 [ 72.265536][ T5342] ? __se_sys_futex+0x2f6/0x370 [ 72.265655][ T5342] ? xfd_validate_state+0x45/0xf0 [ 72.265757][ T5342] __sys_socket+0xaf/0x180 [ 72.265852][ T5342] __x64_sys_socket+0x3f/0x50 [ 72.266017][ T5342] x64_sys_call+0x246e/0x2550 [ 72.266106][ T5342] do_syscall_64+0x112/0x360 [ 72.266231][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.266311][ T5342] RIP: 0033:0x7f80a62df559 [ 72.266402][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.266468][ T5342] RSP: 002b:00007f80a4d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 72.266535][ T5342] RAX: ffffffffffffffda RBX: 00007f80a6565fa0 RCX: 00007f80a62df559 [ 72.266583][ T5342] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 72.266627][ T5342] RBP: 00007f80a6376b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.266720][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.266770][ T5342] R13: 00007f80a6566038 R14: 00007f80a6565fa0 R15: 00007ffc12894978 [ 72.266846][ T5342] [ 72.287281][ T5342] socket: no more sockets [ 72.396744][ T5343] loop4: detected capacity change from 0 to 512 [ 72.491712][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 72.507189][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 72.550852][ T5343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.709282][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.709572][ T5281] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.801486][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 72.801556][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 72.801580][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.801580][ T12] [ 72.801637][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 72.801649][ T12] EXT4-fs (loop4): Free/Dirty block details [ 72.801660][ T12] EXT4-fs (loop4): free_blocks=65280 [ 72.801673][ T12] EXT4-fs (loop4): dirty_blocks=32 [ 72.801684][ T12] EXT4-fs (loop4): Block reservation details [ 72.801695][ T12] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 72.806530][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.264229][ T5378] loop0: detected capacity change from 0 to 512 [ 73.299105][ T5378] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.614: iget: bad i_size value: 38620345925642 [ 73.299212][ T5378] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.302970][ T5378] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.614: couldn't read orphan inode 15 (err -117) [ 73.303484][ T5378] loop0: lost filesystem error report for type 5 error -117 [ 73.312821][ T5378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.324166][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 73.324243][ T29] audit: type=1400 audit(136.000:2152): avc: denied { write } for pid=5375 comm="syz.0.614" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.441964][ T5380] loop1: detected capacity change from 0 to 128 [ 73.468401][ T29] audit: type=1400 audit(136.120:2153): avc: denied { ioctl } for pid=5370 comm="syz.4.613" path="socket:[11845]" dev="sockfs" ino=11845 ioctlcmd=0x894a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.504042][ T29] audit: type=1400 audit(136.180:2154): avc: denied { connect } for pid=5370 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.533352][ T5391] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 73.538400][ T29] audit: type=1400 audit(136.200:2155): avc: denied { checkpoint_restore } for pid=5379 comm="syz.1.615" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.571688][ T29] audit: type=1400 audit(136.240:2156): avc: denied { create } for pid=5379 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.604244][ T29] audit: type=1400 audit(136.270:2157): avc: denied { write } for pid=5370 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.642794][ T5386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 73.693709][ T5391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 73.839016][ T5391] syz.4.613 (5391) used greatest stack depth: 9536 bytes left [ 73.840683][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.875702][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.875740][ T5281] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.875852][ T5281] bridge_slave_0: entered allmulticast mode [ 73.876466][ T5281] bridge_slave_0: entered promiscuous mode [ 73.878198][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.878301][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.878703][ T5281] bridge_slave_1: entered allmulticast mode [ 73.879833][ T5281] bridge_slave_1: entered promiscuous mode [ 73.903350][ T5281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.905395][ T5281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.911848][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 73.911935][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.911935][ T3425] [ 73.911978][ T3425] EXT4-fs (loop0): Total free blocks count 0 [ 73.912013][ T3425] EXT4-fs (loop0): Free/Dirty block details [ 73.912052][ T3425] EXT4-fs (loop0): free_blocks=0 [ 73.912080][ T3425] EXT4-fs (loop0): dirty_blocks=19 [ 73.912127][ T3425] EXT4-fs (loop0): Block reservation details [ 73.912207][ T3425] EXT4-fs (loop0): i_reserved_data_blocks=19 [ 74.013813][ T29] audit: type=1400 audit(136.680:2158): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.017265][ T5281] team0: Port device team_slave_0 added [ 74.022019][ T5281] team0: Port device team_slave_1 added [ 74.060990][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.079451][ T5281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.079469][ T5281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.081868][ T5281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.082673][ T5281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.082686][ T5281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.082797][ T5281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.324399][ T5281] hsr_slave_0: entered promiscuous mode [ 74.326357][ T5281] hsr_slave_1: entered promiscuous mode [ 74.326603][ T5281] debugfs: 'hsr0' already exists in 'hsr' [ 74.326618][ T5281] Cannot create hsr debugfs directory [ 74.416805][ T29] audit: type=1326 audit(137.080:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a62df559 code=0x7ffc0000 [ 74.416879][ T29] audit: type=1326 audit(137.080:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a62df559 code=0x7ffc0000 [ 74.417607][ T29] audit: type=1326 audit(137.080:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a62df559 code=0x7ffc0000 [ 74.607467][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.801139][ T5450] loop1: detected capacity change from 0 to 1024 [ 74.803564][ T5450] EXT4-fs: Ignoring removed bh option [ 74.819192][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.821024][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.878584][ T5450] loop1: detected capacity change from 0 to 1024 [ 74.879016][ T5450] EXT4-fs: Ignoring removed bh option [ 74.906944][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.909017][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.992403][ T5450] loop1: detected capacity change from 0 to 1024 [ 74.992991][ T5450] EXT4-fs: Ignoring removed bh option [ 75.017381][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.019341][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.062324][ T5450] loop1: detected capacity change from 0 to 1024 [ 75.062732][ T5450] EXT4-fs: Ignoring removed bh option [ 75.086821][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.094860][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.178031][ T5450] loop1: detected capacity change from 0 to 1024 [ 75.178301][ T5450] EXT4-fs: Ignoring removed bh option [ 75.197775][ T5281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.208721][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.212674][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.217175][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.233061][ T5281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.256059][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.266718][ T5281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.287338][ T5450] loop1: detected capacity change from 0 to 1024 [ 75.287668][ T5450] EXT4-fs: Ignoring removed bh option [ 75.287991][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.307898][ T5281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.318152][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.326658][ T5483] loop4: detected capacity change from 0 to 512 [ 75.335860][ T5483] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.335874][ T5483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.343945][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.366046][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.366619][ T5483] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.626: bad orphan inode 131083 [ 75.366724][ T5483] loop4: lost filesystem error report for type 5 error -117 [ 75.368389][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.368443][ C1] EXT4-fs (loop4): initial error at time 138: ext4_orphan_get:1430 [ 75.368508][ C1] EXT4-fs (loop4): last error at time 138: ext4_orphan_get:1430 [ 75.369985][ T5483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.447228][ T5494] loop0: detected capacity change from 0 to 512 [ 75.478468][ T5494] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.478486][ T5494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.491708][ T5494] EXT4-fs (loop0): 1 truncate cleaned up [ 75.526917][ T5483] xt_CT: No such helper "netbios-ns" [ 75.528348][ T5494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.559646][ T5450] loop1: detected capacity change from 0 to 1024 [ 75.559945][ T5450] EXT4-fs: Ignoring removed bh option [ 75.685716][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.705778][ T5450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.723474][ T5281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.731762][ T5281] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.120548][ T5281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.120607][ T5281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.152860][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.152905][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.154286][ T5481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.181399][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.181455][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.243742][ T5512] loop1: detected capacity change from 0 to 512 [ 76.256760][ T5512] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 76.260479][ T5512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.262045][ T5512] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.628: bad orphan inode 15 [ 76.262128][ T5512] loop1: lost filesystem error report for type 5 error -117 [ 76.265767][ T5512] ext4_test_bit(bit=14, block=18) = 1 [ 76.265818][ T5512] is_bad_inode(inode)=0 [ 76.265913][ T5512] NEXT_ORPHAN(inode)=1023 [ 76.265942][ T5512] max_ino=32 [ 76.265966][ T5512] i_nlink=0 [ 76.267040][ T5512] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.628: corrupted xattr block 19: e_value size too large [ 76.267137][ T5512] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.268422][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 76.268485][ C1] EXT4-fs (loop1): initial error at time 138: ext4_orphan_get:1430 [ 76.268555][ C1] EXT4-fs (loop1): last error at time 138: ext4_xattr_delete_inode:2933: inode 15 [ 76.271108][ T5512] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117) [ 76.272113][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.397059][ T5512] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.628: deleted inode referenced: 15 [ 76.412962][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.440125][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 76.503683][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.566126][ T5536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.634'. [ 76.663152][ T5281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.837510][ T5281] veth0_vlan: entered promiscuous mode [ 76.855636][ T5281] veth1_vlan: entered promiscuous mode [ 76.914881][ T5281] veth0_macvtap: entered promiscuous mode [ 76.925685][ T5281] veth1_macvtap: entered promiscuous mode [ 76.954182][ T5281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.975209][ T5281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.088590][ T3425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.092524][ T3425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.092895][ T3425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.093634][ T3425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.474945][ T5619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.802000][ T5636] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.914447][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.121077][ T5604] EXT4-fs (loop0): 1 truncate cleaned up [ 78.132793][ T5604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.175142][ T5604] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 78.411083][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 78.411104][ T29] audit: type=1400 audit(141.080:2196): avc: denied { read } for pid=5663 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.464410][ T3292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.495555][ T29] audit: type=1400 audit(141.160:2197): avc: denied { write } for pid=5667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.547294][ T29] audit: type=1400 audit(141.210:2198): avc: denied { write } for pid=5682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.708715][ T29] audit: type=1400 audit(141.380:2199): avc: denied { write } for pid=5684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.749629][ T29] audit: type=1400 audit(141.420:2200): avc: denied { write } for pid=5699 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.920444][ T29] audit: type=1400 audit(141.590:2201): avc: denied { create } for pid=5701 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.031386][ T5708] netlink: 14 bytes leftover after parsing attributes in process `syz.4.656'. [ 79.084353][ T5713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 79.099730][ T29] audit: type=1400 audit(141.770:2202): avc: denied { sqpoll } for pid=5712 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.100939][ T29] audit: type=1400 audit(141.770:2203): avc: denied { create } for pid=5712 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.242182][ T5722] ext3: Unknown parameter 'fowner' [ 79.396694][ T5724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 79.421348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c020e00: rx timeout, send abort [ 79.421504][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c020e00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 79.467908][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.472913][ T5729] syz_tun: entered allmulticast mode [ 79.519435][ T29] audit: type=1326 audit(142.190:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.0.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 79.519588][ T29] audit: type=1326 audit(142.190:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.0.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 79.648305][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 79.869359][ T5745] set_capacity_and_notify: 3 callbacks suppressed [ 79.869401][ T5745] loop0: detected capacity change from 0 to 512 [ 79.905696][ T5745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.907211][ T5745] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.669: iget: bad i_size value: 2533274857506816 [ 79.921440][ T5745] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.669: iget: bad i_size value: 2533274857506816 [ 79.980319][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 80.058396][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 80.064543][ T5752] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 80.065752][ T5752] bond1 (unregistering): Released all slaves [ 80.110993][ T5754] netlink: 'syz.1.670': attribute type 3 has an invalid length. [ 80.111046][ T5754] netlink: 'syz.1.670': attribute type 2 has an invalid length. [ 80.202753][ T5760] tipc: Started in network mode [ 80.202870][ T5760] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.203048][ T5760] tipc: New replicast peer: 172.20.20.187 [ 80.203350][ T5760] tipc: Enabled bearer , priority 10 [ 80.265859][ T5762] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 80.265879][ T5762] netlink: 55 bytes leftover after parsing attributes in process `syz.2.674'. [ 80.666909][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.768651][ T5777] gtp0: entered promiscuous mode [ 80.768674][ T5777] gtp0: entered allmulticast mode [ 80.777045][ T5773] loop2: detected capacity change from 0 to 512 [ 80.812387][ T5773] EXT4-fs: Ignoring removed orlov option [ 80.832411][ T5773] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.902500][ T5773] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.677: Allocating blocks 41-42 which overlap fs metadata [ 80.902568][ T5773] loop2: lost filesystem error report for type 5 error -117 [ 80.908303][ T5773] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.677: Allocating blocks 41-42 which overlap fs metadata [ 80.909107][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.909294][ C0] EXT4-fs (loop2): initial error at time 143: ext4_mb_mark_diskspace_used:4221 [ 80.909777][ C0] EXT4-fs (loop2): last error at time 143: ext4_mb_mark_diskspace_used:4221 [ 80.965921][ T5790] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 80.981126][ T5773] loop2: lost filesystem error report for type 5 error -117 [ 80.987102][ T5790] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 80.993443][ T5773] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.677: Failed to acquire dquot type 1 [ 80.993545][ T5773] loop2: lost filesystem error report for type 5 error -117 [ 80.993919][ T5773] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 80.994254][ T5773] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #12: comm syz.2.677: corrupted inode contents [ 80.994325][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.997006][ T5773] EXT4-fs error (device loop2): ext4_dirty_inode:7673: inode #12: comm syz.2.677: mark_inode_dirty error [ 80.997091][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.997585][ T5773] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #12: comm syz.2.677: corrupted inode contents [ 80.997714][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.998102][ T5773] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.677: mark_inode_dirty error [ 80.998260][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.998700][ T5773] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #12: comm syz.2.677: corrupted inode contents [ 80.998779][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.999165][ T5773] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 80.999298][ T5773] loop2: lost filesystem error report for type 5 error -117 [ 81.004596][ T5773] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #12: comm syz.2.677: corrupted inode contents [ 81.004683][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.005136][ T5773] EXT4-fs error (device loop2): ext4_truncate:5538: inode #12: comm syz.2.677: mark_inode_dirty error [ 81.005212][ T5773] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.005602][ T5773] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 81.005659][ T5773] loop2: lost filesystem error report for type 5 error -117 [ 81.006914][ T5773] EXT4-fs (loop2): 1 truncate cleaned up [ 81.009841][ T5773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.066434][ T5773] EXT4-fs error (device loop2): __ext4_remount:6923: comm syz.2.677: Abort forced by user [ 81.067197][ T5773] EXT4-fs (loop2): Remounting filesystem read-only [ 81.067240][ T5773] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.229683][ T5773] syz.2.677 (5773) used greatest stack depth: 9416 bytes left [ 81.239303][ T5281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.319025][ T3921] tipc: Node number set to 2886997162 [ 81.359440][ T5802] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.359440][ T5802] The task syz.0.685 (5802) triggered the difference, watch for misbehavior. [ 81.771327][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 82.221028][ T5830] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 82.240062][ T5830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.267883][ T5834] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 82.324864][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 82.401763][ T5842] loop0: detected capacity change from 0 to 164 [ 82.954504][ T5863] syzkaller0: entered promiscuous mode [ 82.954526][ T5863] syzkaller0: entered allmulticast mode [ 82.971539][ T5863] tipc: Started in network mode [ 82.971607][ T5863] tipc: Node identity 52e3f45ccaa5, cluster identity 4711 [ 82.971673][ T5863] tipc: Enabled bearer , priority 0 [ 82.977217][ T5863] tipc: Resetting bearer [ 83.002994][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 83.003100][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 83.041488][ T5863] tipc: Resetting bearer [ 83.052005][ T5863] tipc: Disabling bearer [ 83.130653][ T5869] loop0: detected capacity change from 0 to 512 [ 83.156395][ T5869] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.156421][ T5869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 83.156573][ T5869] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.156655][ T5869] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.712: iget: bad i_size value: 12154761577498 [ 83.156755][ T5869] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.156922][ T5869] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.712: couldn't read orphan inode 13 (err -117) [ 83.157002][ T5869] loop0: lost filesystem error report for type 5 error -117 [ 83.157509][ T5869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.166235][ T5869] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.712: dx entry: limit 65535 != root limit 120 [ 83.166344][ T5869] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.712: Corrupt directory, running e2fsck is recommended [ 83.323632][ T5872] netlink: 280 bytes leftover after parsing attributes in process `syz.4.713'. [ 83.377332][ T5869] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.712: dx entry: limit 65535 != root limit 120 [ 83.379824][ T5869] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.712: Corrupt directory, running e2fsck is recommended [ 83.464662][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 83.464699][ T29] audit: type=1400 audit(146.130:2255): avc: denied { create } for pid=5876 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.630957][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.766470][ T29] audit: type=1400 audit(146.430:2256): avc: denied { create } for pid=5873 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.859774][ T29] audit: type=1326 audit(146.530:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863237][ T29] audit: type=1326 audit(146.530:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863334][ T29] audit: type=1326 audit(146.530:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863370][ T29] audit: type=1326 audit(146.530:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863485][ T29] audit: type=1326 audit(146.530:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863515][ T29] audit: type=1326 audit(146.530:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.863545][ T29] audit: type=1326 audit(146.530:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 83.864657][ T29] audit: type=1326 audit(146.530:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847f17f559 code=0x7ffc0000 [ 84.081087][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.112819][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.152005][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.165229][ T5892] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.210902][ T5908] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 84.210925][ T5908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.722'. [ 84.213329][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.318454][ T5910] loop2: detected capacity change from 0 to 512 [ 84.331868][ T5910] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.370002][ T5910] bridge1: entered promiscuous mode [ 84.370055][ T5910] bridge1: entered allmulticast mode [ 84.385430][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.385728][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.386226][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.386666][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.387091][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.387412][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.388062][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.388304][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.388965][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.389278][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.391701][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.392087][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.392589][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.398574][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.398934][ T5910] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 84.399214][ T5910] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 84.431543][ T12] bridge_slave_1: left allmulticast mode [ 84.431618][ T12] bridge_slave_1: left promiscuous mode [ 84.432070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.447230][ T12] bridge_slave_0: left allmulticast mode [ 84.447301][ T12] bridge_slave_0: left promiscuous mode [ 84.447745][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.585718][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 84.697672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.711068][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.714747][ T12] bond0 (unregistering): Released all slaves [ 84.878758][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 84.884738][ T5933] loop2: detected capacity change from 0 to 512 [ 84.900634][ T12] hsr_slave_0: left promiscuous mode [ 84.901107][ T12] hsr_slave_1: left promiscuous mode [ 84.901986][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.902005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.902455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.902471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.930071][ T5933] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 84.933934][ T12] veth1_macvtap: left promiscuous mode [ 84.934029][ T12] veth0_macvtap: left promiscuous mode [ 84.934199][ T12] veth1_vlan: left promiscuous mode [ 84.934308][ T12] veth0_vlan: left promiscuous mode [ 84.988293][ T5933] EXT4-fs (loop2): 1 orphan inode deleted [ 84.989353][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.045606][ T5281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.091180][ T5948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.091199][ T5948] block device autoloading is deprecated and will be removed. [ 85.168226][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.359136][ T5948] md: could not open device unknown-block(1,4). [ 85.359157][ T5948] md: md_import_device returned -6 [ 85.692309][ T5963] loop2: detected capacity change from 0 to 512 [ 85.715265][ T5956] xt_ecn: cannot match TCP bits for non-tcp packets [ 85.727016][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.860512][ T5975] loop0: detected capacity change from 0 to 1024 [ 85.860903][ T5975] EXT4-fs: Ignoring removed nobh option [ 85.861131][ T5975] EXT4-fs: Ignoring removed bh option [ 85.864882][ T5975] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 85.894636][ T5975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 85.894688][ T5975] System zones: 0-1, 3-12 [ 85.895391][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.979879][ T3935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.992295][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.992409][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.992758][ T5892] bridge_slave_0: entered allmulticast mode [ 86.002548][ T5892] bridge_slave_0: entered promiscuous mode [ 86.014365][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.014524][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.014755][ T5892] bridge_slave_1: entered allmulticast mode [ 86.023613][ T5892] bridge_slave_1: entered promiscuous mode [ 86.093240][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.105009][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.141414][ T5892] team0: Port device team_slave_0 added [ 86.143649][ T5892] team0: Port device team_slave_1 added [ 86.148434][ T5983] loop1: detected capacity change from 0 to 512 [ 86.190675][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 86.191883][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.191895][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.191946][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.192649][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.192665][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.192705][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.284708][ T5892] hsr_slave_0: entered promiscuous mode [ 86.298553][ T5892] hsr_slave_1: entered promiscuous mode [ 86.298854][ T5892] debugfs: 'hsr0' already exists in 'hsr' [ 86.298873][ T5892] Cannot create hsr debugfs directory [ 86.410582][ T5892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.415652][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.416116][ T5892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.434106][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.435306][ T5892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.441363][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.443115][ T5892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.454450][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.503397][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.503434][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.503586][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.503627][ T5892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.576839][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.591579][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.592212][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.616066][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.633521][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.633564][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.634443][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.634475][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.674468][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 86.677466][ T6034] netlink: 'syz.2.743': attribute type 12 has an invalid length. [ 86.697914][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 86.702832][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 86.715764][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 86.821457][ T6047] sctp: [Deprecated]: syz.1.744 (pid 6047) Use of int in max_burst socket option. [ 86.821457][ T6047] Use struct sctp_assoc_value instead [ 86.821687][ T6036] __nla_validate_parse: 1 callbacks suppressed [ 86.821702][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 86.957800][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.978231][ T6069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 87.111559][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 87.159795][ T6087] capability: warning: `syz.1.753' uses 32-bit capabilities (legacy support in use) [ 87.219473][ T6087] TC_ACT_REPEAT abuse ? [ 87.343498][ T5892] veth0_vlan: entered promiscuous mode [ 87.346584][ T5892] veth1_vlan: entered promiscuous mode [ 87.375619][ T5892] veth0_macvtap: entered promiscuous mode [ 87.385399][ T5892] veth1_macvtap: entered promiscuous mode [ 87.406991][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.419111][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.458725][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.458994][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.459102][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.459270][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.512746][ T6117] loop1: detected capacity change from 0 to 512 [ 87.536267][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.573612][ T6126] netlink: 'syz.6.761': attribute type 4 has an invalid length. [ 87.582245][ T6126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.582264][ T6126] block device autoloading is deprecated and will be removed. [ 87.591592][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.688625][ T6137] loop6: detected capacity change from 0 to 512 [ 87.688978][ T6137] EXT4-fs: Ignoring removed oldalloc option [ 87.691066][ T6137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.725747][ T6137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.808909][ T5892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.971295][ T6150] md: could not open device unknown-block(1,12). [ 87.971346][ T6150] md: error, md_import_device() returned -6 [ 88.197139][ T6166] loop6: detected capacity change from 0 to 512 [ 88.321264][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.775'. [ 88.366836][ T6172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.510650][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 88.510668][ T29] audit: type=1400 audit(151.180:2411): avc: denied { create } for pid=6178 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 88.607647][ T29] audit: type=1400 audit(151.270:2412): avc: denied { getopt } for pid=6176 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.748306][ T29] audit: type=1400 audit(151.410:2413): avc: denied { read write } for pid=6189 comm="syz.2.783" name="kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 88.748449][ T29] audit: type=1400 audit(151.410:2414): avc: denied { open } for pid=6189 comm="syz.2.783" path="/30/proc_mnt/kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 88.750374][ T29] audit: type=1400 audit(151.420:2415): avc: denied { ioctl } for pid=6189 comm="syz.2.783" path="socket:[14341]" dev="sockfs" ino=14341 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.751433][ T29] audit: type=1400 audit(151.420:2416): avc: denied { ioctl } for pid=6189 comm="syz.2.783" path="socket:[14342]" dev="sockfs" ino=14342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.916685][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.6.784'. [ 88.941932][ T29] audit: type=1400 audit(151.610:2417): avc: denied { bind } for pid=6189 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.108579][ T6201] loop6: detected capacity change from 0 to 128 [ 89.160636][ T6200] ip_tables: iptables: counters copy to user failed while replacing table [ 89.161864][ T6200] 9pnet_fd: p9_fd_create_tcp (6200): problem connecting socket to 127.0.0.1 [ 89.172317][ T29] audit: type=1400 audit(151.830:2418): avc: denied { connect } for pid=6199 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.350723][ T6209] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 89.352694][ T6209] veth0_macvtap: left promiscuous mode [ 89.402253][ T6210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.788'. [ 89.406476][ T6210] ip_tables: iptables: counters copy to user failed while replacing table [ 89.412423][ T29] audit: type=1400 audit(152.080:2419): avc: denied { setattr } for pid=6208 comm="syz.2.788" path="socket:[14393]" dev="sockfs" ino=14393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.501856][ T6214] loop2: detected capacity change from 0 to 128 [ 89.523813][ T6214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.547667][ T5281] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.587157][ T6219] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 89.602601][ T6219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.602616][ T6219] block device autoloading is deprecated and will be removed. [ 89.606255][ T6221] loop1: detected capacity change from 0 to 512 [ 89.630200][ T6221] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.793: iget: bad i_size value: 38620345925642 [ 89.630351][ T6221] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.634264][ T6221] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.793: couldn't read orphan inode 15 (err -117) [ 89.634438][ T6221] loop1: lost filesystem error report for type 5 error -117 [ 89.653838][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.659737][ T29] audit: type=1400 audit(152.320:2420): avc: denied { write } for pid=6220 comm="syz.1.793" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.746216][ T6219] md: could not open device unknown-block(1,4). [ 89.746270][ T6219] md: error, md_import_device() returned -6 [ 89.794307][ T6224] md: could not open device unknown-block(1,5). [ 89.794333][ T6224] md: error, md_import_device() returned -6 [ 89.810995][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.958721][ T6232] loop1: detected capacity change from 0 to 128 [ 90.042201][ T6232] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 90.042232][ T6232] FAT-fs (loop1): Filesystem has been set read-only [ 90.391402][ T1042] hid (null): invalid report_size 6930 [ 90.391429][ T1042] hid (null): report_id 0 is invalid [ 90.406285][ T1042] hid-generic 0001:0F08:07AD.0001: invalid report_size 6930 [ 90.415996][ T1042] hid-generic 0001:0F08:07AD.0001: item 0 2 1 7 parsing failed [ 90.416172][ T1042] hid-generic 0001:0F08:07AD.0001: probe with driver hid-generic failed with error -22 [ 90.468049][ T6264] netlink: 'syz.0.807': attribute type 63 has an invalid length. [ 90.468074][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 91.007298][ T6283] loop1: detected capacity change from 0 to 1024 [ 91.011741][ T6283] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 91.011903][ T6283] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 91.012086][ T6283] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.013960][ T6283] EXT4-fs (loop1): invalid journal inode [ 91.014040][ T6283] EXT4-fs (loop1): can't get journal size [ 91.017630][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.075797][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.095288][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 91.095391][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 91.096141][ T6295] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 91.165644][ T6299] netlink: 'syz.1.819': attribute type 4 has an invalid length. [ 91.861293][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.837'. [ 91.905031][ T6353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.905048][ T6353] block device autoloading is deprecated and will be removed. [ 91.963490][ T6365] ip_tables: iptables: counters copy to user failed while replacing table [ 92.167492][ T6387] loop2: detected capacity change from 0 to 1024 [ 92.177514][ T6387] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.191230][ T6387] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 92.191337][ T6387] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.192120][ T6387] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 92.192155][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.192304][ T6387] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 92.192329][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.192576][ T6387] EXT4-fs error (device loop2): ext4_quota_write:7509: inode #3: comm syz.2.847: mark_inode_dirty error [ 92.192618][ T6387] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.192985][ T6387] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.847: Failed to acquire dquot type 0 [ 92.193009][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.193315][ T6387] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 92.193350][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.193420][ T6387] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 92.193490][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.193561][ T6387] EXT4-fs error (device loop2): ext4_ext_truncate:4565: inode #15: comm syz.2.847: mark_inode_dirty error [ 92.193584][ T6387] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.193685][ T6387] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 92.193735][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.195809][ T6387] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 92.195835][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.195916][ T6387] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 92.195940][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.196047][ T6387] EXT4-fs error (device loop2): __ext4_get_inode_loc:5733: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 92.196081][ T6387] loop2: lost filesystem error report for type 5 error -117 [ 92.196223][ T6387] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 92.196327][ T6387] EXT4-fs error (device loop2): ext4_truncate:5538: inode #15: comm syz.2.847: mark_inode_dirty error [ 92.196404][ T6387] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.196500][ T6387] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 92.196589][ T6387] EXT4-fs (loop2): 1 truncate cleaned up [ 92.204694][ C1] EXT4-fs (loop2): error count since last fsck: 14 [ 92.204723][ C1] EXT4-fs (loop2): initial error at time 154: __ext4_get_inode_loc:5733 [ 92.204745][ C1] EXT4-fs (loop2): last error at time 154: ext4_process_orphan:346 [ 92.273798][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.319362][ T6387] EXT4-fs error (device loop2): ext4_search_dir:1476: inode #2: block 16: comm syz.2.847: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.486367][ T6390] loop6: detected capacity change from 0 to 128 [ 92.651025][ T5281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.757994][ T6404] loop0: detected capacity change from 0 to 512 [ 93.312169][ T6415] loop0: detected capacity change from 0 to 512 [ 93.312612][ T6415] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 94.377207][ T6395] loop1: detected capacity change from 0 to 4096 [ 94.457743][ T6395] ext2: Unknown parameter 'dont_appraise' [ 94.555817][ T6427] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 94.587240][ T6427] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.587260][ T6427] block device autoloading is deprecated and will be removed. [ 94.798949][ T6435] loop0: detected capacity change from 0 to 512 [ 94.799353][ T6435] EXT4-fs: dax option not supported [ 94.848223][ T6429] Cannot find del_set index 0 as target [ 95.063896][ T6433] loop1: detected capacity change from 0 to 1024 [ 95.214034][ T6397] loop2: detected capacity change from 0 to 4096 [ 95.239397][ T6397] ext2: Unknown parameter 'dont_appraise' [ 95.251736][ T6433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.252279][ T6433] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.254261][ T6433] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.254479][ T6433] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.255394][ T6433] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.862: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.255481][ T6433] fserror_report: 2 callbacks suppressed [ 95.255590][ T6433] loop1: lost filesystem error report for type 5 error -117 [ 95.256543][ T6433] EXT4-fs (loop1): 1 orphan inode deleted [ 95.257744][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.360707][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 95.360809][ T29] audit: type=1400 audit(158.030:2442): avc: denied { name_bind } for pid=6432 comm="syz.1.862" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 95.363539][ T29] audit: type=1400 audit(158.030:2443): avc: denied { read } for pid=6432 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.445818][ T6456] loop6: detected capacity change from 0 to 512 [ 95.446183][ T6456] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 95.458071][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.515993][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.516197][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.523623][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.524022][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.527017][ T29] audit: type=1400 audit(158.190:2444): avc: denied { write } for pid=6457 comm="syz.2.871" path="socket:[15656]" dev="sockfs" ino=15656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.541524][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.543062][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.592525][ T3282] ================================================================== [ 95.592571][ T3282] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 95.592618][ T3282] [ 95.592624][ T3282] write to 0xffff88811b84a910 of 8 bytes by task 2978 on cpu 1: [ 95.592644][ T3282] dentry_kill+0x139/0x540 [ 95.592687][ T3282] finish_dput+0x16/0x1d0 [ 95.592716][ T3282] dput+0x43/0x50 [ 95.592742][ T3282] lookup_one_qstr_excl+0x156/0x240 [ 95.592780][ T3282] filename_unlinkat+0x149/0x410 [ 95.592805][ T3282] __se_sys_unlink+0x2b/0xe0 [ 95.592825][ T3282] __x64_sys_unlink+0x1f/0x30 [ 95.592843][ T3282] x64_sys_call+0x18ee/0x2550 [ 95.592873][ T3282] do_syscall_64+0x112/0x360 [ 95.592912][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.592941][ T3282] [ 95.592949][ T3282] read to 0xffff88811b84a910 of 8 bytes by task 3282 on cpu 0: [ 95.592970][ T3282] fast_dput+0x64/0x300 [ 95.592991][ T3282] dput+0x1a/0x50 [ 95.593012][ T3282] filename_unlinkat+0x217/0x410 [ 95.593036][ T3282] __se_sys_unlink+0x2b/0xe0 [ 95.593059][ T3282] __x64_sys_unlink+0x1f/0x30 [ 95.593081][ T3282] x64_sys_call+0x18ee/0x2550 [ 95.593108][ T3282] do_syscall_64+0x112/0x360 [ 95.593144][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.593171][ T3282] [ 95.593177][ T3282] value changed: 0xffff8882378a1e60 -> 0x0000000000000000 [ 95.593192][ T3282] [ 95.593205][ T3282] Reported by Kernel Concurrency Sanitizer on: [ 95.593216][ T3282] CPU: 0 UID: 0 PID: 3282 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 95.593241][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.593256][ T3282] ================================================================== [ 95.684802][ T6471] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.262292][ T29] audit: type=1400 audit(160.930:2445): avc: denied { write } for pid=6475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.298117][ T29] audit: type=1400 audit(160.960:2446): avc: denied { write } for pid=6486 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.705165][ T29] audit: type=1400 audit(161.370:2447): avc: denied { write } for pid=6489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.739912][ T29] audit: type=1400 audit(161.410:2448): avc: denied { write } for pid=6500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.837815][ T29] audit: type=1400 audit(161.500:2449): avc: denied { write } for pid=6503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.871951][ T29] audit: type=1400 audit(161.540:2450): avc: denied { write } for pid=6514 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.308173][ T29] audit: type=1400 audit(161.970:2451): avc: denied { write } for pid=6517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1