last executing test programs: 6m43.770619089s ago: executing program 32 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@remote, 0x8000003a, r2}) 6m24.198439713s ago: executing program 33 (id=551): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 5m52.004948099s ago: executing program 34 (id=1842): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) 3m39.272147952s ago: executing program 35 (id=5441): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7fffffff}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 2m29.326491165s ago: executing program 36 (id=7690): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 2m21.927621445s ago: executing program 2 (id=7874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 2m21.673028734s ago: executing program 2 (id=7882): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x8c850, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m20.957553116s ago: executing program 37 (id=7904): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 2m20.746348691s ago: executing program 2 (id=7909): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x95, 0x4}, &(0x7f0000000040)=0xc) 2m19.891289394s ago: executing program 2 (id=7929): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 2m19.749187764s ago: executing program 2 (id=7930): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m19.748883624s ago: executing program 2 (id=7931): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 2m14.629170628s ago: executing program 38 (id=7997): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90) 2m4.735953189s ago: executing program 39 (id=7931): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1m58.825764451s ago: executing program 0 (id=8337): ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 1m58.69971097s ago: executing program 0 (id=8343): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfff, 0x3}, 0x0, 0x10001, 0xda, 0x5, 0x1, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20800006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1m58.555402471s ago: executing program 0 (id=8348): r0 = socket(0x840000000002, 0x3, 0xff) socket(0x10, 0x803, 0x0) close(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) 1m58.528559732s ago: executing program 0 (id=8350): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m58.413579981s ago: executing program 0 (id=8352): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m58.357784735s ago: executing program 0 (id=8354): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1m43.333253371s ago: executing program 40 (id=8354): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1m42.970510468s ago: executing program 8 (id=8751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x34, r1, 0x301, 0x70bd2b, 0x25dfdbfb, {0x21}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20004814) 1m42.942572739s ago: executing program 8 (id=8752): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m42.398104579s ago: executing program 8 (id=8764): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) listen(r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x8c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m42.380709251s ago: executing program 8 (id=8765): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0\x00', &(0x7f0000000100), 0x1000) 1m42.364999801s ago: executing program 8 (id=8766): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0x0, [0xc414, 0x5, 0xfd, 0x8, 0x401], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78) 1m41.550047861s ago: executing program 8 (id=8769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m41.492343845s ago: executing program 41 (id=8769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.663460335s ago: executing program 4 (id=10822): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x8, 0x5, 0xa, 0xa, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7406, 0x0, &(0x7f00000003c0)="452846938cebbd031f4d", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 19.420561753s ago: executing program 4 (id=10826): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 19.309246561s ago: executing program 4 (id=10829): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 19.283925663s ago: executing program 4 (id=10830): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 18.990966424s ago: executing program 4 (id=10835): setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x9) 18.648141339s ago: executing program 4 (id=10850): unshare(0x24020400) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) 18.588240694s ago: executing program 42 (id=10850): unshare(0x24020400) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) 15.051413752s ago: executing program 5 (id=10901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x1, 0x0, 0x4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 14.981200657s ago: executing program 5 (id=10904): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x2003, 0x0, {0x3}}) io_uring_enter(r2, 0x1, 0x20, 0x1, 0x0, 0x0) 14.083805922s ago: executing program 5 (id=10916): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18090000080000000000000000000000850000001100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 13.96838276s ago: executing program 5 (id=10920): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 13.911663964s ago: executing program 5 (id=10922): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000002500)=0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x5, 0x1000, r0, 0x0}]) 13.773761535s ago: executing program 5 (id=10926): setuid(0xee00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 13.733114548s ago: executing program 43 (id=10926): setuid(0xee00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 4.092516221s ago: executing program 9 (id=11097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.981270949s ago: executing program 9 (id=11098): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3.14462804s ago: executing program 9 (id=11126): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.032284888s ago: executing program 9 (id=11132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 2.958079414s ago: executing program 9 (id=11136): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2.901231948s ago: executing program 9 (id=11138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x8, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x1, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xa, 0x0, 0x8}}}}, 0x36) 2.32970593s ago: executing program 1 (id=11157): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0xa6ff, &(0x7f0000000300)={&(0x7f00000007c0)={0x38, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) 2.251511665s ago: executing program 1 (id=11159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.091452007s ago: executing program 1 (id=11163): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) truncate(&(0x7f0000000900)='./file1\x00', 0x6) 2.06041101s ago: executing program 3 (id=11165): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.164125724s ago: executing program 3 (id=11178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.131477527s ago: executing program 1 (id=11180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000300)='r', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1, &(0x7f0000005140)) 1.09123863s ago: executing program 3 (id=11182): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x11ce, &(0x7f0000002440)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/142, 0x3b, 0x8e, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.047241604s ago: executing program 7 (id=11184): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x1, @remote, 0x4}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 933.164261ms ago: executing program 6 (id=11186): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 778.351273ms ago: executing program 7 (id=11187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d90300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 771.728213ms ago: executing program 3 (id=11188): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c0002800800014000000004300001806e6174002400028008000340000000140800014000000000080002400000000208000440000000120900010073797a3000fcd00bdfe6d475af"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 754.551725ms ago: executing program 3 (id=11189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback, 0xb}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) 726.946516ms ago: executing program 6 (id=11190): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendfile(r1, r0, &(0x7f0000000000)=0x6c92d8b5, 0x200100) 726.343357ms ago: executing program 7 (id=11191): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x20) 707.146038ms ago: executing program 7 (id=11192): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) personality(0xfe47fef9f5ff7379) 602.010155ms ago: executing program 6 (id=11193): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 576.192747ms ago: executing program 7 (id=11194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 507.834523ms ago: executing program 6 (id=11195): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x1, 0x43a13d76, 0x7, 0x9, 0x6, 0x21, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 457.344166ms ago: executing program 7 (id=11196): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@msize={'msize', 0x3d, 0x280000}}]}}) write$P9_RVERSION(r2, 0x0, 0xc8) 405.54872ms ago: executing program 6 (id=11197): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x0, 0xc3b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 324.739426ms ago: executing program 3 (id=11198): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 240.466272ms ago: executing program 1 (id=11199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 31.651337ms ago: executing program 6 (id=11200): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@minixdf}, {@debug}, {@grpjquota}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x22) 0s ago: executing program 1 (id=11201): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000080), 0x4, 0x49b, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): pat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 388.924137][ T28] audit: type=1326 audit(2000001319.058:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 388.950460][ T28] audit: type=1326 audit(2000001319.058:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 388.974663][ T3580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.974912][T27858] Bluetooth: hci0: command 0x1003 tx timeout [ 388.987334][ T28] audit: type=1326 audit(2000001319.078:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 389.022305][ T28] audit: type=1326 audit(2000001319.078:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 389.046839][ T28] audit: type=1326 audit(2000001319.108:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 389.071254][ T28] audit: type=1326 audit(2000001319.108:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 389.096054][ T28] audit: type=1326 audit(2000001319.108:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 389.155541][T27886] set_capacity_and_notify: 5 callbacks suppressed [ 389.155561][T27886] loop6: detected capacity change from 0 to 8192 [ 389.400280][T27902] loop4: detected capacity change from 0 to 512 [ 389.430617][T27902] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 389.442347][T27902] System zones: 0-2, 18-18, 34-34 [ 389.449785][T27902] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 389.477062][T27902] EXT4-fs (loop4): Remounting filesystem read-only [ 389.484484][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 389.490940][ C1] EXT4-fs (loop4): initial error at time 2000001319: ext4_mb_generate_buddy:1317 [ 389.500746][ C1] EXT4-fs (loop4): last error at time 2000001319: ext4_mb_generate_buddy:1317 [ 389.510302][T27902] EXT4-fs (loop4): 1 truncate cleaned up [ 389.516989][T27902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.530728][T27902] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.531413][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.554898][T27902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.574988][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.586783][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 389.953867][ T50] tipc: Subscription rejected, illegal request [ 390.228112][T27967] loop6: detected capacity change from 0 to 2048 [ 390.259336][T27967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.289587][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.324505][ T3580] Bluetooth: hci1: command 0x1003 tx timeout [ 390.324700][T19081] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 390.418981][T27981] team0 (unregistering): Port device team_slave_0 removed [ 390.428959][T27981] team0 (unregistering): Port device team_slave_1 removed [ 390.660665][T27987] Cannot find add_set index 0 as target [ 391.179380][T28017] loop5: detected capacity change from 0 to 256 [ 391.683812][T28055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9597'. [ 391.770103][T28071] tipc: Started in network mode [ 391.775418][T28071] tipc: Node identity ac14140f, cluster identity 4711 [ 391.782443][T28071] tipc: Enabled bearer , priority 10 [ 392.559922][T28119] loop1: detected capacity change from 0 to 512 [ 392.613872][T28119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 392.643151][T28119] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.9626: bad orphan inode 131083 [ 392.654662][T28119] loop1: lost filesystem error report for type 5 error -117 [ 392.655312][T28119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.700426][T28124] loop5: detected capacity change from 0 to 512 [ 392.722331][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.893247][T28134] loop5: detected capacity change from 0 to 4096 [ 392.900307][ T3611] tipc: Node number set to 2886997007 [ 392.921761][T28134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.047747][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.281507][T28181] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.9653'. [ 393.590467][T28206] team0 (unregistering): Port device team_slave_0 removed [ 393.765162][T28206] team0 (unregistering): Port device team_slave_1 removed [ 393.904654][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9674'. [ 393.935499][T28225] loop5: detected capacity change from 0 to 8192 [ 394.032557][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 394.032624][ T28] audit: type=1326 audit(2000001324.238:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.3.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 394.043419][T28241] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.107580][ T28] audit: type=1326 audit(2000001324.248:15145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.3.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 394.132566][ T28] audit: type=1326 audit(2000001324.248:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.3.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 394.156696][ T28] audit: type=1326 audit(2000001324.248:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.3.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 394.547599][ T28] audit: type=1326 audit(2000001324.758:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc1c8dc819 code=0x0 [ 394.647834][T28267] loop6: detected capacity change from 0 to 2048 [ 394.681914][T28267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.745619][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.843516][T28276] loop1: detected capacity change from 0 to 256 [ 394.884843][T28276] FAT-fs (loop1): Directory bread(block 1285) failed [ 394.914712][T28276] FAT-fs (loop1): Directory bread(block 1286) failed [ 394.924819][T28276] FAT-fs (loop1): Directory bread(block 1287) failed [ 394.941905][T28276] FAT-fs (loop1): Directory bread(block 1288) failed [ 394.958847][T28276] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 395.030579][T28285] bridge0: entered promiscuous mode [ 395.083358][T28287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9696'. [ 395.332691][T28311] loop1: detected capacity change from 0 to 512 [ 395.344960][T28311] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.382781][T28311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 395.403352][T28311] Quota error (device loop1): write_blk: dquota write failed [ 395.410983][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 395.411026][ C1] EXT4-fs (loop1): initial error at time 2000001325: ext4_mb_generate_buddy:1317 [ 395.411049][ C1] EXT4-fs (loop1): last error at time 2000001325: ext4_mb_generate_buddy:1317 [ 395.429062][T28325] loop4: detected capacity change from 0 to 128 [ 395.436650][T28311] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 395.452433][T28311] Quota error (device loop1): write_blk: dquota write failed [ 395.460735][T28325] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 395.473133][T28325] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 395.481798][T28325] FAT-fs (loop4): Filesystem has been set read-only [ 395.484692][T28311] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 395.488926][T28325] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 395.498991][T28311] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.9708: Failed to acquire dquot type 1 [ 395.518470][T28311] loop1: lost filesystem error report for type 5 error -28 [ 395.521181][T28311] EXT4-fs (loop1): 1 truncate cleaned up [ 395.539604][T28311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.653352][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.799612][T28353] syzkaller1: entered promiscuous mode [ 395.821133][T28353] syzkaller1: entered allmulticast mode [ 395.836353][T28355] netlink: 'syz.6.9729': attribute type 29 has an invalid length. [ 395.886329][T28363] netlink: 'syz.6.9729': attribute type 29 has an invalid length. [ 395.895882][T28355] netlink: 500 bytes leftover after parsing attributes in process `syz.6.9729'. [ 396.078411][T28397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=28397 comm=syz.6.9747 [ 396.095989][ C1] sd 0:0:1:0: [sda] tag#6028 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 396.097451][T28397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9747'. [ 396.106523][ C1] sd 0:0:1:0: [sda] tag#6028 CDB: Read(6) 08 00 00 00 00 00 [ 396.140498][T28402] Invalid argument reading file caps for ./file0 [ 396.352615][T28424] loop5: detected capacity change from 0 to 8192 [ 396.762206][T28428] loop6: detected capacity change from 0 to 512 [ 396.770240][T28428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.779745][T28428] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.791447][T28428] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 396.800109][T28428] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 396.821062][T28428] EXT4-fs (loop6): 1 truncate cleaned up [ 396.827383][T28428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.848809][T28428] EXT4-fs (loop6): shut down requested (2) [ 396.876204][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.440528][T28467] loop4: detected capacity change from 0 to 512 [ 397.480524][T28474] loop6: detected capacity change from 0 to 512 [ 397.495378][T28467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.514943][T28474] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 397.531330][T28467] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.542998][T28474] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 397.561476][T28474] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.9782: bad orphan inode 4 [ 397.572537][T28474] loop6: lost filesystem error report for type 5 error -117 [ 397.572797][T28474] EXT4-fs (loop6): Remounting filesystem read-only [ 397.573993][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.580394][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 397.580414][ C1] EXT4-fs (loop6): initial error at time 2000001327: ext4_orphan_get:1423 [ 397.580454][ C1] EXT4-fs (loop6): last error at time 2000001327: ext4_orphan_get:1423 [ 397.580583][T28474] EXT4-fs (loop6): 1 orphan inode deleted [ 397.625929][T28474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.754959][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.846254][ T28] audit: type=1326 audit(2000001328.058:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.1.9786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 398.433360][T28524] loop6: detected capacity change from 0 to 1024 [ 398.459382][T28524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.536935][T28524] EXT4-fs (loop6): shut down requested (0) [ 398.615182][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.720862][T28547] loop4: detected capacity change from 0 to 128 [ 398.776191][ T1507] IPVS: starting estimator thread 0... [ 398.867515][T28560] ip6_vti0 speed is unknown, defaulting to 1000 [ 398.867915][T28561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 398.894698][T28556] IPVS: using max 2544 ests per chain, 127200 per kthread [ 398.918753][T28561] System zones: 1-12 [ 398.923141][T28561] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.9814: Directory hole found for htree index block 0 [ 398.939502][T28561] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 398.944568][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 398.960147][ C0] EXT4-fs (loop5): initial error at time 2000001329: dx_probe:791: inode 2 [ 398.967403][T28561] EXT4-fs (loop5): Remounting filesystem read-only [ 398.968967][ C0] EXT4-fs (loop5): last error at time 2000001329: dx_probe:791: inode 2 [ 399.077866][T28561] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 399.109218][T28561] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 399.160392][T28561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.198198][T28573] EXT4-fs: Ignoring removed oldalloc option [ 399.218528][T28573] EXT4-fs (loop4): 1 truncate cleaned up [ 399.237058][T28573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.333960][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.357878][T28581] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.386605][T28581] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 399.445298][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.517413][T28587] netlink: 'syz.4.9825': attribute type 6 has an invalid length. [ 399.533924][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9816'. [ 399.545236][T28587] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9825'. [ 399.829975][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 399.829994][ T28] audit: type=1326 audit(2000001330.038:15192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28615 comm="syz.4.9837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 399.862180][ T28] audit: type=1326 audit(2000001330.068:15193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28615 comm="syz.4.9837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 399.886660][ T28] audit: type=1326 audit(2000001330.068:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28615 comm="syz.4.9837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 399.911195][ T28] audit: type=1326 audit(2000001330.068:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28615 comm="syz.4.9837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.017095][ T28] audit: type=1400 audit(2000001330.228:15196): avc: denied { accept } for pid=28632 comm="syz.6.9845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.254255][T28659] set_capacity_and_notify: 5 callbacks suppressed [ 400.254322][T28659] loop1: detected capacity change from 0 to 1024 [ 400.276372][T28659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 400.298806][T28659] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.315236][T28659] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.9857: lblock 0 mapped to illegal pblock 0 (length 1) [ 400.347360][ T28] audit: type=1326 audit(2000001330.558:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28666 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.371323][ T28] audit: type=1326 audit(2000001330.558:15198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28666 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.396554][ T28] audit: type=1326 audit(2000001330.558:15199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28666 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.421076][T28659] EXT4-fs (loop1): Remounting filesystem read-only [ 400.427860][ T28] audit: type=1326 audit(2000001330.558:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28666 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.438270][T28667] loop4: detected capacity change from 0 to 256 [ 400.453323][ T28] audit: type=1326 audit(2000001330.558:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28666 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc1c8dc819 code=0x7ffc0000 [ 400.529122][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 400.595709][T28678] loop1: detected capacity change from 0 to 512 [ 400.608528][T28678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 400.620222][T28678] EXT4-fs (loop1): orphan cleanup on readonly fs [ 400.634548][T28678] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 400.653241][T28686] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9867'. [ 400.673412][T28678] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 400.690342][T28678] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.9865: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 400.708862][T28678] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 400.709708][T28678] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.9865: couldn't read orphan inode 13 (err -117) [ 400.719150][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 400.719174][ C0] EXT4-fs (loop1): last error at time 2000001330: ext4_ext_check_inode:521: inode 13 [ 400.737793][T28692] loop4: detected capacity change from 0 to 512 [ 400.750020][T28678] loop1: lost filesystem error report for type 5 error -117 [ 400.755440][T28678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.779101][T28678] EXT4-fs (loop1): shut down requested (0) [ 400.804068][T28692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.817520][T28692] ext4 filesystem being mounted at /393/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.828957][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.855655][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.934871][T28705] loop4: detected capacity change from 0 to 512 [ 400.964136][T28705] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 400.991244][T28705] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 401.006260][T28705] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.9875: Failed to acquire dquot type 1 [ 401.018435][T28705] loop4: lost filesystem error report for type 5 error -28 [ 401.024467][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 401.035720][T28705] EXT4-fs (loop4): 1 truncate cleaned up [ 401.038883][ C0] EXT4-fs (loop4): initial error at time 2000001331: ext4_mb_generate_buddy:1317 [ 401.045437][T28705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.053919][ C0] EXT4-fs (loop4): last error at time 2000001331: ext4_acquire_dquot:7026 [ 401.083560][T28705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.097986][T28705] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 401.116585][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.379849][T28730] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.517966][T14312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.614268][T14312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.653397][T28754] netlink: 'syz.6.9895': attribute type 5 has an invalid length. [ 401.700983][T14312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.731796][T28761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.748281][ T3396] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.755407][ T3396] syz2: Port: 1 Link ACTIVE [ 401.760321][T28746] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.769522][T14312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.785448][ T3396] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.870563][T14312] bridge_slave_1: left allmulticast mode [ 401.876438][T14312] bridge_slave_1: left promiscuous mode [ 401.882186][T14312] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.890484][T14312] bridge_slave_0: left allmulticast mode [ 401.896422][T14312] bridge_slave_0: left promiscuous mode [ 401.902211][T14312] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.051826][T14312] tipc: Disabling bearer [ 402.057477][T14312] tipc: Left network mode [ 402.088490][T28746] chnl_net:caif_netlink_parms(): no params data found [ 402.136940][T28785] loop5: detected capacity change from 0 to 512 [ 402.161166][T28785] EXT4-fs (loop5): 1 truncate cleaned up [ 402.175041][T28785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.191881][T14312] hsr_slave_0: left promiscuous mode [ 402.200249][T14312] hsr_slave_1: left promiscuous mode [ 402.201607][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.208231][T14312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.222581][T14312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.236503][T14312] veth1_macvtap: left promiscuous mode [ 402.242158][T14312] veth0_macvtap: left promiscuous mode [ 402.254693][T14312] veth1_vlan: left promiscuous mode [ 402.259095][T28796] loop5: detected capacity change from 0 to 1024 [ 402.266535][T14312] veth0_vlan: left promiscuous mode [ 402.297443][T28796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.315304][T28796] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.361461][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.421499][T28812] gretap0: entered promiscuous mode [ 402.436596][T28812] bridge0: left promiscuous mode [ 402.444083][T28812] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.453463][T28812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.502040][T28746] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.510618][T28746] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.518632][T28746] bridge_slave_0: entered allmulticast mode [ 402.525820][T28746] bridge_slave_0: entered promiscuous mode [ 402.536276][T28746] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.543693][T28746] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.551637][T28746] bridge_slave_1: entered allmulticast mode [ 402.558615][T28746] bridge_slave_1: entered promiscuous mode [ 402.593515][T28746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.605033][T28746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.626760][T28746] team0: Port device team_slave_0 added [ 402.637554][T28746] team0: Port device team_slave_1 added [ 402.689380][T28746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.707438][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.734255][T28746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.771415][T28746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.780219][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.807047][T28746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.894860][T28746] hsr_slave_0: entered promiscuous mode [ 402.911140][T28746] hsr_slave_1: entered promiscuous mode [ 402.926196][T28746] debugfs: 'hsr0' already exists in 'hsr' [ 402.934079][T28746] Cannot create hsr debugfs directory [ 402.973565][T28864] loop5: detected capacity change from 0 to 128 [ 403.081402][T28857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.158248][T28884] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9928'. [ 403.185500][T28884] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9928'. [ 403.251407][T28888] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.285272][T28895] loop6: detected capacity change from 0 to 1024 [ 403.302388][T28895] EXT4-fs: inline encryption not supported [ 403.334676][T28895] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 403.372278][T28895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.537953][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.550486][T28923] loop1: detected capacity change from 0 to 512 [ 403.563865][T28923] EXT4-fs: Ignoring removed oldalloc option [ 403.571840][T28923] EXT4-fs (loop1): 1 truncate cleaned up [ 403.584363][T28923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.681728][T28937] EXT4-fs: Ignoring removed oldalloc option [ 403.738071][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.760875][T28937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.788431][T28937] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.9943: iget: bad i_size value: 38620345925642 [ 403.804591][T28937] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.804830][T28937] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.9943: couldn't read orphan inode 15 (err -117) [ 403.826217][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 403.826240][ C0] EXT4-fs (loop6): initial error at time 2000001334: ext4_orphan_get:1397: inode 15 [ 403.826274][ C0] EXT4-fs (loop6): last error at time 2000001334: ext4_orphan_get:1397: inode 15 [ 403.860518][T28937] loop6: lost filesystem error report for type 5 error -117 [ 403.909350][T28937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.963109][T28746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.988671][T28746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.004805][T28746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.024055][T28746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.031720][T28969] EXT4-fs: Ignoring removed oldalloc option [ 404.063995][T28969] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 404.114393][T28969] EXT4-fs (loop1): 1 truncate cleaned up [ 404.122827][T28969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.192296][T28746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.205071][T28746] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.214848][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.222192][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.243293][T28746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.263490][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.293398][T28746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.316176][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.323299][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.370045][ T36] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 404.427551][ T36] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 404.464322][ T36] EXT4-fs (loop6): This should not happen!! Data will be lost [ 404.464322][ T36] [ 404.510492][ T36] EXT4-fs (loop6): Total free blocks count 0 [ 404.516132][T28746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.538984][ T36] EXT4-fs (loop6): Free/Dirty block details [ 404.566758][ T36] EXT4-fs (loop6): free_blocks=0 [ 404.571801][ T36] EXT4-fs (loop6): dirty_blocks=16028 [ 404.602722][ T36] EXT4-fs (loop6): Block reservation details [ 404.608981][ T36] EXT4-fs (loop6): i_reserved_data_blocks=16028 [ 404.677886][ T36] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 404.749328][T25612] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 404.803702][T29045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9964'. [ 404.839222][T29045] bond1: option primary_reselect: invalid value (8) [ 404.857217][T29045] bond1 (unregistering): Released all slaves [ 404.877696][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 404.877716][ T28] audit: type=1326 audit(2000001335.088:15245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.1.9965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 404.912554][ T28] audit: type=1326 audit(2000001335.128:15246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.1.9965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 404.941150][ T28] audit: type=1326 audit(2000001335.128:15247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.1.9965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 404.947258][T28746] veth0_vlan: entered promiscuous mode [ 404.973274][T28746] veth1_vlan: entered promiscuous mode [ 404.980010][ T28] audit: type=1326 audit(2000001335.128:15248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.1.9965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 405.024227][T28746] veth0_macvtap: entered promiscuous mode [ 405.033441][T28746] veth1_macvtap: entered promiscuous mode [ 405.054145][T28746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.083752][T28746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.099702][T29055] EXT4-fs: Ignoring removed orlov option [ 405.135454][T25372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.149865][T25372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.169918][T25372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.191411][ T116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.192766][T29055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.321350][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.350521][ T28] audit: type=1326 audit(2000001335.558:15249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.391511][ T28] audit: type=1326 audit(2000001335.558:15250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.416958][ T28] audit: type=1326 audit(2000001335.588:15251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.424036][T29100] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.441982][ T28] audit: type=1326 audit(2000001335.588:15252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.497243][T29104] set_capacity_and_notify: 3 callbacks suppressed [ 405.497262][T29104] loop6: detected capacity change from 0 to 256 [ 405.521042][ T28] audit: type=1326 audit(2000001335.588:15253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.544324][T29104] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.556859][ T28] audit: type=1326 audit(2000001335.588:15254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29089 comm="syz.5.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 405.611182][T29104] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.796951][T29121] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.850749][ T3418] kernel write not supported for file bpf-prog (pid: 3418 comm: kworker/1:3) [ 406.127455][T29140] unsupported nla_type 210 [ 406.183242][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9980'. [ 406.222714][T29145] netlink: 'syz.6.9991': attribute type 29 has an invalid length. [ 406.231953][T29145] netlink: 'syz.6.9991': attribute type 29 has an invalid length. [ 406.261771][T29145] netlink: 500 bytes leftover after parsing attributes in process `syz.6.9991'. [ 406.670560][T29188] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10010'. [ 406.871088][T29205] loop4: detected capacity change from 0 to 1024 [ 406.888501][T29205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.928113][T29205] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 406.949736][T29205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 406.966216][T29205] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.10018: Invalid inode table block 0 in block_group 0 [ 406.992500][T29205] loop4: lost filesystem error report for type 5 error -117 [ 406.992628][T29205] EXT4-fs (loop4): Remounting filesystem read-only [ 407.000344][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 407.000379][ C0] EXT4-fs (loop4): initial error at time 2000001337: __ext4_get_inode_loc:4797 [ 407.000402][ C0] EXT4-fs (loop4): last error at time 2000001337: __ext4_get_inode_loc:4797 [ 407.032341][T29205] EXT4-fs (loop4): 1 truncate cleaned up [ 407.065084][T29205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.115727][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.533722][ T3418] kernel write not supported for file bpf-prog (pid: 3418 comm: kworker/1:3) [ 407.568604][T29252] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 407.680030][T29266] xt_hashlimit: size too large, truncated to 1048576 [ 407.719510][T29276] loop6: detected capacity change from 0 to 128 [ 407.736025][T29281] loop5: detected capacity change from 0 to 512 [ 407.742792][T29281] EXT4-fs: Ignoring removed oldalloc option [ 407.769953][T29276] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 407.798039][T29281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 407.814830][T29276] FAT-fs (loop6): Filesystem has been set read-only [ 407.835608][T29281] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.10046: iget: bad i_size value: 38620345925642 [ 407.838314][T29276] bio_check_eod: 102 callbacks suppressed [ 407.838329][T29276] syz.6.10045: attempt to access beyond end of device [ 407.838329][T29276] loop6: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 407.868775][T29276] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 407.874625][T29281] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.877990][T29276] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 407.899496][T29276] syz.6.10045: attempt to access beyond end of device [ 407.899496][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 407.899500][T29281] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.10046: couldn't read orphan inode 15 (err -117) [ 407.913467][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 407.913505][ C1] EXT4-fs (loop5): initial error at time 2000001338: ext4_orphan_get:1397: inode 15 [ 407.913556][ C1] EXT4-fs (loop5): last error at time 2000001338: ext4_orphan_get:1397: inode 15 [ 407.947269][T29276] syz.6.10045: attempt to access beyond end of device [ 407.947269][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 407.950957][T29281] loop5: lost filesystem error report for type 5 error -117 [ 407.966923][T29281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.999562][T29276] syz.6.10045: attempt to access beyond end of device [ 407.999562][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.037603][T29276] syz.6.10045: attempt to access beyond end of device [ 408.037603][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.077865][T29276] syz.6.10045: attempt to access beyond end of device [ 408.077865][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.095488][T29276] syz.6.10045: attempt to access beyond end of device [ 408.095488][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.111708][T29276] syz.6.10045: attempt to access beyond end of device [ 408.111708][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.140199][T29276] syz.6.10045: attempt to access beyond end of device [ 408.140199][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.157869][T29276] syz.6.10045: attempt to access beyond end of device [ 408.157869][T29276] loop6: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 408.608239][ T3611] hid_parser_main: 8 callbacks suppressed [ 408.608273][ T3611] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 408.624578][ T3611] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.627401][T25372] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 408.683037][T25372] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 408.730005][T25372] EXT4-fs (loop5): This should not happen!! Data will be lost [ 408.730005][T25372] [ 408.754404][T25372] EXT4-fs (loop5): Total free blocks count 0 [ 408.767321][T25372] EXT4-fs (loop5): Free/Dirty block details [ 408.778832][T25372] EXT4-fs (loop5): free_blocks=0 [ 408.813792][T25372] EXT4-fs (loop5): dirty_blocks=16000 [ 408.819736][T25372] EXT4-fs (loop5): Block reservation details [ 408.826099][T25372] EXT4-fs (loop5): i_reserved_data_blocks=16000 [ 408.871481][T25372] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 408.917770][T23801] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 409.409978][T29389] loop4: detected capacity change from 0 to 2048 [ 409.461082][T29391] SELinux: ebitmap: truncated map [ 409.496526][T29399] loop5: detected capacity change from 0 to 512 [ 409.510095][ T9967] loop4: p2 < > p4 [ 409.514826][ T9967] loop4: p4 size 262144 extends beyond EOD, truncated [ 409.515972][T29391] SELinux: failed to load policy [ 409.527038][T29399] EXT4-fs: Ignoring removed i_version option [ 409.527066][T29399] EXT4-fs: Ignoring removed bh option [ 409.552028][T29389] loop4: p2 < > p4 [ 409.559600][T29389] loop4: p4 size 262144 extends beyond EOD, truncated [ 409.576050][T29399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.595148][T29399] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.743313][ T9967] udevd[9967]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 409.754791][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 409.818431][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.278257][T29469] program syz.6.10119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.365746][T29474] loop6: detected capacity change from 0 to 1024 [ 411.388420][T29474] EXT4-fs: Ignoring removed nobh option [ 411.395531][T29474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.410862][ T28] kauditd_printk_skb: 474 callbacks suppressed [ 411.410881][ T28] audit: type=1326 audit(2000001341.618:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 411.453820][T29474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.458401][ T28] audit: type=1326 audit(2000001341.618:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 411.514900][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.524982][ T28] audit: type=1326 audit(2000001341.648:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 411.551248][ T28] audit: type=1326 audit(2000001341.648:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 411.586639][ T28] audit: type=1326 audit(2000001341.648:15731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 411.722073][T29501] qrtr: Invalid version 0 [ 411.740829][ T28] audit: type=1326 audit(2000001341.948:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.4.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 411.775961][ T28] audit: type=1326 audit(2000001341.948:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.4.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 411.800816][ T28] audit: type=1326 audit(2000001341.948:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.4.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 411.825305][ T28] audit: type=1326 audit(2000001341.948:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.4.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 411.850086][ T28] audit: type=1326 audit(2000001341.948:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.4.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 411.915549][T29510] loop6: detected capacity change from 0 to 128 [ 412.141544][T29526] loop6: detected capacity change from 0 to 512 [ 412.177983][T29526] EXT4-fs: Ignoring removed i_version option [ 412.182390][T29528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10142'. [ 412.196605][T29526] EXT4-fs: Ignoring removed bh option [ 412.237186][T29526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.287810][T29532] loop1: detected capacity change from 0 to 512 [ 412.327889][T29526] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.381011][T29532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.423081][T29532] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.562162][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.668018][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.748503][T29536] SELinux: failed to load policy [ 412.880963][T29550] loop1: detected capacity change from 0 to 764 [ 413.483491][T29584] loop6: detected capacity change from 0 to 512 [ 413.583904][T29587] bio_check_eod: 6740 callbacks suppressed [ 413.583923][T29587] syz.6.10166: attempt to access beyond end of device [ 413.583923][T29587] loop6: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 413.675489][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.675489][ T69] loop6: rw=1, sector=1320, nr_sectors = 2048 limit=512 [ 413.693329][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.693329][ T69] loop6: rw=1, sector=3368, nr_sectors = 2048 limit=512 [ 413.723579][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.723579][ T69] loop6: rw=1, sector=5416, nr_sectors = 2048 limit=512 [ 413.741948][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.741948][ T69] loop6: rw=1, sector=7464, nr_sectors = 2048 limit=512 [ 413.760385][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.760385][ T69] loop6: rw=1, sector=9512, nr_sectors = 2128 limit=512 [ 413.778833][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.778833][ T69] loop6: rw=1, sector=11640, nr_sectors = 2168 limit=512 [ 413.797078][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.797078][ T69] loop6: rw=1, sector=13808, nr_sectors = 2048 limit=512 [ 413.812771][ T69] kworker/u8:4: attempt to access beyond end of device [ 413.812771][ T69] loop6: rw=1, sector=15856, nr_sectors = 608 limit=512 [ 413.928772][T29599] 9pnet: p9_errstr2errno: server reported unknown error  [ 414.160530][T29625] loop4: detected capacity change from 0 to 2048 [ 414.177168][T29623] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.177286][T29625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.270198][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.359340][T29635] loop1: detected capacity change from 0 to 128 [ 414.370983][T29635] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.384112][T29635] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.485879][T25518] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.598933][T29648] loop5: detected capacity change from 0 to 512 [ 414.626463][T29648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.644623][T29648] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.715719][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.826758][T29673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10201'. [ 415.185404][T29709] loop5: detected capacity change from 0 to 2048 [ 415.197500][T29709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.246044][T25382] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 415.261537][T25382] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 83 with error 28 [ 415.274098][T25382] EXT4-fs (loop5): This should not happen!! Data will be lost [ 415.274098][T25382] [ 415.284099][T25382] EXT4-fs (loop5): Total free blocks count 0 [ 415.290422][T25382] EXT4-fs (loop5): Free/Dirty block details [ 415.296765][T25382] EXT4-fs (loop5): free_blocks=2415919104 [ 415.302529][T25382] EXT4-fs (loop5): dirty_blocks=96 [ 415.307835][T25382] EXT4-fs (loop5): Block reservation details [ 415.313970][T25382] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 415.321416][T23801] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 415.530772][T29725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10222'. [ 415.642506][T29738] syzkaller1: entered promiscuous mode [ 415.648432][T29738] syzkaller1: entered allmulticast mode [ 415.677324][T29734] EXT4-fs (loop5): 1 orphan inode deleted [ 416.152339][T29769] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 416.331226][T29769] EXT4-fs (loop6): 1 truncate cleaned up [ 416.814860][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10257'. [ 416.860981][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 416.860999][ T28] audit: type=1400 audit(2000001347.068:15784): avc: denied { add_name } for pid=29805 comm="syz.6.10259" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.953513][ T28] audit: type=1400 audit(2000001347.068:15785): avc: denied { create } for pid=29805 comm="syz.6.10259" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 417.217713][T29822] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 417.272703][T29829] netlink: 'syz.5.10270': attribute type 6 has an invalid length. [ 417.911584][T29882] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10304'. [ 417.934378][T29880] set_capacity_and_notify: 2 callbacks suppressed [ 417.934397][T29880] loop5: detected capacity change from 0 to 4096 [ 417.947969][T29882] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.955293][T29882] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.008323][T29882] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10304'. [ 418.184952][T29893] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10296'. [ 418.316908][T29896] loop4: detected capacity change from 0 to 2048 [ 419.190175][T29921] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.638978][T29937] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.645584][ T28] audit: type=1400 audit(2000001349.848:15786): avc: denied { module_load } for pid=29940 comm="syz.5.10317" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 419.714909][T29946] loop5: detected capacity change from 0 to 1024 [ 419.724961][T29946] EXT4-fs: test_dummy_encryption option not supported [ 419.735509][ T28] audit: type=1326 audit(2000001349.948:15787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.5.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 419.784941][ T28] audit: type=1326 audit(2000001349.968:15788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.5.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 419.831412][ T28] audit: type=1326 audit(2000001349.968:15789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.5.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 419.871171][ T28] audit: type=1326 audit(2000001349.968:15790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.5.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 419.909578][ T28] audit: type=1326 audit(2000001349.968:15791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.5.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 419.994951][T29964] batadv_slave_1: entered promiscuous mode [ 420.001797][T29964] batadv_slave_1: left promiscuous mode [ 420.124909][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10334'. [ 420.137423][T29978] netlink: 'syz.1.10334': attribute type 29 has an invalid length. [ 420.147415][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10334'. [ 420.308867][ T28] audit: type=1326 audit(2000001350.518:15792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29995 comm="syz.6.10343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 420.336154][ T28] audit: type=1326 audit(2000001350.518:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29995 comm="syz.6.10343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 420.400878][T30003] ip6_vti0 speed is unknown, defaulting to 1000 [ 420.425719][T30005] loop5: detected capacity change from 0 to 2048 [ 420.477117][T30005] Alternate GPT is invalid, using primary GPT. [ 420.485228][T30005] loop5: p2 p3 p7 [ 420.637073][T30014] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10350'. [ 420.861952][T30034] loop4: detected capacity change from 0 to 512 [ 420.879016][T30034] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 420.896868][T30034] EXT4-fs (loop4): 1 truncate cleaned up [ 420.910025][T30034] EXT4-fs mount: 9 callbacks suppressed [ 420.910043][T30034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.994258][T30041] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.065468][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.156412][T30052] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 421.206170][T30056] loop4: detected capacity change from 0 to 1024 [ 421.232791][T30056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 421.251128][T30056] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.320241][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 421.333618][T30069] loop1: detected capacity change from 0 to 512 [ 421.344154][T30071] loop5: detected capacity change from 0 to 128 [ 421.354293][T30069] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 421.396051][T30069] EXT4-fs (loop1): 1 truncate cleaned up [ 421.433401][T30069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.439137][T30080] loop6: detected capacity change from 0 to 1024 [ 421.451441][T30076] loop4: detected capacity change from 0 to 2048 [ 421.453106][T30080] EXT4-fs: Ignoring removed orlov option [ 421.474332][T30082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.509207][T30080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.536953][T30082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.556173][T30076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.586348][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.631329][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.645696][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.780065][T30105] EXT4-fs: Ignoring removed bh option [ 421.844332][T30107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 421.855880][T30105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.884670][T30107] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.908301][T30106] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.10388: lblock 0 mapped to illegal pblock 0 (length 1) [ 421.932146][T30106] EXT4-fs (loop4): Remounting filesystem read-only [ 421.967266][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.977431][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.262854][T30122] ip6_vti0 speed is unknown, defaulting to 1000 [ 422.563744][ T28] kauditd_printk_skb: 507 callbacks suppressed [ 422.563763][ T28] audit: type=1326 audit(2000001352.768:16301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.596864][ T28] audit: type=1326 audit(2000001352.768:16302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.620921][ T28] audit: type=1326 audit(2000001352.768:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.646219][ T28] audit: type=1326 audit(2000001352.768:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.670920][ T28] audit: type=1326 audit(2000001352.768:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.695108][ T28] audit: type=1326 audit(2000001352.768:16306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.720129][ T28] audit: type=1326 audit(2000001352.808:16307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.748403][ T28] audit: type=1326 audit(2000001352.808:16308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.800249][ T28] audit: type=1326 audit(2000001352.808:16309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.825656][ T28] audit: type=1326 audit(2000001352.808:16310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30148 comm="syz.4.10406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c601c819 code=0x7ffc0000 [ 422.830369][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e22000: rx timeout, send abort [ 422.882883][T30161] ip6_vti0 speed is unknown, defaulting to 1000 [ 422.953674][T30159] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.364360][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e22000: abort rx timeout. Force session deactivation [ 423.481087][T30175] set_capacity_and_notify: 2 callbacks suppressed [ 423.481108][T30175] loop1: detected capacity change from 0 to 128 [ 423.639405][T30187] loop4: detected capacity change from 0 to 512 [ 423.674885][T30193] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.678548][T30187] EXT4-fs: Ignoring removed bh option [ 423.704491][T30187] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 423.800113][T30187] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 423.846451][T30187] loop4: detected capacity change from 0 to 512 [ 423.862202][T30187] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.869512][T30187] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 423.880483][T30187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 423.888842][T30187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 423.897684][T30187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10423: bg 0: block 361: padding at end of block bitmap is not set [ 423.913168][T30187] loop4: lost filesystem error report for type 5 error -117 [ 423.913331][T30187] EXT4-fs (loop4): Remounting filesystem read-only [ 423.920841][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 423.920887][ C1] EXT4-fs (loop4): initial error at time 2000001354: ext4_validate_block_bitmap:441 [ 423.920913][ C1] EXT4-fs (loop4): last error at time 2000001354: ext4_validate_block_bitmap:441 [ 423.955615][T30187] EXT4-fs (loop4): 1 truncate cleaned up [ 424.008629][T30187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 424.081227][T30187] EXT4-fs: Ignoring removed bh option [ 424.103173][T30187] System zones: 1-12 [ 424.107434][T30187] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000007. [ 424.116539][T30187] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.10423: error -117 reading directory block [ 424.148737][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 424.220686][T30220] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 424.221602][T30222] loop4: detected capacity change from 0 to 1024 [ 424.262999][T30220] SELinux: failed to load policy [ 424.287914][T30222] EXT4-fs: Ignoring removed bh option [ 424.350078][T30222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.388936][T30237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.416237][T30237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.433052][T30237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.442722][T30237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.559600][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.720608][T30271] loop1: detected capacity change from 0 to 128 [ 424.760031][T30273] loop5: detected capacity change from 0 to 1024 [ 424.771611][T30273] EXT4-fs: Ignoring removed bh option [ 424.821964][T30273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.823377][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10460'. [ 425.046793][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.062738][T30296] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.177383][T30299] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.840276][T30325] loop6: detected capacity change from 0 to 1024 [ 425.889466][T30325] EXT4-fs: Ignoring removed bh option [ 425.919805][T30325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.135458][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.173236][T25382] tipc: Subscription rejected, illegal request [ 426.188086][T30353] xt_l2tp: unknown flags: 10 [ 426.370807][T30378] loop6: detected capacity change from 0 to 1024 [ 426.393552][T30378] EXT4-fs: Ignoring removed bh option [ 426.406056][T30378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.527813][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.569961][T30398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.584378][T30398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.593381][T30398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.601261][T30398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.637104][T30457] loop5: detected capacity change from 0 to 512 [ 427.648110][T30457] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 427.684768][T30457] EXT4-fs (loop5): 1 truncate cleaned up [ 427.691294][T30457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.202343][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.284785][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 428.284883][ T28] audit: type=1400 audit(2000001358.478:16430): avc: denied { mounton } for pid=30472 comm="syz.1.10536" path="/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 428.721757][T30494] loop1: detected capacity change from 0 to 256 [ 428.754184][T30494] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 428.839902][T30502] loop4: detected capacity change from 0 to 512 [ 429.399674][ T28] audit: type=1326 audit(2000001359.608:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 429.450828][ T28] audit: type=1326 audit(2000001359.638:16432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 429.487398][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.487398][T25372] loop1: rw=1, sector=256, nr_sectors = 288 limit=256 [ 429.511723][ T28] audit: type=1326 audit(2000001359.638:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 429.541561][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.541561][T25372] loop1: rw=1, sector=608, nr_sectors = 416 limit=256 [ 429.586874][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.586874][T25372] loop1: rw=1, sector=1056, nr_sectors = 2048 limit=256 [ 429.605149][ T28] audit: type=1326 audit(2000001359.648:16434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 429.633613][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.633613][T25372] loop1: rw=1, sector=3104, nr_sectors = 2048 limit=256 [ 429.658493][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.658493][T25372] loop1: rw=1, sector=5152, nr_sectors = 2048 limit=256 [ 429.676268][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.676268][T25372] loop1: rw=1, sector=7200, nr_sectors = 2072 limit=256 [ 429.725904][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.725904][T25372] loop1: rw=1, sector=9272, nr_sectors = 2048 limit=256 [ 429.793727][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.793727][T25372] loop1: rw=1, sector=11320, nr_sectors = 2136 limit=256 [ 429.837418][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.837418][T25372] loop1: rw=1, sector=13456, nr_sectors = 2056 limit=256 [ 429.907102][T25372] kworker/u8:8: attempt to access beyond end of device [ 429.907102][T25372] loop1: rw=1, sector=15512, nr_sectors = 2728 limit=256 [ 430.492252][T30571] loop5: detected capacity change from 0 to 1024 [ 430.534866][T30571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.597654][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.697494][T30582] netlink: 'syz.1.10576': attribute type 21 has an invalid length. [ 430.974010][ T28] audit: type=1326 audit(2000001361.178:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30608 comm="syz.1.10590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 431.020336][T30615] loop6: detected capacity change from 0 to 512 [ 431.043557][T30615] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.10593: inode has both inline data and extents flags [ 431.067565][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10594'. [ 431.077546][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10594'. [ 431.091223][ T69] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.103288][ T69] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.112526][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10594'. [ 431.122356][ T69] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.132107][ T69] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.141004][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10594'. [ 431.187126][T30615] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.187276][T30615] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.10593: couldn't read orphan inode 15 (err -117) [ 431.196568][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 431.196586][ C1] EXT4-fs (loop6): initial error at time 2000001361: ext4_orphan_get:1397: inode 15 [ 431.196616][ C1] EXT4-fs (loop6): last error at time 2000001361: ext4_orphan_get:1397: inode 15 [ 431.243737][T30615] loop6: lost filesystem error report for type 5 error -117 [ 431.244243][T30615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.268262][ T28] audit: type=1326 audit(2000001361.178:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30608 comm="syz.1.10590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 431.296129][ T28] audit: type=1326 audit(2000001361.178:16437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30608 comm="syz.1.10590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 431.323015][ T28] audit: type=1326 audit(2000001361.178:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30608 comm="syz.1.10590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac43cc819 code=0x7ffc0000 [ 431.349750][ T28] audit: type=1326 audit(2000001361.248:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30608 comm="syz.1.10590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ac438d04e code=0x7ffc0000 [ 431.431176][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.503006][T30637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10600'. [ 431.598002][T30644] loop4: detected capacity change from 0 to 256 [ 431.664178][T30648] loop1: detected capacity change from 0 to 512 [ 431.730210][T30654] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.755489][T30648] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #12: comm syz.1.10607: corrupted in-inode xattr: bad e_name length [ 431.774678][T30648] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 431.784437][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 431.800281][ C0] EXT4-fs (loop1): initial error at time 2000001361: ext4_iget_extra_inode:5040: inode 12 [ 431.810344][ C0] EXT4-fs (loop1): last error at time 2000001361: ext4_iget_extra_inode:5040: inode 12 [ 431.814732][T30648] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.10607: couldn't read orphan inode 12 (err -117) [ 431.904767][T30648] loop1: lost filesystem error report for type 5 error -117 [ 431.905606][T30648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.994752][ T3611] IPVS: starting estimator thread 0... [ 432.084525][T30668] IPVS: using max 2304 ests per chain, 115200 per kthread [ 432.170110][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.188430][T30677] loop4: detected capacity change from 0 to 128 [ 432.726288][T30694] loop6: detected capacity change from 0 to 256 [ 433.059820][T30711] netlink: 'syz.3.10632': attribute type 1 has an invalid length. [ 433.532749][T30746] loop6: detected capacity change from 0 to 256 [ 433.593443][T30746] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 433.656589][T30750] loop4: detected capacity change from 0 to 2048 [ 433.720758][T30750] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 433.743167][T30757] loop6: detected capacity change from 0 to 512 [ 433.787435][T30750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.797843][T30759] loop5: detected capacity change from 0 to 1024 [ 433.807394][T30757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.842546][T30759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.916078][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.934363][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.946220][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.102244][T30774] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.270850][T30784] loop5: detected capacity change from 0 to 512 [ 434.297972][T30784] EXT4-fs: Ignoring removed orlov option [ 434.339701][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10663'. [ 434.346762][T30784] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.364710][T30784] EXT4-fs: inline encryption not supported [ 434.375369][T30784] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.10661: corrupted in-inode xattr: e_value size too large [ 434.390740][T30784] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 434.391329][T30784] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.10661: couldn't read orphan inode 15 (err -117) [ 434.400694][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 434.400718][ C0] EXT4-fs (loop5): initial error at time 2000001364: ext4_iget_extra_inode:5040: inode 15 [ 434.400771][ C0] EXT4-fs (loop5): last error at time 2000001364: ext4_iget_extra_inode:5040: inode 15 [ 434.444512][T30784] loop5: lost filesystem error report for type 5 error -117 [ 434.453410][T30784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.553683][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.681751][T30814] loop5: detected capacity change from 0 to 2048 [ 434.726803][T30818] loop1: detected capacity change from 0 to 2048 [ 434.734672][T30819] loop4: detected capacity change from 0 to 1024 [ 434.763769][T30819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 434.798898][T30819] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.812298][T30818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.830789][T30832] loop6: detected capacity change from 0 to 512 [ 434.832356][T30819] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10675: bg 0: block 112: padding at end of block bitmap is not set [ 434.842938][T30818] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.876977][T30819] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 434.879722][T30832] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 434.889917][T30819] EXT4-fs (loop4): This should not happen!! Data will be lost [ 434.889917][T30819] [ 434.909585][T30819] EXT4-fs (loop4): Total free blocks count 0 [ 434.915935][T30819] EXT4-fs (loop4): Free/Dirty block details [ 434.921080][T30818] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.10676: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 434.922055][T30819] EXT4-fs (loop4): free_blocks=0 [ 434.941373][T30832] EXT4-fs (loop6): 1 truncate cleaned up [ 434.944810][T30819] EXT4-fs (loop4): dirty_blocks=80 [ 434.944829][T30819] EXT4-fs (loop4): Block reservation details [ 434.950987][T30818] EXT4-fs (loop1): Remounting filesystem read-only [ 434.955828][T30819] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 434.963230][T30832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.008271][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 435.008356][ T28] audit: type=1326 audit(2000001365.218:16471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.3.10683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 435.039315][ T28] audit: type=1326 audit(2000001365.218:16472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.3.10683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 435.039524][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.064159][ T28] audit: type=1326 audit(2000001365.218:16473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.3.10683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 435.098123][ T28] audit: type=1326 audit(2000001365.218:16474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.3.10683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 435.122855][T25372] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 435.131832][ T28] audit: type=1326 audit(2000001365.218:16475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.3.10683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 435.140072][T28746] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 435.166507][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.716530][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10707'. [ 435.733330][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10707'. [ 435.765036][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10707'. [ 435.769086][T30897] macvlan0: entered allmulticast mode [ 435.785194][T30897] macvlan0 (unregistering): left allmulticast mode [ 435.855354][T30903] loop4: detected capacity change from 0 to 128 [ 436.169824][T30918] netlink: 'syz.4.10717': attribute type 4 has an invalid length. [ 436.222377][T30920] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.510450][T30929] macvlan0: entered allmulticast mode [ 436.528306][T30929] veth1_vlan: entered allmulticast mode [ 436.546120][T30929] veth1_vlan: left allmulticast mode [ 436.555929][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10723'. [ 436.593628][T30929] macvlan0 (unregistering): left allmulticast mode [ 436.610011][T30933] netlink: 'syz.3.10723': attribute type 18 has an invalid length. [ 436.629941][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10723'. [ 436.736119][T30937] loop4: detected capacity change from 0 to 2048 [ 436.783609][T30943] loop1: detected capacity change from 0 to 4096 [ 436.808266][T30937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.841942][T30943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.938759][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.950067][T30956] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10732'. [ 436.954963][T28746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.045166][T30967] team0: Port device syz_tun added [ 437.078320][T30967] team0: Port device syz_tun removed [ 437.119102][T30967] bridge_slave_0: left allmulticast mode [ 437.131362][T30967] bridge_slave_0: left promiscuous mode [ 437.140565][T30967] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.155867][T30967] bridge_slave_1: left allmulticast mode [ 437.164313][T30967] bridge_slave_1: left promiscuous mode [ 437.187458][T30967] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.211054][T30967] bond0: (slave bond_slave_0): Releasing backup interface [ 437.223648][T30967] bond0: (slave bond_slave_1): Releasing backup interface [ 437.233769][T30967] team0: Port device team_slave_1 removed [ 437.240710][T30967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.270586][T30967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.279926][T30967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.501880][T30995] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.615512][T31002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.682166][T31004] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.712398][T31008] EXT4-fs (loop1): shut down requested (2) [ 437.821748][T31010] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 437.909749][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.996089][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:5) [ 438.060550][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10761'. [ 438.079447][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10761'. [ 438.101289][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10761'. [ 438.113285][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10761'. [ 438.142099][T31037] netlink: 'syz.3.10763': attribute type 1 has an invalid length. [ 438.426366][T31065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.439249][T31065] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.457182][T31065] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 438.483330][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.499877][T31075] EXT4-fs: Ignoring removed orlov option [ 438.518818][T31075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.581988][ T28] audit: type=1400 audit(2000001368.788:16476): avc: denied { unlink } for pid=25518 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 438.609928][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.735102][T31100] 9p: Bad value for 'rfdno' [ 439.077506][T31126] set_capacity_and_notify: 3 callbacks suppressed [ 439.077525][T31126] loop4: detected capacity change from 0 to 256 [ 439.092046][T31126] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.115834][T31126] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.577528][T31141] loop5: detected capacity change from 0 to 512 [ 439.587750][T31141] EXT4-fs: Ignoring removed i_version option [ 439.608171][T31141] EXT4-fs: Ignoring removed bh option [ 439.626910][T31141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.656853][T31141] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.715820][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.862818][T25372] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.877749][T25372] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.915757][T25372] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.965340][T25372] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.980680][T31155] netlink: 'syz.4.10811': attribute type 13 has an invalid length. [ 439.994533][T31155] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.10811'. [ 440.450275][T31191] loop1: detected capacity change from 0 to 1024 [ 440.453219][T31193] loop5: detected capacity change from 0 to 512 [ 440.475746][T31191] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 440.501732][T31193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.517191][T31191] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 440.545323][T31193] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.557888][T31193] EXT4-fs (loop5): shut down requested (2) [ 440.566766][T31191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 440.581938][T31193] EXT4-fs: Ignoring removed orlov option [ 440.593524][T31191] System zones: 0-1, 4-36, 102-102 [ 440.599398][T31193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.615142][T31191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 440.632497][T31199] loop4: detected capacity change from 0 to 4096 [ 440.639236][T31193] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 440.695437][T31199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.714845][T23801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.736415][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.842126][T28746] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 440.868960][T28746] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 441.116376][T31206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.147226][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.195212][ T28] audit: type=1326 audit(2000001371.398:16477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.231207][ T28] audit: type=1326 audit(2000001371.398:16478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.256230][T31237] netlink: 'syz.1.10847': attribute type 3 has an invalid length. [ 441.269398][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.301124][ T28] audit: type=1326 audit(2000001371.398:16479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.332205][T31237] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.10847'. [ 441.390072][ T28] audit: type=1326 audit(2000001371.408:16480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.443239][ T28] audit: type=1326 audit(2000001371.408:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.481522][ T28] audit: type=1326 audit(2000001371.408:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.506445][ T28] audit: type=1326 audit(2000001371.408:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.532158][ T28] audit: type=1326 audit(2000001371.408:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.534264][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.579866][ T28] audit: type=1326 audit(2000001371.438:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.615775][ T28] audit: type=1326 audit(2000001371.438:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.5.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd229c819 code=0x7ffc0000 [ 441.667281][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.708944][T31244] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.722314][T31257] vlan2: entered allmulticast mode [ 441.757711][ T69] debugfs: 'netdev@ffff88811b124560' already exists in 'ref_tracker' [ 441.863750][ T69] bridge_slave_1: left allmulticast mode [ 441.887387][ T69] bridge_slave_1: left promiscuous mode [ 441.901019][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.919729][ T69] bridge_slave_0: left allmulticast mode [ 441.926230][ T69] bridge_slave_0: left promiscuous mode [ 441.934266][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.178632][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.210850][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.221723][ T69] bond0 (unregistering): Released all slaves [ 442.233298][T31270] tipc: New replicast peer: 255.255.255.255 [ 442.241792][T31270] tipc: Enabled bearer , priority 10 [ 442.381646][ T69] hsr_slave_0: left promiscuous mode [ 442.414834][ T69] hsr_slave_1: left promiscuous mode [ 442.436720][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.457908][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.481278][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.495789][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.514395][ T69] veth1_macvtap: left promiscuous mode [ 442.530233][ T69] veth0_macvtap: left promiscuous mode [ 442.549011][ T69] veth1_vlan: left promiscuous mode [ 442.574572][ T69] veth0_vlan: left promiscuous mode [ 442.726022][ T69] team0 (unregistering): Port device team_slave_1 removed [ 442.737831][ T69] team0 (unregistering): Port device team_slave_0 removed [ 442.857657][T31244] chnl_net:caif_netlink_parms(): no params data found [ 442.981200][T31244] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.989386][T31244] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.997011][T31244] bridge_slave_0: entered allmulticast mode [ 443.003958][T31244] bridge_slave_0: entered promiscuous mode [ 443.010951][T31244] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.018247][T31244] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.025645][T31244] bridge_slave_1: entered allmulticast mode [ 443.032634][T31244] bridge_slave_1: entered promiscuous mode [ 443.081731][T31326] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.083123][T31244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.132443][T31335] xt_hashlimit: size too large, truncated to 1048576 [ 443.142988][T31244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.204347][T31342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10875'. [ 443.240289][T31244] team0: Port device team_slave_0 added [ 443.251016][T31244] team0: Port device team_slave_1 added [ 443.392777][T31244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.406686][T31244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.433689][T31244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.468955][ T69] IPVS: stop unused estimator thread 0... [ 443.475252][T31244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.483028][T31244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.511083][T31244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.579528][T31244] hsr_slave_0: entered promiscuous mode [ 443.588344][T31244] hsr_slave_1: entered promiscuous mode [ 443.598487][T31244] debugfs: 'hsr0' already exists in 'hsr' [ 443.621644][T31244] Cannot create hsr debugfs directory [ 443.795217][T31377] bond_slave_0: entered promiscuous mode [ 443.801020][T31377] bond_slave_1: entered promiscuous mode [ 443.807827][T31377] macvlan2: entered promiscuous mode [ 443.815113][T31377] bond0: entered promiscuous mode [ 443.824224][T31377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.299181][T31244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.323431][T31244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.353574][T31244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.397032][T31244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.504119][T31434] ipvlan2: entered promiscuous mode [ 444.543961][T31434] team0: Device ipvlan2 failed to register rx_handler [ 444.598915][T31441] syzkaller1: entered promiscuous mode [ 444.608424][T31441] syzkaller1: entered allmulticast mode [ 444.638916][T31244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.668280][T31244] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.687472][T14312] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.694953][T14312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.737644][T25382] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.744973][T25382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.808554][T31244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.827580][T31244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.933542][T31244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.171457][T31244] veth0_vlan: entered promiscuous mode [ 445.188761][T31244] veth1_vlan: entered promiscuous mode [ 445.208082][T31244] veth0_macvtap: entered promiscuous mode [ 445.218977][T31244] veth1_macvtap: entered promiscuous mode [ 445.231152][T31244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.246212][T31244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.268679][T25382] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.285480][T25382] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.301824][T25382] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.317507][T25382] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.716269][T31574] loop6: detected capacity change from 0 to 256 [ 445.950284][T31595] Invalid argument reading file caps for ./file0 [ 446.414776][ T3418] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 446.429343][T25382] smc: removing ib device syz2 [ 446.441083][T31649] loop1: detected capacity change from 0 to 512 [ 446.456712][T31649] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.10938: iget: bad i_size value: 38620345925642 [ 446.470795][T31649] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.474434][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 446.477742][T31649] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.10938: couldn't read orphan inode 15 (err -117) [ 446.484070][ C1] EXT4-fs (loop1): initial error at time 2000001376: ext4_orphan_get:1397: inode 15 [ 446.511886][T31649] loop1: lost filesystem error report for type 5 error -117 [ 446.513331][ C1] EXT4-fs (loop1): last error at time 2000001376: ext4_orphan_get:1402 [ 446.554838][T31649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10938: bg 0: block 5: invalid block bitmap [ 446.569539][T31649] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 446.582854][T31649] EXT4-fs (loop1): This should not happen!! Data will be lost [ 446.582854][T31649] [ 446.593428][T31649] EXT4-fs (loop1): Total free blocks count 0 [ 446.600082][T31649] EXT4-fs (loop1): Free/Dirty block details [ 446.612988][T31649] EXT4-fs (loop1): free_blocks=0 [ 446.619814][ T69] bond0 (unregistering): Released all slaves [ 446.626867][T31649] EXT4-fs (loop1): dirty_blocks=1 [ 446.632395][T31649] EXT4-fs (loop1): Block reservation details [ 446.639051][T31649] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 446.657879][ T35] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.663584][T25372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.680589][ T35] syz2: Port: 1 Link DOWN [ 446.692448][T25372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.713649][T25518] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 446.769737][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 446.892291][T31683] netem: incorrect ge model size [ 446.898034][T31683] netem: change failed [ 447.024000][T31704] loop6: detected capacity change from 0 to 1024 [ 447.038725][ T69] tipc: Disabling bearer [ 447.044113][ T69] tipc: Left network mode [ 447.097353][T31617] chnl_net:caif_netlink_parms(): no params data found [ 447.147956][ T69] hsr_slave_0: left promiscuous mode [ 447.181337][ T69] hsr_slave_1: left promiscuous mode [ 447.220535][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 447.220553][ T28] audit: type=1326 audit(2000001377.428:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.256228][ T28] audit: type=1326 audit(2000001377.448:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.281998][ T28] audit: type=1326 audit(2000001377.468:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.307770][ T28] audit: type=1326 audit(2000001377.468:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.332341][ T28] audit: type=1326 audit(2000001377.468:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.356737][ T28] audit: type=1326 audit(2000001377.468:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.381165][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.390060][ T28] audit: type=1326 audit(2000001377.468:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.416705][ T28] audit: type=1326 audit(2000001377.468:16504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.441996][ T28] audit: type=1326 audit(2000001377.468:16505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.467022][ T28] audit: type=1326 audit(2000001377.468:16506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31730 comm="syz.6.10956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d5edc819 code=0x7ffc0000 [ 447.504958][T31733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.529360][T31742] loop6: detected capacity change from 0 to 512 [ 447.570303][T31617] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.578029][T31617] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.585407][T31617] bridge_slave_0: entered allmulticast mode [ 447.592295][T31617] bridge_slave_0: entered promiscuous mode [ 447.599639][T31617] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.607795][T31617] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.615406][T31617] bridge_slave_1: entered allmulticast mode [ 447.622729][T31617] bridge_slave_1: entered promiscuous mode [ 447.660724][T31617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.673420][T31617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.706214][T31617] team0: Port device team_slave_0 added [ 447.735129][T31763] team0: Port device syz_tun added [ 447.748040][T31617] team0: Port device team_slave_1 added [ 447.764687][ T1507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.778915][T31763] team0: Port device syz_tun removed [ 447.816454][T31763] bridge_slave_0: left allmulticast mode [ 447.831295][T31763] bridge_slave_0: left promiscuous mode [ 447.838270][T31763] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.848495][T31763] bridge_slave_1: left allmulticast mode [ 447.854655][T31763] bridge_slave_1: left promiscuous mode [ 447.860481][T31763] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.871410][T31763] bond0: (slave bond_slave_0): Releasing backup interface [ 447.880274][T31763] bond_slave_0: left promiscuous mode [ 447.895274][T31763] bond0: (slave bond_slave_1): Releasing backup interface [ 447.904262][T31763] bond_slave_1: left promiscuous mode [ 447.926355][T31763] team0: Port device team_slave_0 removed [ 447.944176][T31763] team0: Port device team_slave_1 removed [ 447.955012][T31763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.999904][ T69] IPVS: stop unused estimator thread 0... [ 448.009438][T31617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.017993][T31617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.046052][T31617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.059283][T31617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.067042][T31617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.101756][T31617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.130153][T31617] hsr_slave_0: entered promiscuous mode [ 448.137508][T31617] hsr_slave_1: entered promiscuous mode [ 448.278193][T31733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.324660][T24554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.344214][T31733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.404725][ T3611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.437494][T31733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.500779][T31617] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 448.510299][T31617] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 448.521942][T31617] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 448.543365][T31617] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 448.552754][T25382] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.570759][T25382] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.586729][ T69] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.609013][ T69] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.683614][T31617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.699248][T31617] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.718136][T25382] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.725566][T25382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.815566][ T3580] Bluetooth: hci0: command 0x1003 tx timeout [ 448.823521][T19081] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 448.857313][T25382] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.864451][T25382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.901503][ T3396] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 448.928838][ T3396] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.973205][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.998668][T31617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.124730][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.206448][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10969'. [ 449.321724][T31929] syzkaller1: entered promiscuous mode [ 449.327479][T31929] syzkaller1: entered allmulticast mode [ 449.336565][T31617] veth0_vlan: entered promiscuous mode [ 449.348358][T31617] veth1_vlan: entered promiscuous mode [ 449.377510][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.391277][T31617] veth0_macvtap: entered promiscuous mode [ 449.401525][T31617] veth1_macvtap: entered promiscuous mode [ 449.412662][T31617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.459397][T31617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.475063][T25382] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.505509][T25382] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.589581][T25382] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.602062][T25382] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.788861][T31999] loop9: detected capacity change from 0 to 1024 [ 449.904172][T32019] loop1: detected capacity change from 0 to 512 [ 449.953058][T32019] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 449.988267][T32035] loop6: detected capacity change from 0 to 128 [ 450.757075][T32117] loop7: detected capacity change from 0 to 128 [ 450.930835][T32140] loop7: detected capacity change from 0 to 512 [ 450.969592][T32140] EXT4-fs mount: 10 callbacks suppressed [ 450.969613][T32140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.017873][T32140] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.234074][T32158] bridge_slave_0: left promiscuous mode [ 451.247964][T32158] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.265793][T32158] bridge_slave_1: left allmulticast mode [ 451.271724][T32158] bridge_slave_1: left promiscuous mode [ 451.278985][T32158] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.296288][T32158] bond0: (slave bond_slave_0): Releasing backup interface [ 451.305878][T32158] bond_slave_0: left promiscuous mode [ 451.324044][T32158] bond0: (slave bond_slave_1): Releasing backup interface [ 451.350881][T32158] bond_slave_1: left promiscuous mode [ 451.399561][T31244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.543423][T32180] loop6: detected capacity change from 0 to 512 [ 451.560185][T32180] EXT4-fs (loop6): 1 truncate cleaned up [ 451.567464][T32180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.715288][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.779590][T32189] loop6: detected capacity change from 0 to 512 [ 451.807035][T32189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.820278][T32189] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.851110][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.564779][ T35] net_ratelimit: 12 callbacks suppressed [ 452.564793][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.870961][T32216] SET target dimension over the limit! [ 453.038760][T32219] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.046238][T32219] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.146364][T32219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.175558][T32219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.229218][ T69] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.254546][ T69] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.263473][ T69] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.299882][ T69] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.710496][T32254] loop1: detected capacity change from 0 to 164 [ 453.719072][T32254] ISOFS: Bad logical zone size 2816 [ 454.531280][T32296] loop9: detected capacity change from 0 to 128 [ 454.636402][T32296] bio_check_eod: 6 callbacks suppressed [ 454.636474][T32296] syz.9.11069: attempt to access beyond end of device [ 454.636474][T32296] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 454.724098][T32304] loop1: detected capacity change from 0 to 512 [ 454.820022][T32304] FAT-fs (loop1): Directory bread(block 199916) failed [ 454.827441][T32304] FAT-fs (loop1): Directory bread(block 199917) failed [ 454.866301][T32304] FAT-fs (loop1): Directory bread(block 199918) failed [ 454.873575][T32304] FAT-fs (loop1): Directory bread(block 199919) failed [ 454.887885][T32304] FAT-fs (loop1): Directory bread(block 199920) failed [ 454.895153][T32304] FAT-fs (loop1): Directory bread(block 199921) failed [ 454.906307][T32304] FAT-fs (loop1): Directory bread(block 199922) failed [ 454.916276][T32304] FAT-fs (loop1): Directory bread(block 199923) failed [ 455.116025][T32346] loop1: detected capacity change from 0 to 512 [ 455.163927][T32346] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 455.189068][T32346] EXT4-fs error (device loop1): ext4_get_journal_inode:5888: comm syz.1.11088: inode #1792: comm syz.1.11088: iget: illegal inode # [ 455.214237][T32346] loop1: lost filesystem error report for type 5 error -117 [ 455.214430][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 455.228759][ C1] EXT4-fs (loop1): initial error at time 2000001385: ext4_get_journal_inode:5888 [ 455.238036][ C1] EXT4-fs (loop1): last error at time 2000001385: ext4_get_journal_inode:5888 [ 455.247169][T32346] EXT4-fs (loop1): Remounting filesystem read-only [ 455.254076][T32346] EXT4-fs (loop1): no journal found [ 455.259704][T32346] EXT4-fs (loop1): can't get journal size [ 455.274553][T32346] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 455.287295][T32346] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 455.295907][T32346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.322391][T25518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.363036][T32352] loop6: detected capacity change from 0 to 256 [ 455.374021][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11090'. [ 455.404521][T32354] bridge_slave_1: entered promiscuous mode [ 455.428810][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11090'. [ 455.455324][T32356] loop6: detected capacity change from 0 to 512 [ 455.476787][T32356] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 455.491934][T32356] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.11092: bad orphan inode 15 [ 455.502715][T32356] loop6: lost filesystem error report for type 5 error -117 [ 455.502967][T32356] ext4_test_bit(bit=14, block=5) = 0 [ 455.510496][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 455.510519][ C1] EXT4-fs (loop6): initial error at time 2000001385: ext4_orphan_get:1423 [ 455.510542][ C1] EXT4-fs (loop6): last error at time 2000001385: ext4_orphan_get:1423 [ 455.540387][T32356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.630532][T32356] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 455.665983][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.033411][T32382] syzkaller1: entered promiscuous mode [ 456.039310][T32382] syzkaller1: entered allmulticast mode [ 456.333357][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 456.333377][ T28] audit: type=1326 audit(2000001386.538:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32405 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 456.363840][ T28] audit: type=1326 audit(2000001386.538:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32405 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 456.388205][ T28] audit: type=1326 audit(2000001386.538:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32405 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 456.412837][ T28] audit: type=1326 audit(2000001386.538:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32405 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 456.438721][ T28] audit: type=1326 audit(2000001386.548:16525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32405 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe351ffc819 code=0x7ffc0000 [ 456.731761][T32438] set_capacity_and_notify: 1 callbacks suppressed [ 456.731782][T32438] loop7: detected capacity change from 0 to 512 [ 456.750561][T32438] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 456.760777][T32438] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 456.772154][T32438] EXT4-fs (loop7): group descriptors corrupted! [ 456.794199][T32438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11129'. [ 457.060326][T32473] loop1: detected capacity change from 0 to 512 [ 457.086288][T32473] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.156374][T32473] EXT4-fs error (device loop1): __ext4_iget:5393: inode #11: block 1: comm syz.1.11144: invalid block [ 457.174488][T32473] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 457.174970][T32473] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.11144: couldn't read orphan inode 11 (err -117) [ 457.196571][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 457.196592][ C0] EXT4-fs (loop1): initial error at time 2000001387: __ext4_iget:5393: inode 11: block 1 [ 457.196628][ C0] EXT4-fs (loop1): last error at time 2000001387: __ext4_iget:5393: inode 11: block 1 [ 457.244667][T32473] loop1: lost filesystem error report for type 5 error -117 [ 457.252307][ T3396] kernel write not supported for file /sg0 (pid: 3396 comm: kworker/0:5) [ 457.339417][T32473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.349162][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11154'. [ 457.507119][T32512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11157'. [ 457.547022][T32514] loop6: detected capacity change from 0 to 128 [ 457.603526][T32516] syzkaller1: entered promiscuous mode [ 457.618967][T32516] syzkaller1: entered allmulticast mode [ 458.765937][T32587] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11183'. [ 458.789072][T32587] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11183'. [ 458.798293][T32587] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11183'. [ 458.805731][T32590] xt_hashlimit: size too large, truncated to 1048576 [ 458.807919][T32587] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11183'. [ 459.137292][ T28] audit: type=1326 audit(2000001389.338:16526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32609 comm="syz.7.11192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0245bc819 code=0x7ffc0000 [ 459.199136][ T28] audit: type=1326 audit(2000001389.338:16527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32609 comm="syz.7.11192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc0245bc819 code=0x7ffc0000 [ 459.249127][ T28] audit: type=1326 audit(2000001389.338:16528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32609 comm="syz.7.11192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0245bc819 code=0x7ffc0000 [ 459.282871][ T28] audit: type=1326 audit(2000001389.338:16529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32609 comm="syz.7.11192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0245bc819 code=0x7ffc0000 [ 459.342782][T32621] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 459.606420][T32628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11199'. [ 459.640783][T32628] dummy0: entered promiscuous mode [ 459.658891][T32628] macsec2: entered promiscuous mode [ 459.671958][T32628] macsec2: entered allmulticast mode [ 459.697620][T32628] dummy0: entered allmulticast mode [ 459.715136][T32628] dummy0: left allmulticast mode [ 459.725847][T32628] dummy0: left promiscuous mode [ 459.810875][ T3000] ================================================================== [ 459.819188][ T3000] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 459.827840][ T3000] [ 459.830192][ T3000] write to 0xffff88811bb96998 of 8 bytes by task 9967 on cpu 0: [ 459.838019][ T3000] inode_set_ctime_current+0x5f2/0x960 [ 459.843885][ T3000] simple_unlink+0x2d/0x80 [ 459.851026][ T3000] shmem_unlink+0x12d/0x140 [ 459.856016][ T3000] vfs_unlink+0x1c7/0x490 [ 459.860625][ T3000] filename_unlinkat+0x1e2/0x410 [ 459.865579][ T3000] __se_sys_unlink+0x2b/0xe0 [ 459.870185][ T3000] __x64_sys_unlink+0x1f/0x30 [ 459.875053][ T3000] x64_sys_call+0x2eb6/0x3020 [ 459.879841][ T3000] do_syscall_64+0x12c/0x370 [ 459.884546][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.890604][ T3000] [ 459.893152][ T3000] read to 0xffff88811bb96998 of 8 bytes by task 3000 on cpu 1: [ 459.900871][ T3000] atime_needs_update+0x2ef/0x3e0 [ 459.905907][ T3000] touch_atime+0x4a/0x330 [ 459.910251][ T3000] do_readlinkat+0x137/0x2f0 [ 459.914858][ T3000] __x64_sys_readlink+0x47/0x60 [ 459.919808][ T3000] x64_sys_call+0x2b51/0x3020 [ 459.924583][ T3000] do_syscall_64+0x12c/0x370 [ 459.929275][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.935182][ T3000] [ 459.937525][ T3000] value changed: 0x000000007735996d -> 0x000000007735996e [ 459.944644][ T3000] [ 459.946973][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 459.953134][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 459.964067][ T3000] Tainted: [W]=WARN [ 459.967958][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.978302][ T3000] ================================================================== [ 460.023765][T32642] loop6: detected capacity change from 0 to 1024 [ 460.036326][T32642] EXT4-fs: Ignoring removed nobh option [ 460.051242][T32642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.079186][T32642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c098, mo2=0002] [ 460.111542][T32642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.192045][T25612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.