last executing test programs: 14m51.137122899s ago: executing program 32 (id=3427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f00000001c0)) 14m34.117557112s ago: executing program 33 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 13m51.572045013s ago: executing program 34 (id=5044): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_io_uring_complete(0x0, 0x0) 11m41.917098673s ago: executing program 35 (id=8337): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) sendmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 9m41.77168576s ago: executing program 36 (id=10778): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 9m36.84115873s ago: executing program 37 (id=10885): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/99) 8m45.205017143s ago: executing program 38 (id=11890): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) 7m54.674380866s ago: executing program 39 (id=13145): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m47.97492911s ago: executing program 40 (id=12971): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80001) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="1b4fc20062575485", 0x8}], 0x1) 7m39.844140271s ago: executing program 41 (id=13400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 7m9.442782269s ago: executing program 42 (id=14070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc42009", 0x4}], 0x4}, 0x20008b88) 6m54.563342397s ago: executing program 43 (id=14301): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @local, 0xb}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x51, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x1}, 0x20) 6m46.995423787s ago: executing program 44 (id=14208): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 6m6.384724595s ago: executing program 45 (id=15286): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) 5m44.865594614s ago: executing program 46 (id=15712): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4000c}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r0, 0x0, 0x0, 0x100000001}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 5m35.755332586s ago: executing program 47 (id=15817): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5m14.14327685s ago: executing program 48 (id=16334): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x99f}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}}, 0x4000000) 5m0.932353088s ago: executing program 49 (id=16608): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xc}, {0x0, 0xfff1}, {0xf, 0xffff}}}, 0x24}}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 4m54.157867647s ago: executing program 50 (id=16789): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 4m46.829871175s ago: executing program 51 (id=17013): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffd}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x84085}, 0x4040080) 4m31.157616354s ago: executing program 52 (id=17413): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4) 4m7.866368496s ago: executing program 53 (id=17548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0xa1, 0x10, 0x2}, 0x10) 3m45.094950451s ago: executing program 54 (id=18028): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) 3m43.349919803s ago: executing program 55 (id=18051): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x98472, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7fffffff, 0x3}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) fallocate(r0, 0x0, 0x0, 0x8ffff) 3m32.103218058s ago: executing program 56 (id=18150): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m27.747067069s ago: executing program 57 (id=18066): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0xffffffec, {0x0, 0x0, 0xffff, 0x0, 0x3d52, 0x1a000}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 3m25.119521238s ago: executing program 58 (id=18226): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c0063d8af718bcf415fdbe7738459b2505a970a797ffb91c512eea569dd7c831a6113a6ee0bd49b784390248925bbb2849b3b2aab64ac5b417724266ff8ad412a9df8f076f9b986f083627c14bdb8bedc399d98e8a4d631a1655c48e53cd217be340dec484c676f1c7f4ed45a7591befb0c9189b91b1a95d81ca5a99287e59ccb6e1ac4894b79da8496352f77577f0cd8816d032e896ce1880bbc9004f268fc2749bfb9cf3245289e82db0fc7b1b8703894f140"]) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) 3m0.832714142s ago: executing program 59 (id=18637): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2m45.565220581s ago: executing program 60 (id=18800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x24}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0x3) 2m41.361160663s ago: executing program 61 (id=18834): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x1, 0x3}) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xc6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 2m40.921333576s ago: executing program 62 (id=18844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000380), &(0x7f00000002c0)=r2}, 0x20) 2m32.578612098s ago: executing program 1 (id=18962): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r3, 0x4}, &(0x7f00000013c0)=0x8) 2m32.522993001s ago: executing program 1 (id=18963): setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x22, 0x10805, 0x3}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) 2m32.474681963s ago: executing program 1 (id=18964): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0xddf, 0x8000) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x9, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x6738, 0xe7}, 0x110010, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0xfffe}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) 2m32.396717128s ago: executing program 1 (id=18965): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m32.328443811s ago: executing program 1 (id=18967): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2m32.138292041s ago: executing program 1 (id=18971): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m32.089438104s ago: executing program 63 (id=18971): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1m59.116444388s ago: executing program 5 (id=19541): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000050001000700000014000300686173683a69702c706f72742c697000140007800800124008070000080008400000001405000500020000000500040000000000090002"], 0x60}}, 0x0) 1m58.980182685s ago: executing program 5 (id=19542): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m58.890016s ago: executing program 5 (id=19543): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m58.88471056s ago: executing program 5 (id=19544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 1m58.610199685s ago: executing program 5 (id=19550): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1m58.443314874s ago: executing program 5 (id=19552): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 1m58.363933678s ago: executing program 64 (id=19552): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 1m20.624897125s ago: executing program 2 (id=20234): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x122) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m20.305229152s ago: executing program 2 (id=20240): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000c20100064000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20008808}, 0x2400c801) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 1m20.250677684s ago: executing program 2 (id=20245): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) acct(&(0x7f00000001c0)='./file0\x00') 1m20.179524508s ago: executing program 2 (id=20249): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m20.081150993s ago: executing program 2 (id=20262): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1d, 0x0, 0x36}, 0x10121) 1m19.921991222s ago: executing program 2 (id=20257): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r2}, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xc, 0x8}, {0xfff1, 0xa}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008010) 1m19.881600974s ago: executing program 65 (id=20257): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r2}, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xc, 0x8}, {0xfff1, 0xa}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008010) 1m1.868716017s ago: executing program 9 (id=20643): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) 1m1.828366959s ago: executing program 9 (id=20646): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20) 1m1.790554502s ago: executing program 9 (id=20647): open$dir(&(0x7f0000000100)='./file0\x00', 0x141000, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) 1.443344314s ago: executing program 6 (id=21800): r0 = socket$inet_icmp(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x22, 0x0) 1.186311418s ago: executing program 7 (id=21804): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) 1.079860353s ago: executing program 7 (id=21807): epoll_create(0xd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.002859857s ago: executing program 7 (id=21809): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e) close(r1) 972.448999ms ago: executing program 7 (id=21811): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 933.552391ms ago: executing program 7 (id=21812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 880.658294ms ago: executing program 3 (id=21813): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 809.516388ms ago: executing program 3 (id=21815): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigqueueinfo(0x0, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 707.739863ms ago: executing program 0 (id=21817): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 696.884764ms ago: executing program 8 (id=21818): sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d303164b8f56"], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) 671.609145ms ago: executing program 3 (id=21819): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 630.188687ms ago: executing program 8 (id=21820): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 610.346468ms ago: executing program 0 (id=21821): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x40) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 575.7706ms ago: executing program 8 (id=21822): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 534.983442ms ago: executing program 0 (id=21823): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000400)="2a154009780c4974e54ab7bc21143d0e36da3485eb3ab6db54e3f6f2f22849b0f52ea7aaab363c7807d10e9c5db9fe88f5075e5e38cdf048e332f9d613b64ca7a07cd8a71864c2a1a8aefcadd39cfa7e6916a1430fd824c7c8f9844aad5665dd89cae8625d496f8948019fbce00ada7448d134a447104923ce1aa3ab137cc251b6ad26ed102466e50d5525e195afb3c0780646b291c79f9a2f015dd4e129e06907a2c4d6bc3fb85cf9603663dcb4564a3c7da14ff56dac35539a27908f079431e9d2234af21c6c67c276d26dfbbf1402ebdb52ed60d961da292b8a2a020e0b683cffd1") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000000000ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000080)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4040814}, 0x0) 481.663295ms ago: executing program 3 (id=21824): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x6, 0x31, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 471.978516ms ago: executing program 0 (id=21825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 427.433868ms ago: executing program 6 (id=21826): poll(0x0, 0x0, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd94, &(0x7f0000000000)={@local, @link_local, @void, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "b1ba124d20fc3921"}}}}, 0x0) 364.646631ms ago: executing program 6 (id=21827): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = getpgrp(0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 343.504282ms ago: executing program 0 (id=21828): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="c7", 0x5f) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x8000008) 317.489714ms ago: executing program 6 (id=21829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x54}}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) fremovexattr(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 268.641026ms ago: executing program 6 (id=21830): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) 209.060339ms ago: executing program 3 (id=21831): sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d303164b8f56"], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) 207.266569ms ago: executing program 8 (id=21841): eventfd2(0x2, 0x80000) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 109.639185ms ago: executing program 6 (id=21832): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 109.192265ms ago: executing program 8 (id=21833): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x40) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 108.810835ms ago: executing program 3 (id=21843): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) 37.534129ms ago: executing program 7 (id=21834): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 0s ago: executing program 8 (id=21835): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) kernel console output (not intermixed with test programs): =c000003e syscall=202 compat=0 ip=0x7fcda508cdd9 code=0x7ffc0000 [ 958.035433][ T28] audit: type=1326 audit(2000001309.238:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.9.20259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcda508cb42 code=0x7ffc0000 [ 958.066325][T28621] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 958.137144][ T28] audit: type=1326 audit(2000001309.238:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.9.20259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcda508cbd7 code=0x7ffc0000 [ 958.239343][ T28] audit: type=1326 audit(2000001309.238:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.9.20259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcda5049ad1 code=0x7ffc0000 [ 958.306654][ T28] audit: type=1326 audit(2000001309.238:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.9.20259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcda508dbc9 code=0x7ffc0000 [ 958.337490][T28636] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28636 comm=syz.3.20291 [ 958.386270][T28636] sctp: [Deprecated]: syz.3.20291 (pid 28636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.386270][T28636] Use struct sctp_sack_info instead [ 958.415814][ T28] audit: type=1326 audit(2000001309.238:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.9.20259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcda5049b3b code=0x7ffc0000 [ 958.539532][T28650] hub 9-0:1.0: USB hub found [ 958.579385][T28650] hub 9-0:1.0: 8 ports detected [ 958.890827][T28687] loop6: detected capacity change from 0 to 512 [ 958.907964][T28688] team0 (unregistering): Port device team_slave_0 removed [ 958.940058][T28687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.953853][T28688] team0 (unregistering): Port device team_slave_1 removed [ 958.999612][T28687] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.741297][T28746] bridge_slave_0: invalid flags given to default FDB implementation [ 959.791842][T28748] bridge_slave_0: invalid flags given to default FDB implementation [ 959.892450][T28757] netlink: 'syz.9.20319': attribute type 1 has an invalid length. [ 959.915684][T28758] hub 9-0:1.0: USB hub found [ 959.916262][T28756] loop4: detected capacity change from 0 to 1024 [ 959.929717][T28757] bridge0: port 3(erspan1) entered blocking state [ 959.947141][T28758] hub 9-0:1.0: 8 ports detected [ 959.947523][T28756] EXT4-fs: Ignoring removed bh option [ 959.973461][T28757] bridge0: port 3(erspan1) entered disabled state [ 959.996743][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.008734][T28757] erspan1: entered allmulticast mode [ 960.018196][T28756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 960.027880][T28757] erspan1: entered promiscuous mode [ 960.207072][T24214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 960.289955][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20327'. [ 960.366062][T28794] bridge0: port 4(syz_tun) entered disabled state [ 960.409223][T28794] syz_tun (unregistering): left allmulticast mode [ 960.426689][T28794] syz_tun (unregistering): left promiscuous mode [ 960.444059][T28794] bridge0: port 4(syz_tun) entered disabled state [ 960.506494][T28817] loop9: detected capacity change from 0 to 512 [ 960.516601][T28817] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 960.544628][T28817] EXT4-fs (loop9): orphan cleanup on readonly fs [ 960.567213][T28817] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.20332: inode #15: comm syz.9.20332: iget: illegal inode # [ 960.595662][T28817] loop9: lost filesystem error report for type 5 error -117 [ 960.595822][T28817] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.20332: couldn't read orphan inode 15 (err -117) [ 960.603234][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 960.603272][ C0] EXT4-fs (loop9): initial error at time 2000001312: ext4_orphan_get:1397 [ 960.603298][ C0] EXT4-fs (loop9): last error at time 2000001312: ext4_orphan_get:1397 [ 960.669283][T28817] loop9: lost filesystem error report for type 5 error -117 [ 960.669914][T28817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 960.731448][T28412] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.917278][T28827] netlink: 272 bytes leftover after parsing attributes in process `syz.4.20335'. [ 961.312905][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/2996.tmp-b7:9' failed: Read-only file system [ 961.711767][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/2994.tmp-b7:4' failed: Read-only file system [ 961.852871][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/2993.tmp-b7:6' failed: Read-only file system [ 961.939391][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/2993.tmp-b7:6' failed: Read-only file system [ 962.026566][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/2993.tmp-b7:6' failed: Read-only file system [ 962.053405][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/2987.tmp-b7:3' failed: Read-only file system [ 962.085645][T28881] loop6: detected capacity change from 0 to 512 [ 962.114986][T28881] EXT4-fs (loop6): 1 truncate cleaned up [ 962.116462][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/2997.tmp-b7:6' failed: Read-only file system [ 962.129390][T28881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.141027][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/2987.tmp-b7:3' failed: Read-only file system [ 962.158342][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-label/\x86\x5b.tmp-b7:6' failed: Read-only file system [ 962.185274][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/2997.tmp-b7:6' failed: Read-only file system [ 962.230588][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.284710][T28896] ip6gre1: entered promiscuous mode [ 962.301562][T28896] ip6gre1: entered allmulticast mode [ 962.470453][T28918] loop4: detected capacity change from 0 to 512 [ 962.482120][T28918] EXT4-fs (loop4): 1 truncate cleaned up [ 962.493811][T28918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.564317][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20377'. [ 962.595493][T24214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.597786][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20377'. [ 962.813040][T28944] netlink: 'syz.4.20386': attribute type 1 has an invalid length. [ 962.844013][T28944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 962.963887][T28944] bond3: (slave ip6gretap3): making interface the new active one [ 963.017864][T28944] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 963.045131][T28951] netlink: 'syz.7.20389': attribute type 29 has an invalid length. [ 963.055122][T28951] netlink: 'syz.7.20389': attribute type 29 has an invalid length. [ 963.069871][T28951] netlink: 'syz.7.20389': attribute type 32 has an invalid length. [ 963.090370][T28951] netlink: 500 bytes leftover after parsing attributes in process `syz.7.20389'. [ 963.331063][T11740] Bluetooth: hci0: Frame reassembly failed (-84) [ 963.343070][T28976] netlink: 'syz.7.20400': attribute type 21 has an invalid length. [ 963.351774][T28976] netlink: 128 bytes leftover after parsing attributes in process `syz.7.20400'. [ 963.361937][T28976] netlink: 'syz.7.20400': attribute type 5 has an invalid length. [ 963.369934][T28976] netlink: 'syz.7.20400': attribute type 6 has an invalid length. [ 963.378496][T28976] netlink: 3 bytes leftover after parsing attributes in process `syz.7.20400'. [ 963.609678][T28993] netlink: 35 bytes leftover after parsing attributes in process `syz.7.20408'. [ 963.633856][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20408'. [ 964.072643][T29018] netlink: 'syz.4.20419': attribute type 4 has an invalid length. [ 964.086235][T29018] netlink: 'syz.4.20419': attribute type 4 has an invalid length. [ 964.171242][T29025] ip6gre2: entered promiscuous mode [ 964.176821][T29025] ip6gre2: entered allmulticast mode [ 964.184773][T11740] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.197066][T11740] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.206191][T29025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.214081][ T9454] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.222765][T29025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.277384][ T9168] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.387341][ T9168] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.591727][T29048] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 964.918740][T29073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.407434][T28521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 965.444983][T29075] loop9: detected capacity change from 0 to 512 [ 965.487204][T29075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.523191][T29075] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.627694][T29092] ipip1: entered promiscuous mode [ 965.636400][T29092] ipip1: entered allmulticast mode [ 965.671576][T29094] loop6: detected capacity change from 0 to 512 [ 965.690863][T29094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.743903][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.759431][T28412] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.016056][T29111] netlink: 36 bytes leftover after parsing attributes in process `syz.9.20457'. [ 966.351617][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3000.tmp-b7:4' failed: Read-only file system [ 966.675671][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3003.tmp-b7:6' failed: Read-only file system [ 966.939721][T29144] syzkaller1: entered promiscuous mode [ 966.945827][T29144] syzkaller1: entered allmulticast mode [ 966.947973][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/2987.tmp-b7:3' failed: Read-only file system [ 967.112455][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/3004.tmp-b7:9' failed: Read-only file system [ 967.146866][T18021] udevd[18021]: symlink '../../loop4' '/dev/disk/by-diskseq/3000.tmp-b7:4' failed: Read-only file system [ 967.154530][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20482'. [ 967.167692][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20482'. [ 967.177208][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20482'. [ 967.199271][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/3004.tmp-b7:9' failed: Read-only file system [ 967.211820][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20482'. [ 967.283407][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/3004.tmp-b7:9' failed: Read-only file system [ 967.339745][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/3004.tmp-b7:9' failed: Read-only file system [ 967.355929][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3003.tmp-b7:6' failed: Read-only file system [ 967.383063][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/2987.tmp-b7:3' failed: Read-only file system [ 967.474401][T29192] loop3: detected capacity change from 0 to 512 [ 967.500098][T29192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.522245][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.573575][T29199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20504'. [ 967.583619][T29199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20504'. [ 967.791321][T29226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20506'. [ 967.800674][T29226] netem: incorrect gi model size [ 967.805810][T29226] netem: change failed [ 967.897454][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 968.053908][T29243] loop4: detected capacity change from 0 to 512 [ 968.071030][T29243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 968.109173][T29243] EXT4-fs (loop4): 1 truncate cleaned up [ 968.141572][T29243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.298640][T29263] loop3: detected capacity change from 0 to 164 [ 968.325111][T29263] rock: directory entry would overflow storage [ 968.336946][T29263] rock: sig=0x5252, size=5, remaining=3 [ 968.372265][T24214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.572310][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20530'. [ 968.791236][T29306] netlink: 'syz.7.20540': attribute type 4 has an invalid length. [ 969.326329][T14585] kernel read not supported for file /ppp (pid: 14585 comm: kworker/0:13) [ 969.505836][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20551'. [ 969.564981][T29339] loop3: detected capacity change from 0 to 512 [ 969.574157][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad45000: rx timeout, send abort [ 969.583943][T29339] EXT4-fs: Ignoring removed mblk_io_submit option [ 969.598136][T29339] EXT4-fs: Ignoring removed mblk_io_submit option [ 969.608281][T29339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 969.633074][T29339] EXT4-fs (loop3): 1 truncate cleaned up [ 969.655582][T29339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.657806][T29346] loop4: detected capacity change from 0 to 512 [ 969.757968][T29349] bio_check_eod: 70 callbacks suppressed [ 969.757989][T29349] syz.4.20555: attempt to access beyond end of device [ 969.757989][T29349] loop4: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 969.787610][T29349] syz.4.20555: attempt to access beyond end of device [ 969.787610][T29349] loop4: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 969.817301][T29349] syz.4.20555: attempt to access beyond end of device [ 969.817301][T29349] loop4: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 969.864337][T29349] syz.4.20555: attempt to access beyond end of device [ 969.864337][T29349] loop4: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 969.871186][ T9472] IPVS: starting estimator thread 0... [ 969.884056][T29349] syz.4.20555: attempt to access beyond end of device [ 969.884056][T29349] loop4: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 969.898223][T29346] syz.4.20555: attempt to access beyond end of device [ 969.898223][T29346] loop4: rw=2049, sector=856, nr_sectors = 24 limit=512 [ 969.912453][T29349] syz.4.20555: attempt to access beyond end of device [ 969.912453][T29349] loop4: rw=2049, sector=848, nr_sectors = 8 limit=512 [ 969.926564][T29346] syz.4.20555: attempt to access beyond end of device [ 969.926564][T29346] loop4: rw=2049, sector=912, nr_sectors = 8 limit=512 [ 969.946624][T29349] syz.4.20555: attempt to access beyond end of device [ 969.946624][T29349] loop4: rw=2049, sector=920, nr_sectors = 8 limit=512 [ 969.967312][T29357] IPVS: using max 2640 ests per chain, 132000 per kthread [ 969.974800][T29349] syz.4.20555: attempt to access beyond end of device [ 969.974800][T29349] loop4: rw=2049, sector=936, nr_sectors = 8 limit=512 [ 970.074202][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af34200: rx timeout, send abort [ 970.082519][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad45000: abort rx timeout. Force session deactivation [ 970.129033][ T9472] IPVS: starting estimator thread 0... [ 970.237354][T29373] IPVS: using max 2304 ests per chain, 115200 per kthread [ 970.318902][T29370] loop6: detected capacity change from 0 to 512 [ 970.359799][T29370] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.20566: iget: bad i_size value: 38620345925642 [ 970.377124][T29370] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 970.381385][T29370] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.20566: couldn't read orphan inode 15 (err -117) [ 970.390755][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 970.390840][ C1] EXT4-fs (loop6): initial error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 970.391075][ C1] EXT4-fs (loop6): last error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 970.431981][T29370] loop6: lost filesystem error report for type 5 error -117 [ 970.432379][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.440175][T29370] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.519075][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 970.582535][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af34200: abort rx timeout. Force session deactivation [ 970.882622][T29411] ip6erspan0: entered promiscuous mode [ 971.365605][T18126] udevd[18126]: symlink '../../loop9' '/dev/disk/by-diskseq/3004.tmp-b7:9' failed: Read-only file system [ 971.383805][T18021] udevd[18021]: symlink '../../loop4' '/dev/disk/by-diskseq/3013.tmp-b7:4' failed: Read-only file system [ 971.410210][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3013.tmp-b7:4' failed: Read-only file system [ 971.413611][T29454] loop4: detected capacity change from 0 to 512 [ 971.428769][T29454] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.437205][T29454] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.20600: corrupted in-inode xattr: e_value size too large [ 971.440378][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3017.tmp-b7:4' failed: Read-only file system [ 971.453297][T29454] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 971.465385][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 971.465473][T29454] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.20600: couldn't read orphan inode 15 (err -117) [ 971.474575][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 971.474598][ C0] EXT4-fs (loop4): initial error at time 2000001322: ext4_iget_extra_inode:5128: inode 15 [ 971.474629][ C0] EXT4-fs (loop4): last error at time 2000001322: ext4_iget_extra_inode:5128: inode 15 [ 971.528148][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3015.tmp-b7:3' failed: Read-only file system [ 971.529292][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3017.tmp-b7:4' failed: Read-only file system [ 971.551963][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 971.561166][T29454] loop4: lost filesystem error report for type 5 error -117 [ 971.565991][T29454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.603088][T29454] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.20600: Logical block already allocated [ 971.625406][T24214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.653026][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3017.tmp-b7:4' failed: Read-only file system [ 971.666885][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3015.tmp-b7:3' failed: Read-only file system [ 971.691824][T29464] loop4: detected capacity change from 0 to 512 [ 971.702770][T29464] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.709401][T29464] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.717813][T29464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 971.729748][T29464] EXT4-fs (loop4): 1 truncate cleaned up [ 971.738137][T29464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.783734][T24214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.163231][T29495] __nla_validate_parse: 5 callbacks suppressed [ 972.163252][T29495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.20619'. [ 972.200937][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20620'. [ 972.481277][T29509] loop9: detected capacity change from 0 to 512 [ 972.509352][T29509] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.522118][T29509] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.547992][T28412] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.476320][T11731] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.494056][T29582] loop3: detected capacity change from 0 to 512 [ 973.508799][T29582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.522265][T29582] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 973.538485][T11731] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.552947][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.557708][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 973.557752][ T28] audit: type=1400 audit(2000001325.058:11620): avc: denied { bind } for pid=29583 comm="syz.7.20658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 973.623649][ T28] audit: type=1400 audit(2000001325.118:11621): avc: denied { write } for pid=29597 comm="syz.3.20659" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 973.656337][T11731] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.675728][ T28] audit: type=1400 audit(2000001325.118:11622): avc: denied { ioctl } for pid=29597 comm="syz.3.20659" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 973.733996][T29605] loop3: detected capacity change from 0 to 512 [ 973.750682][T29605] EXT4-fs: Ignoring removed i_version option [ 973.759786][T29605] EXT4-fs (loop3): Unsupported encryption level 2 [ 973.759852][T11731] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.849484][T29612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20666'. [ 973.866799][T29612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20666'. [ 974.159705][T29579] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.188994][T29579] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.228111][T29579] bridge_slave_0: entered allmulticast mode [ 974.254401][T29579] bridge_slave_0: entered promiscuous mode [ 974.277041][T29579] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.287159][T29579] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.310684][T29579] bridge_slave_1: entered allmulticast mode [ 974.320507][T29579] bridge_slave_1: entered promiscuous mode [ 974.367477][T11731] erspan1: left allmulticast mode [ 974.387297][T11731] erspan1: left promiscuous mode [ 974.401496][T11731] bridge0: port 3(erspan1) entered disabled state [ 974.431104][T11731] bridge_slave_1: left allmulticast mode [ 974.450207][T11731] bridge_slave_1: left promiscuous mode [ 974.462547][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.472535][T11731] bridge_slave_0: left allmulticast mode [ 974.478905][T11731] bridge_slave_0: left promiscuous mode [ 974.484696][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.519730][T29637] netlink: 104 bytes leftover after parsing attributes in process `syz.3.20674'. [ 974.651255][T11731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.681973][T11731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.701370][T11731] bond0 (unregistering): Released all slaves [ 974.727471][T29579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.763404][T29579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.808824][T29651] Invalid argument reading file caps for ./file0 [ 974.826880][T11731] hsr_slave_0: left promiscuous mode [ 974.842266][T11731] hsr_slave_1: left promiscuous mode [ 974.857993][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.875602][T11731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.905317][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.917588][T29653] loop3: detected capacity change from 0 to 256 [ 974.927335][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 974.934068][T11731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.943861][T29653] FAT-fs (loop3): Directory bread(block 1285) failed [ 974.964567][T29653] FAT-fs (loop3): Directory bread(block 1286) failed [ 974.973312][T11731] veth1_macvtap: left promiscuous mode [ 974.979628][T29653] FAT-fs (loop3): Directory bread(block 1287) failed [ 974.987521][T11731] veth0_macvtap: left promiscuous mode [ 974.993142][T11731] veth1_vlan: left promiscuous mode [ 974.993639][T29653] FAT-fs (loop3): Directory bread(block 1288) failed [ 974.999676][T11731] veth0_vlan: left promiscuous mode [ 975.037310][T29653] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 975.121963][T29671] netlink: 'syz.3.20688': attribute type 1 has an invalid length. [ 975.182766][T11731] team0 (unregistering): Port device team_slave_1 removed [ 975.193374][T11731] team0 (unregistering): Port device team_slave_0 removed [ 975.241405][T29579] team0: Port device team_slave_0 added [ 975.249388][T29658] macsec0: entered promiscuous mode [ 975.261946][T29671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 975.275477][T29672] bond3: (slave gretap1): making interface the new active one [ 975.285361][T29672] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 975.296758][T29579] team0: Port device team_slave_1 added [ 975.308294][T29655] macsec0: left promiscuous mode [ 975.327705][T29579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.341956][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.379097][T29579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.390662][T29579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.397648][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.427604][T29579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.451265][T29690] netlink: 'syz.6.20696': attribute type 2 has an invalid length. [ 975.473623][T29579] hsr_slave_0: entered promiscuous mode [ 975.488491][T29579] hsr_slave_1: entered promiscuous mode [ 975.496343][T29579] debugfs: 'hsr0' already exists in 'hsr' [ 975.516539][T29579] Cannot create hsr debugfs directory [ 975.624896][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 975.664560][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20698'. [ 975.673808][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20698'. [ 975.683224][T29710] netlink: 'syz.6.20698': attribute type 6 has an invalid length. [ 975.699237][T11731] IPVS: stop unused estimator thread 0... [ 975.701065][T11740] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.714891][T11740] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.724116][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20698'. [ 975.734663][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20698'. [ 975.743907][T11740] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.753087][T11740] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.761937][T29710] netlink: 'syz.6.20698': attribute type 6 has an invalid length. [ 975.870095][T29718] loop3: detected capacity change from 0 to 1024 [ 975.917193][T29718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.968159][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.024755][T29740] loop3: detected capacity change from 0 to 1024 [ 976.057823][T29740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 976.060028][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 976.070210][T29740] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.092452][T29740] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.20705: lblock 3 mapped to illegal pblock 3 (length 1) [ 976.117952][T29740] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 976.143784][T29740] EXT4-fs (loop3): This should not happen!! Data will be lost [ 976.143784][T29740] [ 976.144534][T29579] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 976.161146][T29748] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.20705: lblock 0 mapped to illegal pblock 0 (length 3) [ 976.176909][T29748] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 976.179573][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.196818][T29748] EXT4-fs (loop3): This should not happen!! Data will be lost [ 976.196818][T29748] [ 976.201794][T29579] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 976.229527][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.239984][T29579] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 976.256592][T20417] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 976.256948][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.270767][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 976.286993][T29579] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 976.300581][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.364348][T29773] netlink: 'syz.6.20711': attribute type 4 has an invalid length. [ 976.388306][T29773] netlink: 'syz.6.20711': attribute type 4 has an invalid length. [ 976.396777][T29579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.427586][T29579] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.443776][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.450906][T11749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.477445][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3016.tmp-b7:6' failed: Read-only file system [ 976.492720][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3033.tmp-b7:3' failed: Read-only file system [ 976.508723][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.515935][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.522616][T29786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20715'. [ 976.539282][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 976.584879][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3020.tmp-b7:4' failed: Read-only file system [ 976.739238][T29579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.784313][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 976.881863][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3016.tmp-b7:6' failed: Read-only file system [ 976.940437][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3016.tmp-b7:6' failed: Read-only file system [ 977.470336][T29579] veth0_vlan: entered promiscuous mode [ 977.516367][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3020.tmp-b7:4' failed: Read-only file system [ 977.528795][T29579] veth1_vlan: entered promiscuous mode [ 977.535709][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3033.tmp-b7:3' failed: Read-only file system [ 977.569453][T18029] udevd[18029]: symlink '../../loop6' '/dev/disk/by-diskseq/3016.tmp-b7:6' failed: Read-only file system [ 977.571913][T29579] veth0_macvtap: entered promiscuous mode [ 977.606711][T18126] udevd[18126]: symlink '../../loop4' '/dev/disk/by-diskseq/3020.tmp-b7:4' failed: Read-only file system [ 977.628220][T29579] veth1_macvtap: entered promiscuous mode [ 977.657584][T29579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.673526][T29579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.685797][T11882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.708119][T11882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.732037][T11882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.761648][T11882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.829405][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3033.tmp-b7:3' failed: Read-only file system [ 978.243692][T29910] loop8: detected capacity change from 0 to 512 [ 978.291701][T29910] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.20655: iget: bad i_size value: 38620345925642 [ 978.301804][T29951] tipc: Started in network mode [ 978.308583][T29905] loop3: detected capacity change from 0 to 1024 [ 978.317436][T29951] tipc: Node identity ac14140f, cluster identity 4711 [ 978.318166][T29951] tipc: Enabled bearer , priority 2 [ 978.350691][T29910] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 978.352914][T29910] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.20655: couldn't read orphan inode 15 (err -117) [ 978.362495][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 978.362559][ C1] EXT4-fs (loop8): initial error at time 2000001329: ext4_orphan_get:1397: inode 15 [ 978.362676][ C1] EXT4-fs (loop8): last error at time 2000001329: ext4_orphan_get:1397: inode 15 [ 978.403651][T29910] loop8: lost filesystem error report for type 5 error -117 [ 978.409024][T29910] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.528879][T29905] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 978.551233][T29905] System zones: 0-1, 3-36 [ 978.615489][T29905] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.20725: bad orphan inode 134217728 [ 978.641365][T29905] loop3: lost filesystem error report for type 5 error -117 [ 978.667484][T29905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.722163][T29579] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 978.822083][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.014328][T30013] tipc: Started in network mode [ 979.030884][T30013] tipc: Node identity ac14140f, cluster identity 4711 [ 979.048783][T30013] tipc: Enabled bearer , priority 2 [ 979.183331][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20751'. [ 979.258025][T30050] loop3: detected capacity change from 0 to 512 [ 979.283704][T30050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 979.335003][T30050] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.20755: iget: bad i_size value: 38620345925642 [ 979.350309][T30050] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 979.350515][T30050] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.20755: couldn't read orphan inode 15 (err -117) [ 979.359786][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 979.359827][ C1] EXT4-fs (loop3): initial error at time 2000001330: ext4_orphan_get:1397: inode 15 [ 979.359858][ C1] EXT4-fs (loop3): last error at time 2000001330: ext4_orphan_get:1397: inode 15 [ 979.398027][T30050] loop3: lost filesystem error report for type 5 error -117 [ 979.400336][T30050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.447471][ T9170] tipc: Node number set to 2886997007 [ 979.455854][T30050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.20755: bg 0: block 5: invalid block bitmap [ 979.468917][T30050] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 979.481365][T30050] EXT4-fs (loop3): This should not happen!! Data will be lost [ 979.481365][T30050] [ 979.491326][T30050] EXT4-fs (loop3): Total free blocks count 0 [ 979.498096][T30050] EXT4-fs (loop3): Free/Dirty block details [ 979.505511][T30050] EXT4-fs (loop3): free_blocks=0 [ 979.516401][T30050] EXT4-fs (loop3): dirty_blocks=1 [ 979.527138][T30050] EXT4-fs (loop3): Block reservation details [ 979.543204][T30050] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 979.568060][T30025] loop6: detected capacity change from 0 to 32768 [ 979.603521][T30002] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.616296][T20417] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 979.627745][T30002] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.635250][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.645350][T30025] loop6: p1 p3 < > [ 979.651644][T30002] bridge_slave_0: entered allmulticast mode [ 979.661841][T30002] bridge_slave_0: entered promiscuous mode [ 979.674549][T30002] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.683489][T30002] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.690913][T30002] bridge_slave_1: entered allmulticast mode [ 979.703551][T30002] bridge_slave_1: entered promiscuous mode [ 979.750756][T30002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.779239][T11740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.806901][T11740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.839034][T30002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.896297][T11740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.940043][T11740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.969134][T30002] team0: Port device team_slave_0 added [ 979.989690][T30002] team0: Port device team_slave_1 added [ 980.030525][T11740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.055604][T11740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.163354][T30002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.170551][T30002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.205101][T30002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.224681][T11740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.235560][T11740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.251105][ T3388] tipc: Node number set to 2886997007 [ 980.260383][T30002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.268018][T30002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.294133][T30002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.395287][T30002] hsr_slave_0: entered promiscuous mode [ 980.411906][T30002] hsr_slave_1: entered promiscuous mode [ 980.423647][T30002] debugfs: 'hsr0' already exists in 'hsr' [ 980.429667][T30002] Cannot create hsr debugfs directory [ 980.492770][T11740] batadv1: left allmulticast mode [ 980.505203][T11740] batadv1: left promiscuous mode [ 980.518905][T11740] bridge0: port 3(batadv1) entered disabled state [ 980.531738][T30145] syz.6.20773: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 980.555710][T11740] bridge_slave_1: left allmulticast mode [ 980.557428][T30145] CPU: 1 UID: 0 PID: 30145 Comm: syz.6.20773 Tainted: G W syzkaller #0 PREEMPT(full) [ 980.557464][T30145] Tainted: [W]=WARN [ 980.557553][T30145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.557566][T30145] Call Trace: [ 980.557573][T30145] [ 980.557582][T30145] __dump_stack+0x1d/0x30 [ 980.557609][T30145] dump_stack_lvl+0x95/0xd0 [ 980.557662][T30145] dump_stack+0x15/0x1b [ 980.557683][T30145] warn_alloc+0x145/0x1c0 [ 980.557709][T30145] ? futex_unqueue+0xc5/0xf0 [ 980.557783][T30145] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 980.557859][T30145] ? __pfx_futex_wake_mark+0x10/0x10 [ 980.557883][T30145] ? __rcu_read_unlock+0x4e/0x70 [ 980.557968][T30145] ? avc_has_perm_noaudit+0xab/0x130 [ 980.558006][T30145] ? should_fail_ex+0x30/0x280 [ 980.558057][T30145] vmalloc_user_noprof+0x7d/0xb0 [ 980.558079][T30145] ? xskq_create+0x80/0xe0 [ 980.558104][T30145] xskq_create+0x80/0xe0 [ 980.558128][T30145] xsk_init_queue+0x70/0xb0 [ 980.558152][T30145] xsk_setsockopt+0x477/0x640 [ 980.558241][T30145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 980.558264][T30145] __sys_setsockopt+0x184/0x200 [ 980.558287][T30145] __x64_sys_setsockopt+0x64/0x80 [ 980.558342][T30145] x64_sys_call+0x2327/0x3020 [ 980.558367][T30145] do_syscall_64+0x12c/0x3b0 [ 980.558392][T30145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.558415][T30145] RIP: 0033:0x7f2f4be8cdd9 [ 980.558434][T30145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.558468][T30145] RSP: 002b:00007f2f4a8df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 980.558490][T30145] RAX: ffffffffffffffda RBX: 00007f2f4c105fa0 RCX: 00007f2f4be8cdd9 [ 980.558506][T30145] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 980.558526][T30145] RBP: 00007f2f4bf22d69 R08: 0000000000000004 R09: 0000000000000000 [ 980.558540][T30145] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 980.558615][T30145] R13: 00007f2f4c106038 R14: 00007f2f4c105fa0 R15: 00007ffd2576e258 [ 980.558636][T30145] [ 980.568888][T30145] Mem-Info: [ 980.593001][T11740] bridge_slave_1: left promiscuous mode [ 980.603989][T30145] active_anon:7580 inactive_anon:12749 isolated_anon:0 [ 980.603989][T30145] active_file:14459 inactive_file:11698 isolated_file:0 [ 980.603989][T30145] unevictable:0 dirty:241 writeback:0 [ 980.603989][T30145] slab_reclaimable:3257 slab_unreclaimable:84003 [ 980.603989][T30145] mapped:29396 shmem:12942 pagetables:3786 [ 980.603989][T30145] sec_pagetables:0 bounce:0 [ 980.603989][T30145] kernel_misc_reclaimable:0 [ 980.603989][T30145] free:1782953 free_pcp:6058 free_cma:0 [ 980.626686][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.647333][T30145] Node 0 active_anon:31828kB inactive_anon:50996kB active_file:57836kB inactive_file:46792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117584kB dirty:964kB writeback:0kB shmem:53276kB kernel_stack:5456kB pagetables:15144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 980.866460][T11740] bridge_slave_0: left allmulticast mode [ 980.890723][T11740] bridge_slave_0: left promiscuous mode [ 980.904456][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.907339][T30145] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.948327][T11740] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 980.955951][T11740] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 980.963507][T30145] lowmem_reserve[]: 0 2878 7857 7857 [ 980.970010][T30145] Node 0 DMA32 free:2944460kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 981.002291][T30145] lowmem_reserve[]: 0 0 4978 4978 [ 981.038367][T30145] Node 0 Normal free:4171468kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30320kB inactive_anon:50996kB active_file:57836kB inactive_file:46792kB unevictable:0kB writepending:964kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:21168kB local_pcp:19308kB free_cma:0kB [ 981.100788][T11740] batman_adv: batadv0: Removing interface: ip6gretap1 [ 981.108000][T30145] lowmem_reserve[]: 0 0 0 0 [ 981.112570][T30145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 981.125966][T30145] Node 0 DMA32: 3*4kB (M) 2*8kB [ 981.129122][T11740] batman_adv: batadv0: Removing interface: ip6gretap2 [ 981.141053][T30145] (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944460kB [ 981.155205][T30145] Node 0 Normal: 3045*4kB (UME) 5053*8kB (UME) [ 981.156944][T11740] bond3 (unregistering): (slave ip6gretap3): Releasing active interface [ 981.180358][T30145] 2506*16kB (UME) 384*32kB (UME) 1244*64kB (UME) 953*128kB (UME) 674*256kB (UME) 549*512kB (UME) 478*1024kB (UME) 361*2048kB (UM) 530*4096kB (UME) = 4159900kB [ 981.208037][T11740] gretap0 (unregistering): left promiscuous mode [ 981.214503][T30145] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 981.235005][T30145] 40459 total pagecache pages [ 981.242356][T30145] 18 pages in swap cache [ 981.246664][T30145] Free swap = 108724kB [ 981.251153][T30145] Total swap = 124996kB [ 981.255349][T30145] 2097051 pages RAM [ 981.259485][T30145] 0 pages HighMem/MovableOnly [ 981.264195][T30145] 81630 pages reserved [ 981.280236][T11740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.291627][T11740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.305054][T11740] bond0 (unregistering): Released all slaves [ 981.318228][T11740] bond1 (unregistering): (slave lo): Releasing backup interface [ 981.329304][T11740] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 981.352425][T11740] bond1 (unregistering): Released all slaves [ 981.378943][T11740] bond2 (unregistering): Released all slaves [ 981.392658][T11740] bond3 (unregistering): Released all slaves [ 981.452665][T11740] veth1_to_team: left promiscuous mode [ 981.461986][T30182] loop6: detected capacity change from 0 to 2048 [ 981.469519][T11740] hsr_slave_0: left promiscuous mode [ 981.475297][T11740] hsr_slave_1: left promiscuous mode [ 981.481310][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.491567][T11740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.501952][T30182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.514659][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.531659][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3042.tmp-b7:6' failed: Read-only file system [ 981.548183][T11740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.579404][T30182] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 981.601991][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 981.620577][T11740] veth1_macvtap: left promiscuous mode [ 981.631390][T11740] veth0_macvtap: left promiscuous mode [ 981.637414][T30182] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 981.650465][T30182] EXT4-fs (loop6): This should not happen!! Data will be lost [ 981.650465][T30182] [ 981.660470][T30182] EXT4-fs (loop6): Total free blocks count 0 [ 981.666532][T30182] EXT4-fs (loop6): Free/Dirty block details [ 981.672700][T30182] EXT4-fs (loop6): free_blocks=66060288 [ 981.679093][T30182] EXT4-fs (loop6): dirty_blocks=48 [ 981.684388][T30182] EXT4-fs (loop6): Block reservation details [ 981.685393][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3042.tmp-b7:6' failed: Read-only file system [ 981.690718][T30182] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 981.724986][T30191] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 981.742339][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 981.783777][T23043] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 981.830263][T18126] udevd[18126]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 981.852219][T11740] team0 (unregistering): Port device team_slave_1 removed [ 981.860573][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3042.tmp-b7:6' failed: Read-only file system [ 981.875791][T11740] team0 (unregistering): Port device team_slave_0 removed [ 981.891838][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3042.tmp-b7:6' failed: Read-only file system [ 981.938824][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3043.tmp-b7:6' failed: Read-only file system [ 982.070490][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3040.tmp-b7:3' failed: Read-only file system [ 982.096187][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3043.tmp-b7:6' failed: Read-only file system [ 982.161676][T30210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20795'. [ 982.276840][T30224] netlink: 'syz.3.20799': attribute type 34 has an invalid length. [ 982.394373][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 982.446687][T30002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 982.565920][T30002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.595300][T30002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 982.613472][T30248] IPv4: Oversized IP packet from 127.202.26.0 [ 982.745611][T30002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.795294][T30002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 982.806547][T30002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.823221][T30002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 982.832881][T30002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.882034][T30002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.894930][T30002] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.905091][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.912361][ T8902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.936099][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.943247][ T8902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.023350][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 983.141390][T30002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.263671][T30002] veth0_vlan: entered promiscuous mode [ 983.273337][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 983.283492][T30002] veth1_vlan: entered promiscuous mode [ 983.312662][T30002] veth0_macvtap: entered promiscuous mode [ 983.320957][T30002] veth1_macvtap: entered promiscuous mode [ 983.339181][T30002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.355825][T30002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.369039][T11731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.388190][T11731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.407482][T11731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.427389][T11731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.552095][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 983.620341][ T8902] tipc: Subscription rejected, illegal request [ 983.909519][T30377] loop0: detected capacity change from 0 to 1024 [ 983.992685][T30377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 984.021217][T30377] System zones: 0-1, 3-36 [ 984.085039][T30377] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.20824: bad orphan inode 134217728 [ 984.110363][T30377] loop0: lost filesystem error report for type 5 error -117 [ 984.121738][T30377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.264985][T30432] xt_hashlimit: size too large, truncated to 1048576 [ 984.285259][T30002] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.739078][T30487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20849'. [ 984.784309][T30490] syzkaller1: entered promiscuous mode [ 984.814222][T30490] syzkaller1: entered allmulticast mode [ 985.965309][T30592] loop3: detected capacity change from 0 to 512 [ 986.042196][T30592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.062575][T30592] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 986.103739][ T1022] tipc: Subscription rejected, illegal request [ 986.163422][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.383058][T30628] loop3: detected capacity change from 0 to 128 [ 986.560303][ T28] audit: type=1400 audit(2000001338.058:11623): avc: denied { write } for pid=30640 comm="syz.6.20881" path="socket:[192904]" dev="sockfs" ino=192904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 986.623301][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3043.tmp-b7:6' failed: Read-only file system [ 986.626233][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3048.tmp-b7:3' failed: Read-only file system [ 986.668242][T30646] loop6: detected capacity change from 0 to 512 [ 986.702657][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3048.tmp-b7:3' failed: Read-only file system [ 986.724213][T30646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.745736][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3050.tmp-b7:6' failed: Read-only file system [ 986.769806][T18029] udevd[18029]: symlink '../../loop8' '/dev/disk/by-diskseq/3036.tmp-b7:8' failed: Read-only file system [ 986.774079][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3049.tmp-b7:3' failed: Read-only file system [ 986.809309][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 986.834130][T30646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.864484][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3050.tmp-b7:6' failed: Read-only file system [ 986.887823][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 986.910209][T30646] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 986.967703][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3049.tmp-b7:3' failed: Read-only file system [ 987.141404][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.253548][T30687] netlink: 32 bytes leftover after parsing attributes in process `syz.8.20895'. [ 987.263435][T30687] netlink: 32 bytes leftover after parsing attributes in process `syz.8.20895'. [ 987.302013][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20897'. [ 987.311208][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20897'. [ 987.814934][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20916'. [ 988.798818][T30772] loop0: detected capacity change from 0 to 1024 [ 988.873570][T30772] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 989.068427][T30772] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.20930: lblock 2 mapped to illegal pblock 2 (length 1) [ 989.084611][T30772] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 989.089241][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 989.106761][ C0] EXT4-fs (loop0): initial error at time 2000001340: ext4_map_blocks:791: inode 3: block 2 [ 989.118977][ C0] EXT4-fs (loop0): last error at time 2000001340: ext4_map_blocks:791: inode 3: block 2 [ 989.148668][T30772] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 989.172029][T30772] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.20930: lblock 0 mapped to illegal pblock 48 (length 1) [ 989.239643][T30772] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 989.259583][T30772] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 989.345879][T30818] loop8: detected capacity change from 0 to 512 [ 989.386779][T30772] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.20930: Failed to acquire dquot type 0 [ 989.411156][T30818] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 989.426777][T30818] System zones: 0-2, 18-18, 34-35 [ 989.438121][T30818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.457389][T30818] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.473821][T30772] loop0: lost filesystem error report for type 5 error -117 [ 989.494627][T30772] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 989.517782][T30772] loop0: lost filesystem error report for type 5 error -117 [ 989.524305][T30772] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.20930: mark_inode_dirty error [ 989.570770][T30772] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 989.574737][T30772] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 989.575050][T29579] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.619579][T30772] EXT4-fs (loop0): 1 orphan inode deleted [ 989.637398][ T8902] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 989.655090][ T8902] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 989.655269][ T8902] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 989.672311][T30831] loop3: detected capacity change from 0 to 1024 [ 989.703320][ T8902] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 989.705698][T30831] EXT4-fs: Ignoring removed bh option [ 989.737383][ T8902] loop0: lost filesystem error report for type 5 error -117 [ 989.803392][T30831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.914816][T30772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.090610][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.296780][T30772] EXT4-fs: Ignoring removed bh option [ 990.354503][T30772] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 990.410470][T30772] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 990.480006][T30772] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.20930: lblock 0 mapped to illegal pblock 48 (length 1) [ 990.534728][T30772] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 990.588426][T30002] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.988602][ T28] audit: type=1326 audit(2000001342.488:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.20966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x0 [ 991.304238][T30895] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.20971'. [ 991.404073][T30903] loop8: detected capacity change from 0 to 512 [ 991.455160][T30903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 991.525024][T30903] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 991.712230][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3051.tmp-b7:6' failed: Read-only file system [ 991.752030][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3051.tmp-b7:6' failed: Read-only file system [ 991.839111][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3057.tmp-b7:0' failed: Read-only file system [ 991.856470][T29579] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 991.871783][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3051.tmp-b7:6' failed: Read-only file system [ 991.917787][T18126] udevd[18126]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 991.938662][T30919] syzkaller0: entered promiscuous mode [ 991.945365][T18126] udevd[18126]: symlink '../../loop8' '/dev/disk/by-diskseq/3058.tmp-b7:8' failed: Read-only file system [ 991.957103][T30919] syzkaller0: entered allmulticast mode [ 991.966768][T18126] udevd[18126]: symlink '../../loop8' '/dev/disk/by-diskseq/3058.tmp-b7:8' failed: Read-only file system [ 992.016493][T18126] udevd[18126]: symlink '../../loop8' '/dev/disk/by-diskseq/3059.tmp-b7:8' failed: Read-only file system [ 992.043519][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3051.tmp-b7:6' failed: Read-only file system [ 992.088838][T18126] udevd[18126]: symlink '../../loop8' '/dev/disk/by-diskseq/3059.tmp-b7:8' failed: Read-only file system [ 992.584377][T30967] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.591798][T30967] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.640030][T30967] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.647184][T30967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.654639][T30967] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.661742][T30967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.690952][T30978] loop8: detected capacity change from 0 to 512 [ 992.701287][T30967] bridge0: entered promiscuous mode [ 992.715088][T30978] EXT4-fs: Ignoring removed bh option [ 992.726893][T30967] bridge0: entered allmulticast mode [ 992.737772][T30978] EXT4-fs: Mount option(s) incompatible with ext2 [ 992.761220][T30984] macsec0: entered promiscuous mode [ 992.774318][T30979] macsec0: left promiscuous mode [ 993.136454][T31021] 9pnet: p9_errstr2errno: server reported unknown error ˙˙˙ [ 993.192476][T31035] loop3: detected capacity change from 0 to 1024 [ 993.220789][T31035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 993.237442][T31035] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.272999][T31035] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 3) [ 993.297468][T31035] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 993.349443][T31035] EXT4-fs (loop3): This should not happen!! Data will be lost [ 993.349443][T31035] [ 993.364234][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.391770][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.428882][T31034] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.459338][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.476140][T31034] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.492651][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.509316][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.524541][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 993.542157][T31047] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.21015: lblock 3 mapped to illegal pblock 3 (length 1) [ 994.255073][T11749] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 994.295562][T11749] EXT4-fs (loop3): This should not happen!! Data will be lost [ 994.295562][T11749] [ 994.333130][T20417] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 994.357846][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 995.189901][T31153] loop0: detected capacity change from 0 to 128 [ 995.209739][T31153] bio_check_eod: 50 callbacks suppressed [ 995.209758][T31153] syz.0.21059: attempt to access beyond end of device [ 995.209758][T31153] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 995.230315][T31153] syz.0.21059: attempt to access beyond end of device [ 995.230315][T31153] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 995.244441][T31153] buffer_io_error: 42 callbacks suppressed [ 995.244461][T31153] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 995.260638][T31153] syz.0.21059: attempt to access beyond end of device [ 995.260638][T31153] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 995.281067][T31153] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 995.291384][T31153] syz.0.21059: attempt to access beyond end of device [ 995.291384][T31153] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 995.305283][T31153] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 995.316761][T31153] syz.0.21059: attempt to access beyond end of device [ 995.316761][T31153] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 995.332160][T31153] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 995.465153][T31167] netlink: 'syz.8.21065': attribute type 1 has an invalid length. [ 995.475254][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21065'. [ 995.668728][T31187] loop3: detected capacity change from 0 to 512 [ 995.768589][T31194] loop3: detected capacity change from 0 to 1024 [ 995.793555][T31194] EXT4-fs: Ignoring removed oldalloc option [ 995.819833][T31194] EXT4-fs: Ignoring removed oldalloc option [ 995.826663][T31194] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 995.845310][T31199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21078'. [ 995.879004][T31199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21078'. [ 995.891470][T31202] loop8: detected capacity change from 0 to 512 [ 995.901540][T31194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.938064][T31199] netlink: 'syz.7.21078': attribute type 11 has an invalid length. [ 995.946465][T31199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21078'. [ 995.947957][T31205] loop6: detected capacity change from 0 to 512 [ 995.956491][T31199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21078'. [ 995.964469][T31205] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 995.977058][T31199] netlink: 'syz.7.21078': attribute type 11 has an invalid length. [ 995.990632][T31202] EXT4-fs: Ignoring removed orlov option [ 995.998739][T31205] EXT4-fs (loop6): 1 truncate cleaned up [ 996.004977][T31205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.027372][T31202] EXT4-fs: test_dummy_encryption option not supported [ 996.059877][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.135707][T31211] netlink: 'syz.6.21081': attribute type 1 has an invalid length. [ 996.166387][T31211] netlink: 'syz.6.21081': attribute type 22 has an invalid length. [ 996.190200][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.271252][T31224] ref_ctr_offset mismatch. inode: 0xafb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 996.394745][ T28] audit: type=1400 audit(2000001347.888:11625): avc: denied { create } for pid=31237 comm="syz.0.21094" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 996.701309][ T28] audit: type=1326 audit(2000001604.257:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 996.732998][T31268] loop6: detected capacity change from 0 to 1024 [ 996.764561][T31268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 996.770269][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3074.tmp-b7:6' failed: Read-only file system [ 996.776912][T31268] System zones: [ 996.792015][ T28] audit: type=1326 audit(2000001604.257:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 996.818356][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 996.835328][T31268] 0-1, 3-36 [ 996.838255][T18021] udevd[18021]: symlink '../../loop0' '/dev/disk/by-diskseq/3065.tmp-b7:0' failed: Read-only file system [ 996.859959][T31268] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.21109: bad orphan inode 134217728 [ 996.863300][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3074.tmp-b7:6' failed: Read-only file system [ 996.884717][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 996.899081][ T28] audit: type=1326 audit(2000001604.257:11628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 996.912780][T31268] loop6: lost filesystem error report for type 5 error -117 [ 996.923398][ T28] audit: type=1326 audit(2000001604.257:11629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 996.955969][ T28] audit: type=1326 audit(2000001604.297:11630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 996.983969][T31268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.984296][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3065.tmp-b7:0' failed: Read-only file system [ 997.034494][ T28] audit: type=1326 audit(2000001604.297:11631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 997.106785][ T28] audit: type=1326 audit(2000001604.367:11632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 997.172600][ T28] audit: type=1326 audit(2000001604.377:11633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 997.222920][T18021] udevd[18021]: symlink '../../loop8' '/dev/disk/by-diskseq/3071.tmp-b7:8' failed: Read-only file system [ 997.235135][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3073.tmp-b7:3' failed: Read-only file system [ 997.268716][ T28] audit: type=1326 audit(2000001604.377:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31267 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 997.314115][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3073.tmp-b7:3' failed: Read-only file system [ 997.357717][T31296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.439492][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3065.tmp-b7:0' failed: Read-only file system [ 997.502789][T31296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.764780][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.304064][T31348] loop0: detected capacity change from 0 to 512 [ 998.444756][T31363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21128'. [ 998.446661][T31365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21130'. [ 998.486080][T31361] loop0: detected capacity change from 0 to 4096 [ 998.492664][T31363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21128'. [ 998.511124][T31361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 998.534898][T31361] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 998.559988][T31361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.682262][T30002] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.914345][T31354] loop8: detected capacity change from 0 to 1024 [ 998.943018][T31392] sctp: [Deprecated]: syz.3.21141 (pid 31392) Use of int in max_burst socket option deprecated. [ 998.943018][T31392] Use struct sctp_assoc_value instead [ 998.985677][T31354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 999.018999][T31354] System zones: 0-1, 3-36 [ 999.089976][T31354] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.21124: bad orphan inode 134217728 [ 999.110751][T31354] loop8: lost filesystem error report for type 5 error -117 [ 999.117549][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 999.132520][ C0] EXT4-fs (loop8): initial error at time 2000001606: ext4_orphan_get:1423 [ 999.142199][ C0] EXT4-fs (loop8): last error at time 2000001606: ext4_orphan_get:1423 [ 999.169598][T31407] netlink: 'syz.7.21147': attribute type 1 has an invalid length. [ 999.211957][T31407] bond1: entered promiscuous mode [ 999.217409][T31407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 999.246307][T31354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.269150][T31407] bond1: (slave veth3): making interface the new active one [ 999.297319][T31407] veth3: entered promiscuous mode [ 999.303203][T31407] bond1: (slave veth3): Enslaving as an active interface with an up link [ 999.345480][T31399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31399 comm=syz.3.21153 [ 999.362268][T29579] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.045515][T31453] gretap1: entered promiscuous mode [ 1000.604468][T31461] loop0: detected capacity change from 0 to 128 [ 1000.896669][T31478] loop6: detected capacity change from 0 to 1024 [ 1000.920297][T31478] EXT4-fs: Ignoring removed bh option [ 1000.979742][T31478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.215539][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.231315][T31498] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21181'. [ 1001.377506][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21183'. [ 1001.787147][T31526] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21193'. [ 1001.827710][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1001.869873][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1001.922678][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1002.003151][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1002.058816][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3085.tmp-b7:6' failed: Read-only file system [ 1002.091258][T18021] udevd[18021]: symlink '../../loop8' '/dev/disk/by-diskseq/3081.tmp-b7:8' failed: Read-only file system [ 1002.131672][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3085.tmp-b7:6' failed: Read-only file system [ 1002.136258][T31545] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21202'. [ 1002.166283][T18021] udevd[18021]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1002.225558][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1002.296398][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3083.tmp-b7:0' failed: Read-only file system [ 1002.300301][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21204'. [ 1002.492589][T31562] SELinux: Context system_u:object is not valid (left unmapped). [ 1002.517837][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1002.517855][ T28] audit: type=1400 audit(2000001610.067:11653): avc: denied { relabelto } for pid=31561 comm="syz.8.21209" name="cgroup.procs" dev="cgroup" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1002.615855][ T28] audit: type=1400 audit(2000001610.067:11654): avc: denied { associate } for pid=31561 comm="syz.8.21209" name="cgroup.procs" dev="cgroup" ino=592 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 1002.644441][T31435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.771493][T31572] loop6: detected capacity change from 0 to 2048 [ 1002.819171][T31572] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 1002.829264][T31572] loop6: partition table partially beyond EOD, truncated [ 1002.840787][T31572] loop6: p1 start 385023 is beyond EOD, truncated [ 1002.858618][T31572] loop6: p2 start 4278190080 is beyond EOD, truncated [ 1002.877753][T31572] loop6: p4 start 1979908096 is beyond EOD, truncated [ 1002.898142][T31572] loop6: p5 start 385023 is beyond EOD, truncated [ 1002.916409][T31572] loop6: p6 start 1979908096 is beyond EOD, truncated [ 1003.519791][T31611] dvmrp0: entered allmulticast mode [ 1003.872354][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21237'. [ 1003.898246][T31627] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21237'. [ 1003.920670][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21237'. [ 1003.940002][T31627] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21237'. [ 1004.148849][T31639] loop0: detected capacity change from 0 to 128 [ 1004.395774][T31659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21251'. [ 1004.764184][T31674] loop3: detected capacity change from 0 to 1024 [ 1004.774745][T31674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1004.792707][T31674] System zones: 0-1, 3-36 [ 1004.803530][T31674] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.21257: bad orphan inode 134217728 [ 1004.818334][T31674] loop3: lost filesystem error report for type 5 error -117 [ 1004.818901][T31674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.332333][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.362034][T31605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1006.577572][ T28] audit: type=1400 audit(2000001614.127:11655): avc: denied { read } for pid=31737 comm="syz.7.21284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1006.626960][ T28] audit: type=1400 audit(2000001614.177:11656): avc: denied { create } for pid=31743 comm="syz.7.21287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1006.887027][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3089.tmp-b7:0' failed: Read-only file system [ 1006.936893][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3091.tmp-b7:3' failed: Read-only file system [ 1007.291247][T31766] netlink: 'syz.7.21295': attribute type 4 has an invalid length. [ 1007.300890][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3087.tmp-b7:6' failed: Read-only file system [ 1007.338962][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3089.tmp-b7:0' failed: Read-only file system [ 1007.369142][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3091.tmp-b7:3' failed: Read-only file system [ 1007.391726][ T28] audit: type=1400 audit(2000001614.937:11657): avc: denied { write } for pid=31780 comm="syz.7.21301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1007.460904][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3091.tmp-b7:3' failed: Read-only file system [ 1007.479371][T18021] udevd[18021]: symlink '../../loop0' '/dev/disk/by-diskseq/3089.tmp-b7:0' failed: Read-only file system [ 1007.542442][T31788] xt_hashlimit: size too large, truncated to 1048576 [ 1007.781463][T31801] netlink: 'syz.8.21309': attribute type 1 has an invalid length. [ 1007.842792][T31801] bond1: entered promiscuous mode [ 1007.854413][T31801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.936308][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3091.tmp-b7:3' failed: Read-only file system [ 1007.960873][T31797] loop0: detected capacity change from 0 to 32768 [ 1007.997859][T31797] loop0: p1 p3 < > [ 1008.014605][T31813] loop3: detected capacity change from 0 to 1024 [ 1008.018129][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3091.tmp-b7:3' failed: Read-only file system [ 1008.044832][T31813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.085848][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3093.tmp-b7:3' failed: Read-only file system [ 1008.109930][ T28] audit: type=1326 audit(2000001615.667:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.153006][ T28] audit: type=1326 audit(2000001615.687:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.176939][ T28] audit: type=1326 audit(2000001615.687:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.200936][ T28] audit: type=1326 audit(2000001615.687:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.226144][ T28] audit: type=1326 audit(2000001615.687:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.268743][ T28] audit: type=1326 audit(2000001615.687:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.323507][ T28] audit: type=1326 audit(2000001615.687:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.366873][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.389922][ T28] audit: type=1326 audit(2000001615.687:11665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.449133][ T28] audit: type=1326 audit(2000001615.687:11666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.503566][T31841] loop3: detected capacity change from 0 to 1024 [ 1008.510227][ T28] audit: type=1326 audit(2000001615.687:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.0.21315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x7ffc0000 [ 1008.561334][T31841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.982812][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21333'. [ 1009.210208][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.222331][T31871] dummy0: entered allmulticast mode [ 1009.231857][T31871] dummy0: left allmulticast mode [ 1009.278428][ T9168] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1009.292911][ T9168] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1009.313909][T31878] loop6: detected capacity change from 0 to 512 [ 1009.352379][T31878] EXT4-fs (loop6): 1 truncate cleaned up [ 1009.371122][T31878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.833683][T31927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.850874][T31927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.137567][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.284600][T31936] loop6: detected capacity change from 0 to 256 [ 1010.317254][T31936] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1010.569408][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21370'. [ 1010.596255][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21370'. [ 1010.850604][T31970] netlink: 'syz.8.21379': attribute type 1 has an invalid length. [ 1010.904397][T31970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1010.926880][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21381'. [ 1010.973093][T31972] bond2: (slave gretap2): making interface the new active one [ 1010.995954][T31972] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1011.043069][T31980] geneve2: entered promiscuous mode [ 1011.056276][T31980] geneve2: entered allmulticast mode [ 1011.895627][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1011.939749][T32042] loop3: detected capacity change from 0 to 128 [ 1011.949926][T32042] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 1011.964245][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3097.tmp-b7:3' failed: Read-only file system [ 1011.969554][T32042] netlink: 35 bytes leftover after parsing attributes in process `syz.3.21410'. [ 1011.988199][T32042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21410'. [ 1011.992790][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3102.tmp-b7:3' failed: Read-only file system [ 1012.031734][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3102.tmp-b7:3' failed: Read-only file system [ 1012.044738][T32035] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.048601][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3102.tmp-b7:3' failed: Read-only file system [ 1012.099078][T18029] udevd[18029]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1012.128326][T32035] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.170782][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1012.220173][T32035] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.244813][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3103.tmp-b7:3' failed: Read-only file system [ 1012.262145][T32035] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.319556][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3103.tmp-b7:3' failed: Read-only file system [ 1012.356500][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21418'. [ 1012.385817][T11749] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.392033][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21418'. [ 1012.403504][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3103.tmp-b7:3' failed: Read-only file system [ 1012.453753][ T8902] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.464860][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21418'. [ 1012.474419][ T8902] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.500445][ T8902] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.510864][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21418'. [ 1012.522125][ T8902] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.531597][ T8902] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.540855][ T8902] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.549876][ T8902] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.135058][T32075] loop3: detected capacity change from 0 to 8192 [ 1013.233986][T32095] futex_wake_op: syz.7.21433 tries to shift op by 32; fix this program [ 1013.299925][T20417] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 1013.324297][T20417] FAT-fs (loop3): Filesystem has been set read-only [ 1013.402961][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 1013.403008][ T28] audit: type=1326 audit(2000001620.957:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.435764][ T28] audit: type=1400 audit(2000001620.957:11711): avc: denied { create } for pid=32109 comm="syz.6.21441" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1013.480127][ T28] audit: type=1326 audit(2000001620.987:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.505033][ T28] audit: type=1326 audit(2000001620.987:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.559086][ T28] audit: type=1326 audit(2000001620.987:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.640285][ T28] audit: type=1326 audit(2000001620.987:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.713662][ T28] audit: type=1326 audit(2000001620.987:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.779574][ T28] audit: type=1326 audit(2000001620.987:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.828457][ T28] audit: type=1326 audit(2000001620.987:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1013.852499][ T28] audit: type=1326 audit(2000001620.987:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32110 comm="syz.3.21435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f9c20dccdd9 code=0x7ffc0000 [ 1014.592791][T32160] loop3: detected capacity change from 0 to 512 [ 1014.619275][T32162] loop6: detected capacity change from 0 to 512 [ 1014.645928][T32160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.668999][T32162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.681014][T32160] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.701677][T32162] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.723125][T32175] netlink: 64 bytes leftover after parsing attributes in process `syz.7.21467'. [ 1014.765308][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.778905][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21469'. [ 1014.797553][T32180] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21469'. [ 1015.756150][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.797684][T32215] sctp: [Deprecated]: syz.6.21472 (pid 32215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1015.797684][T32215] Use struct sctp_sack_info instead [ 1016.323950][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21496'. [ 1016.356774][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21496'. [ 1016.604311][T32253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.21500'. [ 1016.641059][T32253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21500'. [ 1017.130493][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1017.153319][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3108.tmp-b7:3' failed: Read-only file system [ 1017.178241][T20621] udevd[20621]: symlink '../../loop6' '/dev/disk/by-diskseq/3109.tmp-b7:6' failed: Read-only file system [ 1017.226610][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1017.307906][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1017.439058][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1017.471086][T32294] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.21516'. [ 1017.537373][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3109.tmp-b7:6' failed: Read-only file system [ 1017.615849][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1017.643685][T32300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.691137][T18021] udevd[18021]: symlink '../../loop6' '/dev/disk/by-diskseq/3109.tmp-b7:6' failed: Read-only file system [ 1017.695510][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3108.tmp-b7:3' failed: Read-only file system [ 1018.035620][T32300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.075569][T32314] netlink: 'syz.8.21522': attribute type 1 has an invalid length. [ 1018.099928][T32314] netlink: 'syz.8.21522': attribute type 2 has an invalid length. [ 1018.169965][T32300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.294881][T32300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.350091][T32333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.368126][T32333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.476297][ T8902] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.511248][T32343] loop6: detected capacity change from 0 to 512 [ 1018.521075][ T8902] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.537409][T32343] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1018.561201][ T8902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.610728][ T8902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.934023][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1018.934064][ T28] audit: type=1326 audit(2000001626.487:11726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1018.966612][ T28] audit: type=1326 audit(2000001626.487:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1018.991193][ T28] audit: type=1326 audit(2000001626.517:11728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.032960][ T28] audit: type=1326 audit(2000001626.517:11729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.085715][ T28] audit: type=1326 audit(2000001626.517:11730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.123315][T32356] netlink: 'syz.6.21542': attribute type 93 has an invalid length. [ 1019.136444][ T28] audit: type=1326 audit(2000001626.517:11731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.163864][ T28] audit: type=1326 audit(2000001626.517:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.188609][ T28] audit: type=1326 audit(2000001626.517:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.214143][ T28] audit: type=1326 audit(2000001626.517:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.239187][ T28] audit: type=1326 audit(2000001626.517:11735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32351 comm="syz.8.21540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1019.524358][T32333] Set syz1 is full, maxelem 65536 reached [ 1019.844572][T32394] netlink: 108 bytes leftover after parsing attributes in process `syz.6.21560'. [ 1019.909777][T32397] loop6: detected capacity change from 0 to 1024 [ 1019.924239][T32397] EXT4-fs: Ignoring removed bh option [ 1019.943494][T32397] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1019.965237][T32397] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1019.981567][T32397] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.21561: Bad quota inum: 4294934528, type: 0 [ 1019.997287][T32397] loop6: lost filesystem error report for type 5 error -117 [ 1019.997890][T32397] EXT4-fs (loop6): Remounting filesystem read-only [ 1020.011768][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1020.011788][ C1] EXT4-fs (loop6): initial error at time 2000001627: ext4_quota_enable:7221 [ 1020.011814][ C1] EXT4-fs (loop6): last error at time 2000001627: ext4_quota_enable:7221 [ 1020.087376][T32397] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 1020.103325][T32397] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1020.110922][T32397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1020.163497][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.271574][T32405] loop6: detected capacity change from 0 to 764 [ 1020.611880][T32426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21574'. [ 1020.649703][T32428] netlink: 'syz.8.21575': attribute type 15 has an invalid length. [ 1020.674291][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21575'. [ 1020.708613][T32428] netlink: 'syz.8.21575': attribute type 15 has an invalid length. [ 1020.710229][T11740] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1020.727310][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21575'. [ 1020.752706][T11740] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1020.771946][T11740] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1020.800248][T11740] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1022.415662][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3115.tmp-b7:6' failed: Read-only file system [ 1022.506812][T18021] udevd[18021]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1022.519947][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3115.tmp-b7:6' failed: Read-only file system [ 1022.563688][T32486] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21600'. [ 1022.572360][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1022.997891][ T8902] vlan2: left allmulticast mode [ 1023.018340][ T8902] dummy0: left allmulticast mode [ 1023.035266][ T8902] vlan2: left promiscuous mode [ 1023.050600][ T8902] dummy0: left promiscuous mode [ 1023.066820][ T8902] bridge0: port 3(vlan2) entered disabled state [ 1023.067549][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3115.tmp-b7:6' failed: Read-only file system [ 1023.188780][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21613'. [ 1023.198265][T32522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21614'. [ 1023.323963][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1023.360777][ T8902] bond0 (unregistering): Released all slaves [ 1023.382020][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3108.tmp-b7:3' failed: Read-only file system [ 1023.394901][ T8902] bond1 (unregistering): Released all slaves [ 1023.414209][ T8902] bond2 (unregistering): Released all slaves [ 1023.435665][T32532] loop0: detected capacity change from 0 to 128 [ 1023.444411][T32519] batadv_slave_0: entered promiscuous mode [ 1023.453654][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3094.tmp-b7:0' failed: Read-only file system [ 1023.495223][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3108.tmp-b7:3' failed: Read-only file system [ 1023.526299][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3116.tmp-b7:0' failed: Read-only file system [ 1023.533667][T32532] syz.0.21620: attempt to access beyond end of device [ 1023.533667][T32532] loop0: rw=0, sector=121, nr_sectors = 9 limit=128 [ 1023.551784][T32521] batadv_slave_0 (unregistering): left promiscuous mode [ 1023.577058][T32521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.622711][ T8902] hsr_slave_0: left promiscuous mode [ 1023.638988][ T8902] hsr_slave_1: left promiscuous mode [ 1023.668842][ T8902] veth1_macvtap: left promiscuous mode [ 1023.684720][ T8902] veth0_macvtap: left promiscuous mode [ 1023.694814][ T8902] veth1_vlan: left promiscuous mode [ 1023.706563][ T8902] veth0_vlan: left promiscuous mode [ 1023.751433][T11740] kworker/u8:10: attempt to access beyond end of device [ 1023.751433][T11740] loop0: rw=1, sector=137, nr_sectors = 904 limit=128 [ 1023.888719][T32550] loop0: detected capacity change from 0 to 764 [ 1023.988360][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21628'. [ 1024.222450][ T8902] IPVS: stop unused estimator thread 0... [ 1024.546864][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1024.546883][ T28] audit: type=1400 audit(2000001632.097:11829): avc: denied { setattr } for pid=32579 comm="syz.3.21639" name="SCTPv6" dev="sockfs" ino=198302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1024.921602][T32607] Process accounting resumed [ 1024.966126][T32617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.990877][T32617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.039844][T32617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.050792][T32617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.118667][T32626] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1025.125241][T32626] vhci_hcd vhci_hcd.2: default hub control req: 0318 v0006 i0060 l0 [ 1025.135996][ T28] audit: type=1326 audit(2000001632.687:11830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32625 comm="syz.0.21658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6559f5cdd9 code=0x0 [ 1025.161353][T32617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.172429][T32617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.229058][T32617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.242900][T32617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.308868][ T8902] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.317457][ T8902] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.330560][ T8902] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.339030][ T8902] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.354420][ T28] audit: type=1326 audit(2000001632.907:11831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.379798][ T28] audit: type=1326 audit(2000001632.907:11832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.385140][T11882] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.406095][ T28] audit: type=1326 audit(2000001632.907:11833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.425149][T11882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.437226][ T28] audit: type=1326 audit(2000001632.907:11834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.469299][ T28] audit: type=1326 audit(2000001632.907:11835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.480232][T11745] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.493431][ T28] audit: type=1326 audit(2000001632.907:11836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.493466][ T28] audit: type=1326 audit(2000001632.907:11837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.493500][ T28] audit: type=1326 audit(2000001632.907:11838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32635 comm="syz.8.21662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07334cdd9 code=0x7ffc0000 [ 1025.507433][T11745] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.552961][T32641] 9p: Unknown uid 00000000004294967295 [ 1026.049727][T32657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.057060][T32657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.194520][T32657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.221967][T32657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.302194][T11749] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.311054][T11749] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.331263][T11749] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.363775][T11749] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.826614][T32669] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21677'. [ 1027.039711][T32700] netlink: 64 bytes leftover after parsing attributes in process `syz.8.21690'. [ 1027.340513][T32729] loop3: detected capacity change from 0 to 512 [ 1027.362902][T32731] netem: incorrect ge model size [ 1027.371740][T32729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1027.381952][T32731] netem: change failed [ 1027.387731][T32729] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1027.395115][T32729] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.21703: Block bitmap for bg 0 marked uninitialized [ 1027.409352][T32729] loop3: lost filesystem error report for type 5 error -117 [ 1027.410196][T32729] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1027.417545][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1027.417566][ C1] EXT4-fs (loop3): initial error at time 2000001634: ext4_read_block_bitmap_nowait:517 [ 1027.417592][ C1] EXT4-fs (loop3): last error at time 2000001634: ext4_read_block_bitmap_nowait:517 [ 1027.430318][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3120.tmp-b7:3' failed: Read-only file system [ 1027.433277][T32729] loop3: lost filesystem error report for type 5 error -117 [ 1027.465353][T32729] EXT4-fs (loop3): 1 orphan inode deleted [ 1027.479127][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1027.494677][T32729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1027.512041][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3119.tmp-b7:0' failed: Read-only file system [ 1027.540194][T32741] loop0: detected capacity change from 0 to 512 [ 1027.555632][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3121.tmp-b7:0' failed: Read-only file system [ 1027.574745][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1027.586641][T32729] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1027.598960][T32729] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1027.627349][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1027.639706][T32729] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.21703: Block bitmap for bg 0 marked uninitialized [ 1027.667068][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3121.tmp-b7:0' failed: Read-only file system [ 1027.708019][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3121.tmp-b7:0' failed: Read-only file system [ 1027.720980][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.748324][T18021] udevd[18021]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1027.775579][T18021] udevd[18021]: symlink '../../loop3' '/dev/disk/by-diskseq/3120.tmp-b7:3' failed: Read-only file system [ 1027.803159][T32753] syzkaller1: entered promiscuous mode [ 1027.837020][T32753] syzkaller1: entered allmulticast mode [ 1028.102219][ T307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.116822][ T307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.176497][ T307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.208213][ T307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.276055][ T317] netlink: 'syz.0.21723': attribute type 1 has an invalid length. [ 1028.277556][ T307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.318181][ T307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.366923][ T317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1028.404241][ T319] bond1: (slave gretap1): making interface the new active one [ 1028.431814][ T319] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1028.482726][ T307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.522155][ T307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.609201][ T8902] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.631680][ T8902] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.658383][ T8902] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.676840][ T8902] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.700481][ T8902] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.718686][ T8902] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.737397][ T8902] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.757305][ T8902] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.905168][ T372] loop6: detected capacity change from 0 to 512 [ 1029.940771][ T372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.968435][ T372] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.052572][ T372] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #18: comm syz.6.21745: corrupted inode contents [ 1030.067332][ T372] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1030.067538][ T372] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #18: comm syz.6.21745: mark_inode_dirty error [ 1030.091073][ T372] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1030.092107][ T372] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #18: comm syz.6.21745: corrupted inode contents [ 1030.113673][ T372] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1030.156219][ T372] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.21745: mark_inode_dirty error [ 1030.181779][ T372] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1030.183293][ T372] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.21745: mark inode dirty (error -117) [ 1030.208914][ T372] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1030.210124][ T372] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 1030.265979][T23043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.604505][ T413] loop3: detected capacity change from 0 to 512 [ 1030.627088][ T413] EXT4-fs: Ignoring removed nobh option [ 1030.651007][ T413] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1030.667857][ T413] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.21758: inode has both inline data and extents flags [ 1030.707778][ T413] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1030.710261][ T413] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.21758: couldn't read orphan inode 13 (err -117) [ 1030.719647][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1030.719670][ C1] EXT4-fs (loop3): initial error at time 2000001638: ext4_orphan_get:1397: inode 13 [ 1030.719712][ C1] EXT4-fs (loop3): last error at time 2000001638: ext4_orphan_get:1397: inode 13 [ 1030.840963][ T413] loop3: lost filesystem error report for type 5 error -117 [ 1030.848952][ T413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.947751][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.061965][ T428] loop6: detected capacity change from 0 to 2048 [ 1031.160579][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.175082][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.232124][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21771'. [ 1031.248537][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21771'. [ 1031.468810][ T445] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1031.613559][ T454] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1032.658648][T18126] udevd[18126]: symlink '../../loop6' '/dev/disk/by-diskseq/3129.tmp-b7:6' failed: Read-only file system [ 1032.930706][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3127.tmp-b7:3' failed: Read-only file system [ 1033.013932][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3127.tmp-b7:3' failed: Read-only file system [ 1033.053050][ T567] loop3: detected capacity change from 0 to 512 [ 1033.085146][ T567] EXT4-fs: Ignoring removed mblk_io_submit option [ 1033.101364][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3130.tmp-b7:3' failed: Read-only file system [ 1033.121642][ T567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1033.121908][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1033.169293][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3130.tmp-b7:3' failed: Read-only file system [ 1033.186662][ T567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.192172][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1033.230219][ T567] ext4 filesystem being mounted at /665/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.343098][T20417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.363972][T18126] udevd[18126]: symlink '../../loop0' '/dev/disk/by-diskseq/3122.tmp-b7:0' failed: Read-only file system [ 1033.396357][T18126] udevd[18126]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1033.421739][T18126] udevd[18126]: symlink '../../loop3' '/dev/disk/by-diskseq/3130.tmp-b7:3' failed: Read-only file system [ 1033.825705][ T597] sctp: [Deprecated]: syz.7.21804 (pid 597) Use of int in max_burst socket option. [ 1033.825705][ T597] Use struct sctp_assoc_value instead [ 1033.892828][ T601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21806'. [ 1033.912184][ T601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.621614][ T656] loop0: detected capacity change from 0 to 512 [ 1034.663049][ T656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.767795][ T656] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.901047][ T677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21843'. [ 1034.922214][ T678] ================================================================== [ 1034.930446][ T678] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 1034.940139][ T678] [ 1034.942479][ T678] read to 0xffff8881a1dda000 of 4096 bytes by task 11736 on cpu 0: [ 1034.950381][ T678] copy_folio_from_iter_atomic+0x743/0x10b0 [ 1034.956311][ T678] generic_perform_write+0x2c1/0x490 [ 1034.961612][ T678] shmem_file_write_iter+0xc5/0xf0 [ 1034.966740][ T678] lo_rw_aio+0x67d/0x730 [ 1034.971001][ T678] loop_process_work+0x56c/0xac0 [ 1034.975963][ T678] loop_workfn+0x31/0x40 [ 1034.980239][ T678] process_scheduled_works+0x4f0/0x9c0 [ 1034.985932][ T678] worker_thread+0x58a/0x780 [ 1034.990756][ T678] kthread+0x22a/0x280 [ 1034.994853][ T678] ret_from_fork+0x146/0x330 [ 1034.999564][ T678] ret_from_fork_asm+0x1a/0x30 [ 1035.004345][ T678] [ 1035.006697][ T678] write to 0xffff8881a1dda9e4 of 95 bytes by task 678 on cpu 1: [ 1035.014698][ T678] copy_folio_from_iter_atomic+0x743/0x10b0 [ 1035.021010][ T678] generic_perform_write+0x2c1/0x490 [ 1035.026485][ T678] ext4_buffered_write_iter+0x304/0x4c0 [ 1035.032051][ T678] ext4_file_write_iter+0x380/0xfa0 [ 1035.037362][ T678] iter_file_splice_write+0x6c4/0xa80 [ 1035.042752][ T678] direct_splice_actor+0x156/0x2a0 [ 1035.047897][ T678] splice_direct_to_actor+0x311/0x670 [ 1035.053286][ T678] do_splice_direct+0x119/0x1a0 [ 1035.058154][ T678] do_sendfile+0x382/0x650 [ 1035.062580][ T678] __x64_sys_sendfile64+0x105/0x150 [ 1035.067801][ T678] x64_sys_call+0x2dc4/0x3020 [ 1035.072521][ T678] do_syscall_64+0x12c/0x3b0 [ 1035.077141][ T678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.083043][ T678] [ 1035.085373][ T678] Reported by Kernel Concurrency Sanitizer on: [ 1035.091733][ T678] CPU: 1 UID: 0 PID: 678 Comm: syz.0.21828 Tainted: G W syzkaller #0 PREEMPT(full) [ 1035.102594][ T678] Tainted: [W]=WARN [ 1035.106575][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.116730][ T678] ================================================================== [ 1035.689327][T30002] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.