last executing test programs: 1m13.104546486s ago: executing program 2 (id=139): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) acct(0x0) 1m13.012621209s ago: executing program 2 (id=141): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000800) 1m12.9872015s ago: executing program 2 (id=143): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m12.926651302s ago: executing program 2 (id=146): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000540)='./file0\x00', 0x18048, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1m12.709282068s ago: executing program 2 (id=151): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1m12.389167498s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) 1m12.356824949s ago: executing program 32 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) 25.448006072s ago: executing program 0 (id=1117): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001200add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 25.367379114s ago: executing program 0 (id=1119): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 24.818661401s ago: executing program 0 (id=1130): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0xd0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x8) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) open(0x0, 0x0, 0x1a1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 23.924377679s ago: executing program 0 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x8f881, 0x0) unshare(0x22020600) unshare(0x22020400) 23.855823271s ago: executing program 0 (id=1136): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x41a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x11e210, 0x10004, 0x9, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 23.675791736s ago: executing program 0 (id=1140): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.652398087s ago: executing program 33 (id=1140): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.40011463s ago: executing program 6 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) 16.883475007s ago: executing program 6 (id=1247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 16.861814127s ago: executing program 6 (id=1248): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 16.739968382s ago: executing program 6 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x800000000000000) 16.739445842s ago: executing program 6 (id=1253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000d1ba850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x7}, 0x94) 16.543892567s ago: executing program 6 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0401000000000000280012800900010076657468"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r1) 16.46696622s ago: executing program 34 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0401000000000000280012800900010076657468"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r1) 9.916780093s ago: executing program 7 (id=1386): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0xd0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x8) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) open(0x0, 0x0, 0x1a1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 8.976960011s ago: executing program 7 (id=1405): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000011c0)={r1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000038c0)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) 8.852136956s ago: executing program 7 (id=1409): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x0, 0x3, 0x1}]}}]}, 0x93}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) 8.552266185s ago: executing program 7 (id=1417): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 8.531500885s ago: executing program 7 (id=1421): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500006400000069105c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8dd"], 0x0, 0x5}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 7.867986596s ago: executing program 7 (id=1431): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.819231258s ago: executing program 35 (id=1431): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.047669135s ago: executing program 1 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$inet6(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x101, 0x4) 2.193124552s ago: executing program 1 (id=1527): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) read(r1, &(0x7f0000000100)=""/217, 0x3f) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x88, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x45, 0x7, 0x1, 0x0, "6bbb845ac29c68453fedb08294577d56f1b611bf47b0d1793dcab71ccf19aa646aa5701c9e41cd492b25e4a3865fb9e7e7ea1a80470820ff94b27b64b127267d5b"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x24, 0x7, 0x1, 0x0, "cb891c78fa4ce13bbab27d36e64c011e5bd83da3a1446467d6de366f736e64ad"}]}, 0x88}, 0x1, 0x0, 0x0, 0xc090}, 0x1) 1.646486089s ago: executing program 5 (id=1534): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r2, r2, 0x0, 0xe3aa6ea) fallocate(r1, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x4090) fallocate(r0, 0x10, 0x800, 0x8800) 1.483929163s ago: executing program 8 (id=1538): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.464560114s ago: executing program 8 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "f84ccd61684bd5dd", "60d0637fe3e35895a11495c3dd1d32db", "854f3aab", "a1062103a4e52dbd"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 1.403890806s ago: executing program 5 (id=1542): openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 1.390429886s ago: executing program 3 (id=1543): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) timer_gettime(r3, &(0x7f00000004c0)) 1.375557227s ago: executing program 3 (id=1544): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./bus\x00', 0x80020, 0x0, 0x0, 0x0, &(0x7f0000000300)) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.28412849s ago: executing program 1 (id=1545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1.28367679s ago: executing program 4 (id=1546): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x8, 0x1000000, 0x0, 0x0, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.246564071s ago: executing program 4 (id=1547): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 1.220362112s ago: executing program 3 (id=1548): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r1, r1, 0x0, 0xe3aa6ea) fallocate(r0, 0x0, 0x1, 0x8ffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/234) 1.128103105s ago: executing program 5 (id=1549): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0) 1.127716795s ago: executing program 1 (id=1550): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) socket(0x80000000000000a, 0x2, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.107577955s ago: executing program 3 (id=1551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957791eb75fc4abb0e20b9846", 0x25}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1adbd444034580ad72631895cae0de08dead4ff8ba8415d727d16357dae", 0xc8}, {&(0x7f0000000640)="7a7881cb86185f895aae7f897da575b56f6ad57d1ebcffe23733458643542a2492c68f38f8225af4a5c35d347740003b8d5bc373be902c510cd52a7aa9a0c585084618adaffc1b0e940221beb0ad9b8e0bfa56a2f842ebd150fee3d21779fa203e0349653db9244d8f465851a9742ecb6f4ab84f568ceae5c91b27c4ddbd03b9", 0x80}], 0x3}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x350}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.085970956s ago: executing program 4 (id=1552): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_io_uring_setup(0x22b5, &(0x7f0000000140)={0x0, 0x85f3, 0x1, 0x0, 0x2f0}, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) io_uring_enter(r0, 0x7350, 0xd6, 0x60, 0x0, 0x0) 1.085544436s ago: executing program 5 (id=1553): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000008b00000073119f00000000009500000000000000e97c03e292d90849b589e04d04748507b477cf64d5709844ef4944f6437e271f3ac95d4692bdf2b14916e2db439d6319cc4637a7e58832"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r0, &(0x7f0000000000)="875b", 0x2, 0x8080c61) fallocate(r0, 0x3, 0x80007, 0x8000c60) 764.210306ms ago: executing program 4 (id=1554): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) 763.933036ms ago: executing program 1 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) 763.695176ms ago: executing program 5 (id=1556): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, r3) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 763.496156ms ago: executing program 4 (id=1557): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) 609.713261ms ago: executing program 8 (id=1558): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES16, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 488.363014ms ago: executing program 5 (id=1559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x1, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) 440.232736ms ago: executing program 4 (id=1560): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 280.626521ms ago: executing program 1 (id=1561): io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x20000048, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000000240)) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 197.930583ms ago: executing program 8 (id=1562): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x9f) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 112.145276ms ago: executing program 3 (id=1563): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x800082, &(0x7f0000000380)=ANY=[], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120) getdents(r1, &(0x7f0000000440)=""/4082, 0xff2) 87.314187ms ago: executing program 3 (id=1564): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957791eb75fc4abb0e20b9846", 0x25}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1adbd444034580ad72631895cae0de08dead4ff8ba8415d727d16357dae99", 0xc9}, {&(0x7f0000000880)}, {&(0x7f0000000940)}, {&(0x7f0000000640)="7a7881cb86185f895aae7f897da575b56f6ad57d1ebcffe23733458643542a2492c68f38f8225af4a5c35d347740003b8d5bc373be902c510cd52a7aa9a0c585084618adaffc1b0e940221beb0ad9b8e0bfa56a2f842ebd150fee3d21779fa203e0349653db9244d8f465851a9742ecb6f4ab84f568ceae5c91b27c4ddbd03b9b8751e51486e05c1c8d5f6f16597f754e9006056140c23fe638b4aeb48929cede77304306b04e018595cdb54db7bf5d0a139bfba2d87219cec840d9da361da759ee8a5c1582f5b3008336076c6af68263810f92a4d6ab26720e42e2ef4f3311e6f154fd626", 0xe5}], 0x6}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x8ca}, {&(0x7f00000026c0)="cb1f20e0640635cdce6243b93e0fd8dd36d690a3915d6beda05adf1193a0c5c4c3346559efec51dea88104eace685c3be072ce7dd75d41ee0c41df0754f0f77e3f226d219fe7ceb1ab8c1f66b5111684ce276ca88ca236cd951472bcc6d2c8974077e2bce6a78fe4db562a43f4801ea68396696e547d2b56abc0ed880754703e2b991d15f679f5ee4f85a0f161522794", 0x90}], 0x2}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 70.952198ms ago: executing program 8 (id=1565): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x39}, 0x10040, 0x0, 0x0, 0x4, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010101}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000100)='lo\x00', 0x0, 0xa00, 0x1000}) 0s ago: executing program 8 (id=1566): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=@newlink={0x60, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x409e7, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xcc93f1266b7398bf}, 0x8040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00'}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000018) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 1 truncate cleaned up [ 56.520797][ T5068] loop0: detected capacity change from 0 to 512 [ 56.871712][ T5102] loop0: detected capacity change from 0 to 1024 [ 56.878732][ T5102] EXT4-fs: Ignoring removed bh option [ 56.901570][ T5102] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.935042][ T5102] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.943602][ T5105] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 56.945925][ T5102] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.599: Bad quota inum: 4294934528, type: 0 [ 56.967564][ T5102] loop0: lost filesystem error report for type 5 error -117 [ 56.971547][ T5102] EXT4-fs (loop0): Remounting filesystem read-only [ 56.978878][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 56.978900][ C0] EXT4-fs (loop0): initial error at time 1780905570: ext4_quota_enable:7221 [ 56.978925][ C0] EXT4-fs (loop0): last error at time 1780905570: ext4_quota_enable:7221 [ 57.015578][ T5102] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 57.036148][ T5102] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 57.103902][ T5118] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 57.149995][ T5123] loop4: detected capacity change from 0 to 512 [ 57.159659][ T5118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.169835][ T5123] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.199936][ T5125] bond1: (slave geneve2): making interface the new active one [ 57.209218][ T5125] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 57.211729][ T5123] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.253308][ T5127] loop5: detected capacity change from 0 to 512 [ 57.255293][ T5123] /dev/loop4: Can't open blockdev [ 57.260112][ T5127] EXT4-fs: Ignoring removed i_version option [ 57.276642][ T5127] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.316946][ T5127] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.610: Allocating blocks 41-42 which overlap fs metadata [ 57.348687][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 57.348954][ T5127] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.610: Allocating blocks 41-42 which overlap fs metadata [ 57.356399][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 57.356423][ C0] EXT4-fs (loop5): initial error at time 1780905570: ext4_mb_mark_diskspace_used:4222 [ 57.356459][ C0] EXT4-fs (loop5): last error at time 1780905570: ext4_mb_mark_diskspace_used:4222 [ 57.395800][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 57.395967][ T5127] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.610: Failed to acquire dquot type 1 [ 57.414598][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 57.415107][ T5127] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 57.465451][ T5127] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.610: corrupted inode contents [ 57.482411][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.482781][ T5127] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.610: mark_inode_dirty error [ 57.503329][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.503520][ T5127] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.610: corrupted inode contents [ 57.525160][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.525324][ T5127] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.610: mark_inode_dirty error [ 57.590042][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.590998][ T5127] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.610: corrupted inode contents [ 57.613245][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.613393][ T5127] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 57.631576][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 57.631748][ T5127] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.610: corrupted inode contents [ 57.658020][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.658240][ T5127] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.610: mark_inode_dirty error [ 57.705599][ T5127] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.705952][ T5127] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 57.724670][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 57.724911][ T5127] EXT4-fs (loop5): 1 truncate cleaned up [ 57.739887][ T5150] sctp: [Deprecated]: syz.0.618 (pid 5150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.739887][ T5150] Use struct sctp_sack_info instead [ 57.753501][ T5127] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.610: Allocating blocks 41-42 which overlap fs metadata [ 57.771821][ T5127] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.610: Failed to acquire dquot type 1 [ 57.809943][ T5152] loop4: detected capacity change from 0 to 1764 [ 57.839913][ T5156] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 57.856630][ T5156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.893832][ T5161] loop3: detected capacity change from 0 to 512 [ 57.900658][ T5161] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.907262][ T5161] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.914059][ T5161] /dev/loop3: Can't open blockdev [ 57.923273][ T5156] bond1: (slave geneve2): making interface the new active one [ 57.933321][ T5156] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 58.036274][ T5166] loop0: detected capacity change from 0 to 512 [ 58.186077][ T5179] EXT4-fs: Ignoring removed bh option [ 58.191976][ T5179] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 58.202632][ T5179] EXT4-fs (loop3): 1 truncate cleaned up [ 58.271905][ T5189] EXT4-fs: Ignoring removed i_version option [ 58.302347][ T5189] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.346864][ T5189] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.633: Allocating blocks 41-42 which overlap fs metadata [ 58.389527][ T5189] loop3: lost filesystem error report for type 5 error -117 [ 58.389737][ T5189] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.633: Allocating blocks 41-42 which overlap fs metadata [ 58.397102][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.397142][ C1] EXT4-fs (loop3): initial error at time 1780905571: ext4_mb_mark_diskspace_used:4222 [ 58.397177][ C1] EXT4-fs (loop3): last error at time 1780905571: ext4_mb_mark_diskspace_used:4222 [ 58.484091][ T5189] loop3: lost filesystem error report for type 5 error -117 [ 58.484595][ T5189] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.633: Failed to acquire dquot type 1 [ 58.534348][ T5189] loop3: lost filesystem error report for type 5 error -117 [ 58.534609][ T5189] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.577162][ T5189] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.633: corrupted inode contents [ 58.589597][ T5189] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.589739][ T5189] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.633: mark_inode_dirty error [ 58.611651][ T5189] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.611871][ T5189] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.633: corrupted inode contents [ 58.633244][ T5189] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.633382][ T5189] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.633: mark_inode_dirty error [ 58.654175][ T5189] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.633: corrupted inode contents [ 58.668909][ T5189] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 58.680942][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 58.691883][ T5189] loop3: lost filesystem error report for type 5 error -117 [ 58.692069][ T5189] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.633: corrupted inode contents [ 58.723878][ T5206] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.745376][ T5206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.754456][ T5189] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.633: mark_inode_dirty error [ 58.765716][ T5206] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 58.786837][ T5206] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.636: invalid block [ 58.807044][ T5189] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 58.828577][ T5189] EXT4-fs (loop3): 1 truncate cleaned up [ 58.836502][ T5206] EXT4-fs (loop4): 1 truncate cleaned up [ 58.844291][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 58.850748][ C1] EXT4-fs (loop4): initial error at time 1780905571: ext4_get_branch:178: inode 13: block 1024 [ 58.861221][ C1] EXT4-fs (loop4): last error at time 1780905571: ext4_get_branch:178: inode 13: block 1024 [ 58.882485][ T5189] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.633: Allocating blocks 41-42 which overlap fs metadata [ 58.902507][ T5189] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.633: Failed to acquire dquot type 1 [ 59.018119][ T5214] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.173010][ T5230] dummy0: entered promiscuous mode [ 59.216107][ T5230] gretap0: entered promiscuous mode [ 59.228328][ T5230] debugfs: 'hsr0' already exists in 'hsr' [ 59.247159][ T5230] Cannot create hsr debugfs directory [ 59.254312][ T5230] hsr0: entered allmulticast mode [ 59.267064][ T5230] dummy0: entered allmulticast mode [ 59.276079][ T5236] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 59.281255][ T5230] gretap0: entered allmulticast mode [ 59.307686][ T5232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.342724][ T5237] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 59.425226][ T5241] EXT4-fs: Ignoring removed i_version option [ 59.452264][ T5241] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.493336][ T5241] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.654: Allocating blocks 41-42 which overlap fs metadata [ 59.590570][ T5241] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.654: Allocating blocks 41-42 which overlap fs metadata [ 59.604203][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 59.604222][ C0] EXT4-fs (loop1): initial error at time 1780905572: ext4_mb_mark_diskspace_used:4222 [ 59.604243][ C0] EXT4-fs (loop1): last error at time 1780905572: ext4_mb_mark_diskspace_used:4222 [ 59.648775][ T5241] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.654: Failed to acquire dquot type 1 [ 59.661618][ T5241] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 59.675803][ T5252] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.702517][ T5252] SELinux: failed to load policy [ 59.735785][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.654: corrupted inode contents [ 59.755857][ T5241] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.654: mark_inode_dirty error [ 59.770921][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.654: corrupted inode contents [ 59.818856][ T5241] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.654: mark_inode_dirty error [ 59.844532][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.654: corrupted inode contents [ 59.892326][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 59.907488][ T5241] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 60.018827][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.654: corrupted inode contents [ 60.064600][ T5241] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.654: mark_inode_dirty error [ 60.136128][ T5271] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.148781][ T5241] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 60.191083][ T5241] EXT4-fs (loop1): 1 truncate cleaned up [ 60.238343][ T5241] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.654: Failed to acquire dquot type 1 [ 61.014310][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 61.174861][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 61.174875][ T28] audit: type=1400 audit(1780905574.259:507): avc: denied { create } for pid=5302 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 61.220448][ T28] audit: type=1400 audit(1780905574.259:508): avc: denied { ioctl } for pid=5302 comm="syz.3.679" path="socket:[9995]" dev="sockfs" ino=9995 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 61.249295][ T5301] set_capacity_and_notify: 8 callbacks suppressed [ 61.249359][ T5301] loop1: detected capacity change from 0 to 512 [ 61.287520][ T28] audit: type=1400 audit(1780905574.349:509): avc: denied { write } for pid=5306 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.310470][ T5301] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.368014][ T28] audit: type=1326 audit(1780905574.449:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.388075][ T5301] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.393365][ T28] audit: type=1326 audit(1780905574.449:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.393399][ T28] audit: type=1326 audit(1780905574.449:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.393452][ T28] audit: type=1326 audit(1780905574.449:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.393477][ T28] audit: type=1326 audit(1780905574.449:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.393505][ T28] audit: type=1326 audit(1780905574.449:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.534481][ T28] audit: type=1326 audit(1780905574.449:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x7ffc0000 [ 61.534450][ T5301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.678: bg 0: block 248: padding at end of block bitmap is not set [ 61.613281][ T5301] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.678: Failed to acquire dquot type 1 [ 61.624632][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 61.624659][ C0] EXT4-fs (loop1): last error at time 1780905574: ext4_validate_block_bitmap:441 [ 61.647095][ T5301] EXT4-fs (loop1): 1 truncate cleaned up [ 61.732278][ T5301] syz.1.678 (5301) used greatest stack depth: 8576 bytes left [ 61.750934][ T994] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 61.999899][ T5335] Set syz1 is full, maxelem 1023 reached [ 62.171385][ T5356] loop1: detected capacity change from 0 to 2048 [ 62.190166][ T5356] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.203298][ T5356] cgroup: Unknown subsys name 'cpuset' [ 62.344909][ T5367] loop0: detected capacity change from 0 to 512 [ 62.370476][ T5367] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.402608][ T5367] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.418350][ T5367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.706: bg 0: block 248: padding at end of block bitmap is not set [ 62.434405][ T5367] fserror_report: 9 callbacks suppressed [ 62.434450][ T5367] loop0: lost filesystem error report for type 5 error -117 [ 62.442060][ T5367] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.706: Failed to acquire dquot type 1 [ 62.450101][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 62.450162][ C1] EXT4-fs (loop0): last error at time 1780905575: ext4_validate_block_bitmap:441 [ 62.484776][ T5367] loop0: lost filesystem error report for type 5 error -28 [ 62.491524][ T5367] EXT4-fs (loop0): 1 truncate cleaned up [ 62.621560][ T994] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 62.636357][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.713'. [ 62.646891][ T994] loop0: lost filesystem error report for type 5 error -117 [ 62.788168][ T5401] loop5: detected capacity change from 0 to 2048 [ 62.790954][ T5406] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 62.816269][ T5401] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.838610][ T5401] cgroup: Unknown subsys name 'cpuset' [ 63.063351][ T5424] loop5: detected capacity change from 0 to 512 [ 63.112050][ T5424] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.133181][ T5448] loop4: detected capacity change from 0 to 512 [ 63.157323][ T5424] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.178810][ T5424] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.725: bg 0: block 248: padding at end of block bitmap is not set [ 63.205333][ T5424] loop5: lost filesystem error report for type 5 error -117 [ 63.208216][ T5424] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.725: Failed to acquire dquot type 1 [ 63.224277][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 63.231448][ T5424] loop5: lost filesystem error report for type 5 error -28 [ 63.237474][ C1] EXT4-fs (loop5): last error at time 1780905576: ext4_validate_block_bitmap:441 [ 63.260322][ T5424] EXT4-fs (loop5): 1 truncate cleaned up [ 63.301470][ T994] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 63.313035][ T994] loop5: lost filesystem error report for type 5 error -117 [ 63.571948][ T5462] loop5: detected capacity change from 0 to 512 [ 63.599244][ T5462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.738: bg 0: block 5: invalid block bitmap [ 63.617231][ T5462] loop5: lost filesystem error report for type 5 error -117 [ 63.618873][ T5462] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 63.626209][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 63.626230][ C1] EXT4-fs (loop5): initial error at time 1780905576: ext4_validate_block_bitmap:432 [ 63.626277][ C1] EXT4-fs (loop5): last error at time 1780905576: ext4_validate_block_bitmap:432 [ 63.670018][ T5462] loop5: lost filesystem error report for type 5 error -117 [ 63.670217][ T5462] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.738: invalid indirect mapped block 3 (level 2) [ 63.691406][ T5462] fserror_report: 12 callbacks suppressed [ 63.691421][ T5462] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.698648][ T5462] EXT4-fs (loop5): 1 orphan inode deleted [ 63.722205][ T5470] loop4: detected capacity change from 0 to 512 [ 63.730472][ T5470] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.740227][ T5470] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 63.749255][ T5462] EXT4-fs (loop5): 1 truncate cleaned up [ 63.822500][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 63.836323][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 64.022802][ T5508] loop3: detected capacity change from 0 to 512 [ 64.023155][ T5508] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.023726][ T5508] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.026649][ T5508] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.026743][ T5508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.027122][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.758: Invalid block bitmap block 0 in block_group 0 [ 64.027150][ T5508] loop3: lost filesystem error report for type 5 error -117 [ 64.027334][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.758: Invalid block bitmap block 0 in block_group 0 [ 64.027363][ T5508] loop3: lost filesystem error report for type 5 error -117 [ 64.027529][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.758: Invalid block bitmap block 0 in block_group 0 [ 64.027686][ T5508] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.758: Failed to acquire dquot type 1 [ 64.027960][ T5508] EXT4-fs (loop3): 1 orphan inode deleted [ 64.028124][ T994] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 64.737379][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 64.746567][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.753808][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.909982][ T5556] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 64.941119][ T5560] loop4: detected capacity change from 0 to 128 [ 64.956027][ T5560] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.986563][ T5564] ref_ctr_offset mismatch. inode: 0x227 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 65.027144][ T5566] vhci_hcd vhci_hcd.0: invalid port number 253 [ 65.142628][ T5576] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 65.253080][ T5589] netlink: 'syz.5.790': attribute type 1 has an invalid length. [ 65.266138][ T5589] bond2: entered promiscuous mode [ 65.271344][ T5589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.283813][ T5589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.290997][ T5589] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 65.301049][ T5589] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 65.312944][ T5589] bond2: (slave vti0): making interface the new active one [ 65.320190][ T5589] vti0: entered promiscuous mode [ 65.327077][ T5589] bond2: (slave vti0): Enslaving as an active interface with an up link [ 65.365903][ T5592] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.219586][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 66.219602][ T28] audit: type=1400 audit(1780905579.299:669): avc: denied { shutdown } for pid=5622 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.252593][ T28] audit: type=1400 audit(1780905579.299:670): avc: denied { read } for pid=5622 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.346982][ T28] audit: type=1400 audit(1780905579.429:671): avc: denied { ioctl } for pid=5630 comm="syz.4.806" path="socket:[11204]" dev="sockfs" ino=11204 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.635161][ T5656] set_capacity_and_notify: 3 callbacks suppressed [ 66.635172][ T5656] loop1: detected capacity change from 0 to 512 [ 66.648614][ T5656] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.655790][ T5656] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 66.666227][ T5656] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.674384][ T5656] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.681240][ T5656] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.819: Invalid block bitmap block 0 in block_group 0 [ 66.695332][ T5656] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.819: Invalid block bitmap block 0 in block_group 0 [ 66.708707][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.708725][ C1] EXT4-fs (loop1): last error at time 1780905579: ext4_read_block_bitmap_nowait:483 [ 66.724794][ T5656] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.819: Invalid block bitmap block 0 in block_group 0 [ 66.739510][ T5656] Quota error (device loop1): write_blk: dquota write failed [ 66.746912][ T5656] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 66.756732][ T5656] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.819: Failed to acquire dquot type 1 [ 66.768268][ T5656] EXT4-fs (loop1): 1 orphan inode deleted [ 66.774071][ T46] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 66.783197][ T46] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 67.261113][ T28] audit: type=1400 audit(1780905580.339:672): avc: denied { write } for pid=5660 comm="syz.5.822" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.309328][ T28] audit: type=1400 audit(1780905580.339:673): avc: denied { open } for pid=5660 comm="syz.5.822" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.334139][ T28] audit: type=1400 audit(1780905580.339:674): avc: denied { validate_trans } for pid=5659 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.391112][ T28] audit: type=1400 audit(1780905580.369:675): avc: denied { ioctl } for pid=5660 comm="syz.5.822" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.400191][ T5665] loop4: detected capacity change from 0 to 512 [ 67.463195][ T5665] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.530272][ T5665] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.563441][ T5665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.820: bg 0: block 248: padding at end of block bitmap is not set [ 67.580622][ T5665] fserror_report: 8 callbacks suppressed [ 67.580752][ T5665] loop4: lost filesystem error report for type 5 error -117 [ 67.589520][ T5665] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.820: Failed to acquire dquot type 1 [ 67.597409][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.597439][ C1] EXT4-fs (loop4): last error at time 1780905580: ext4_validate_block_bitmap:441 [ 67.625623][ T5665] loop4: lost filesystem error report for type 5 error -28 [ 67.631368][ T5665] EXT4-fs (loop4): 1 truncate cleaned up [ 67.699044][ T5546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.723906][ T994] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 67.736660][ T994] loop4: lost filesystem error report for type 5 error -117 [ 67.789021][ T5697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.836'. [ 67.816075][ T5697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.836'. [ 67.876939][ T5707] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 67.903206][ T5707] bond1: entered promiscuous mode [ 67.908764][ T5707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.929243][ T5707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.936668][ T5707] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 67.946919][ T5707] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 67.958534][ T5707] bond1: (slave vti0): making interface the new active one [ 67.965895][ T5707] vti0: entered promiscuous mode [ 67.973946][ T5707] bond1: (slave vti0): Enslaving as an active interface with an up link [ 68.184212][ T5718] loop1: detected capacity change from 0 to 1024 [ 68.217694][ T5718] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 68.251006][ T5718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.844: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.269889][ T5718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.274281][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.289771][ C0] EXT4-fs (loop1): initial error at time 1780905581: ext4_map_blocks:791: inode 3: block 2 [ 68.299790][ C0] EXT4-fs (loop1): last error at time 1780905581: ext4_map_blocks:791: inode 3: block 2 [ 68.318023][ T5718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.844: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.346715][ T5718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.346863][ T5718] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.844: Failed to acquire dquot type 0 [ 68.378980][ T5720] loop3: detected capacity change from 0 to 512 [ 68.395912][ T5718] loop1: lost filesystem error report for type 5 error -117 [ 68.396198][ T5718] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 68.436310][ T5720] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.452140][ T5718] loop1: lost filesystem error report for type 5 error -117 [ 68.453279][ T5718] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.844: mark_inode_dirty error [ 68.486669][ T5718] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.487881][ T5718] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 68.508337][ T5718] EXT4-fs (loop1): 1 orphan inode deleted [ 68.527856][ T5720] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 68.543562][ T30] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.571704][ T5720] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.845: bg 0: block 248: padding at end of block bitmap is not set [ 68.573844][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 68.586608][ T5720] loop3: lost filesystem error report for type 5 error -117 [ 68.604285][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.618372][ C1] EXT4-fs (loop3): last error at time 1780905581: ext4_validate_block_bitmap:441 [ 68.634794][ T5720] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.845: Failed to acquire dquot type 1 [ 68.646587][ T5720] loop3: lost filesystem error report for type 5 error -28 [ 68.654169][ T5718] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.670336][ T5720] EXT4-fs (loop3): 1 truncate cleaned up [ 68.798875][ T2362] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 68.810726][ T2362] loop3: lost filesystem error report for type 5 error -117 [ 68.917261][ T5736] loop3: detected capacity change from 0 to 8192 [ 68.974516][ T5736] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 68.991419][ T5736] FAT-fs (loop3): Filesystem has been set read-only [ 69.120872][ T5766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.862'. [ 69.420798][ T5803] netlink: 52 bytes leftover after parsing attributes in process `syz.4.881'. [ 69.554878][ T5818] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 69.609621][ T5818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.695535][ T5831] loop3: detected capacity change from 0 to 512 [ 69.711346][ T5831] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.895: bad orphan inode 15 [ 69.736812][ T5831] loop3: lost filesystem error report for type 5 error -117 [ 69.736997][ T5831] ext4_test_bit(bit=14, block=18) = 1 [ 69.744411][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 69.744440][ C0] EXT4-fs (loop3): initial error at time 1780905582: ext4_orphan_get:1423 [ 69.744466][ C0] EXT4-fs (loop3): last error at time 1780905582: ext4_orphan_get:1423 [ 69.773236][ T5820] loop5: detected capacity change from 0 to 4096 [ 69.782167][ T5831] is_bad_inode(inode)=0 [ 69.786442][ T5831] NEXT_ORPHAN(inode)=1023 [ 69.790788][ T5831] max_ino=32 [ 69.794085][ T5831] i_nlink=0 [ 69.797671][ T5831] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.895: corrupted xattr block 19: invalid header [ 69.815125][ T5831] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.817307][ T5820] EXT4-fs mount: 84 callbacks suppressed [ 69.817323][ T5820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.817360][ T5831] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 69.826928][ T5831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 69.867141][ T5831] ext4 filesystem being mounted at /149/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 69.903278][ T5831] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.895: bg 0: block 449: padding at end of block bitmap is not set [ 69.935710][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 69.959347][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.982557][ T5853] loop0: detected capacity change from 0 to 512 [ 69.990758][ T5853] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.903: inode has both inline data and extents flags [ 70.005686][ T5853] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.007123][ T5853] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.903: couldn't read orphan inode 15 (err -117) [ 70.016441][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.016457][ C1] EXT4-fs (loop0): initial error at time 1780905583: ext4_orphan_get:1397: inode 15 [ 70.016503][ C1] EXT4-fs (loop0): last error at time 1780905583: ext4_orphan_get:1397: inode 15 [ 70.055386][ T5853] loop0: lost filesystem error report for type 5 error -117 [ 70.055960][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.243438][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.259620][ T5869] syzkaller0: entered promiscuous mode [ 70.280224][ T5869] syzkaller0: entered allmulticast mode [ 70.311788][ T5869] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 70.368049][ T5872] loop0: detected capacity change from 0 to 8192 [ 70.418593][ T5880] loop3: detected capacity change from 0 to 128 [ 70.431421][ T5872] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 70.442882][ T5872] FAT-fs (loop0): Filesystem has been set read-only [ 70.659540][ T5902] EXT4-fs: Ignoring removed bh option [ 70.702335][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.782822][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.829776][ T5913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.878983][ T5913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.901890][ T5913] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.005676][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.058043][ T5926] capability: warning: `syz.4.928' uses deprecated v2 capabilities in a way that may be insecure [ 71.287136][ T5937] netlink: 68 bytes leftover after parsing attributes in process `syz.4.934'. [ 71.299328][ T5937] netlink: 68 bytes leftover after parsing attributes in process `syz.4.934'. [ 71.411579][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 71.411595][ T28] audit: type=1400 audit(1780905584.489:699): avc: denied { connect } for pid=5948 comm="syz.0.939" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.440416][ T28] audit: type=1400 audit(1780905584.529:700): avc: denied { write } for pid=5948 comm="syz.0.939" path="socket:[12807]" dev="sockfs" ino=12807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.473130][ T5950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.498340][ T5950] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.533452][ T5956] batadv_slave_0: entered promiscuous mode [ 71.554679][ T5956] batadv_slave_0: left promiscuous mode [ 71.606816][ T28] audit: type=1400 audit(1780905584.689:701): avc: denied { write } for pid=5957 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.201902][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.403221][ T5984] set_capacity_and_notify: 3 callbacks suppressed [ 72.403304][ T5984] loop5: detected capacity change from 0 to 1024 [ 72.445118][ T5984] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 72.456836][ T5984] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.950: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.470919][ T5984] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.471060][ T5984] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 72.480123][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 72.480147][ C0] EXT4-fs (loop5): initial error at time 1780905585: ext4_map_blocks:791: inode 3: block 2 [ 72.480189][ C0] EXT4-fs (loop5): last error at time 1780905585: ext4_map_blocks:791: inode 3: block 2 [ 72.514517][ T5984] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.950: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.528705][ T5984] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.528986][ T5984] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 72.535471][ T5976] loop4: detected capacity change from 0 to 4096 [ 72.538043][ T5984] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.950: Failed to acquire dquot type 0 [ 72.564493][ T5984] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 72.574226][ T5984] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.950: mark_inode_dirty error [ 72.585617][ T5984] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.585723][ T5984] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 72.597579][ T5976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.624447][ T5984] EXT4-fs (loop5): 1 orphan inode deleted [ 72.630863][ T5984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.646076][ T40] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.664410][ T28] audit: type=1400 audit(1780905585.729:702): avc: denied { write } for pid=5973 comm="syz.4.946" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.691910][ T40] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.693135][ T40] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 72.711814][ T40] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 72.713950][ T28] audit: type=1400 audit(1780905585.799:703): avc: denied { mount } for pid=5988 comm="syz.0.951" name="/" dev="ramfs" ino=12109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.723439][ T40] fserror_report: 2 callbacks suppressed [ 72.723452][ T40] loop5: lost filesystem error report for type 5 error -117 [ 72.768346][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.793026][ T5984] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.871546][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.907881][ T5999] loop5: detected capacity change from 0 to 128 [ 72.988149][ T28] audit: type=1400 audit(1780905586.069:704): avc: denied { create } for pid=6003 comm="syz.5.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.009056][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.959'. [ 73.035750][ T28] audit: type=1400 audit(1780905586.089:705): avc: denied { write } for pid=6003 comm="syz.5.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.143961][ T6013] loop3: detected capacity change from 0 to 128 [ 73.169138][ T6013] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.193058][ T6013] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.970707][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.075840][ T6024] loop5: detected capacity change from 0 to 4096 [ 74.084368][ T6025] loop3: detected capacity change from 0 to 2048 [ 74.112732][ T6024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.148163][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.220019][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.368557][ T6025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.400730][ T6025] EXT4-fs (loop3): Remounting filesystem read-only [ 74.477269][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.883276][ T6089] tmpfs: Too small a size for current use [ 75.180724][ T6101] loop5: detected capacity change from 0 to 2048 [ 75.385694][ T6101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.554851][ T6115] loop4: detected capacity change from 0 to 512 [ 75.561569][ T6115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.578974][ T6116] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.599970][ T6118] loop1: detected capacity change from 0 to 512 [ 75.609441][ T6115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.634316][ T6115] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.670951][ T6116] EXT4-fs (loop5): Remounting filesystem read-only [ 75.728898][ T6126] loop3: detected capacity change from 0 to 512 [ 75.815363][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.833982][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.866591][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.885319][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.998743][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.147321][ T6298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.199272][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.215138][ T6298] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.234567][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 77.234580][ T28] audit: type=1400 audit(1780905590.319:751): avc: denied { write } for pid=6297 comm="syz.4.1031" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.273048][ T6294] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.296305][ T6294] EXT4-fs (loop3): group descriptors corrupted! [ 77.323591][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.407380][ T6307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.449245][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 77.502894][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.567876][ T28] audit: type=1400 audit(1780905590.649:752): avc: denied { read write } for pid=6312 comm="syz.4.1035" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.613478][ T6314] set_capacity_and_notify: 3 callbacks suppressed [ 77.613493][ T6314] loop5: detected capacity change from 0 to 1024 [ 77.626961][ T28] audit: type=1400 audit(1780905590.649:753): avc: denied { open } for pid=6312 comm="syz.4.1035" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.698361][ T28] audit: type=1400 audit(1780905590.649:754): avc: denied { ioctl } for pid=6312 comm="syz.4.1035" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.815649][ T6314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.884404][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.067459][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.381280][ T6341] loop5: detected capacity change from 0 to 256 [ 78.570888][ T6348] loop5: detected capacity change from 0 to 256 [ 78.584423][ T6346] loop0: detected capacity change from 0 to 512 [ 78.623895][ T6346] EXT4-fs: dax option not supported [ 78.639799][ T28] audit: type=1326 audit(1780905591.719:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.5.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f323d78ce59 code=0x0 [ 78.870477][ T6352] loop0: detected capacity change from 0 to 8192 [ 79.042708][ T6364] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 79.083729][ T6364] SELinux: failed to load policy [ 79.094768][ T6372] loop3: detected capacity change from 0 to 512 [ 79.108141][ T6372] EXT4-fs: dax option not supported [ 79.282411][ T6376] loop0: detected capacity change from 0 to 1024 [ 79.317432][ T6376] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.332059][ T6376] EXT4-fs (loop0): group descriptors corrupted! [ 79.404908][ T6400] loop0: detected capacity change from 0 to 256 [ 79.427162][ T28] audit: type=1326 audit(1780905592.509:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.0.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f840e32ce59 code=0x0 [ 79.492601][ T6406] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 79.528650][ T6406] SELinux: failed to load policy [ 79.696657][ T6431] loop0: detected capacity change from 0 to 512 [ 79.714844][ T6431] EXT4-fs: Ignoring removed oldalloc option [ 79.737370][ T6431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.741928][ T6434] loop5: detected capacity change from 0 to 512 [ 79.760998][ T6434] EXT4-fs: Ignoring removed nobh option [ 79.776468][ T6431] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.804866][ T6431] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 79.820455][ T6424] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.833074][ T6434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.837365][ T6431] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.848260][ T6424] EXT4-fs (loop4): group descriptors corrupted! [ 79.851978][ T6431] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 79.852014][ T6431] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.867401][ T6434] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.867644][ T6431] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 79.911040][ T6431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1088: bg 0: block 40: padding at end of block bitmap is not set [ 79.926160][ T6431] loop0: lost filesystem error report for type 5 error -117 [ 79.926330][ T6431] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 79.942409][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.942431][ C0] EXT4-fs (loop0): initial error at time 1780905593: ext4_validate_block_bitmap:441 [ 79.942451][ C0] EXT4-fs (loop0): last error at time 1780905593: ext4_validate_block_bitmap:441 [ 79.945995][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.949058][ T6431] loop0: lost filesystem error report for type 5 error -117 [ 79.978032][ T6431] EXT4-fs (loop0): 1 truncate cleaned up [ 80.008243][ T6431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.046482][ T6442] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 80.093893][ T6442] SELinux: failed to load policy [ 80.128095][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.176892][ T6457] EXT4-fs: Ignoring removed orlov option [ 80.178226][ T6460] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1100: iget: bad i_size value: 38620345925642 [ 80.188143][ T6457] EXT4-fs: Ignoring removed bh option [ 80.195963][ T6460] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.201704][ T6460] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1100: couldn't read orphan inode 15 (err -117) [ 80.204284][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 80.229126][ C1] EXT4-fs (loop1): initial error at time 1780905593: ext4_orphan_get:1397: inode 15 [ 80.234433][ T6460] loop1: lost filesystem error report for type 5 error -117 [ 80.238560][ C1] EXT4-fs (loop1): last error at time 1780905593: ext4_orphan_get:1397 [ 80.249557][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.289613][ T28] audit: type=1400 audit(1780905593.369:757): avc: denied { write } for pid=6459 comm="syz.1.1100" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.291299][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.326268][ T6464] netlink: 'syz.3.1101': attribute type 3 has an invalid length. [ 80.334496][ T6464] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 80.344022][ T6459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1100: bg 0: block 5: invalid block bitmap [ 80.356499][ T6464] netlink: 198320 bytes leftover after parsing attributes in process `syz.3.1101'. [ 80.370486][ T6460] EXT4-fs (loop1): shut down requested (0) [ 80.414443][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.486396][ T28] audit: type=1400 audit(1780905593.569:758): avc: denied { create } for pid=6478 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.526108][ T28] audit: type=1400 audit(1780905593.569:759): avc: denied { read } for pid=6478 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.539625][ T6483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.569043][ T6457] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 80.582356][ T6457] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 80.608008][ T6483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.627225][ T6483] EXT4-fs (loop4): 1 truncate cleaned up [ 80.633327][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.656562][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.750945][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.807320][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.936332][ T6525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 81.953444][ T6525] System zones: 0-1, 3-36 [ 81.963911][ T6525] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1122: bad orphan inode 134217728 [ 81.974633][ T6525] loop1: lost filesystem error report for type 5 error -117 [ 81.975533][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.000019][ T6525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.009040][ T6525] EXT4-fs (loop1): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 82.022025][ T6525] EXT4-fs (loop1): can't enable nombcache during remount [ 82.038996][ T6529] EXT4-fs: Ignoring removed bh option [ 82.056530][ T6529] EXT4-fs: inline encryption not supported [ 82.062786][ T6529] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.082727][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.097043][ T6529] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.115658][ T6539] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 82.125521][ T6529] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1124: bg 0: block 248: padding at end of block bitmap is not set [ 82.140329][ T6529] loop5: lost filesystem error report for type 5 error -117 [ 82.141827][ T6529] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1124: Failed to acquire dquot type 1 [ 82.149217][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 82.149238][ C1] EXT4-fs (loop5): last error at time 1780905595: ext4_validate_block_bitmap:441 [ 82.176152][ T6529] loop5: lost filesystem error report for type 5 error -28 [ 82.176722][ T6529] EXT4-fs (loop5): 1 truncate cleaned up [ 82.191038][ T6529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 82.253725][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 82.253735][ T28] audit: type=1400 audit(1780905595.329:763): avc: denied { mounton } for pid=6544 comm="syz.1.1132" path="/proc/604/task" dev="proc" ino=14721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.480978][ T6561] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 82.480986][ T28] audit: type=1400 audit(1780905595.559:764): avc: denied { mac_admin } for pid=6560 comm="syz.3.1139" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.511936][ T28] audit: type=1400 audit(1780905595.589:765): avc: denied { relabelto } for pid=6560 comm="syz.3.1139" name="/" dev="ramfs" ino=13787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 82.538513][ T28] audit: type=1400 audit(1780905595.589:766): avc: denied { associate } for pid=6560 comm="syz.3.1139" name="/" dev="ramfs" ino=13787 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 82.628542][ T6566] set_capacity_and_notify: 8 callbacks suppressed [ 82.628556][ T6566] loop3: detected capacity change from 0 to 128 [ 82.643191][ T6566] vfat: Unknown parameter '00000000000000000000000ÿÿ01777777777777777777777ÿÿ18446744073709551615' [ 82.829392][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.836851][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.845655][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 82.846208][ T6132] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.855170][ T6567] bridge_slave_0: entered allmulticast mode [ 82.860820][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 82.867979][ T6567] bridge_slave_0: entered promiscuous mode [ 82.928488][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.936309][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.943502][ T6567] bridge_slave_1: entered allmulticast mode [ 82.950149][ T6567] bridge_slave_1: entered promiscuous mode [ 82.973793][ T6596] netlink: 'syz.4.1147': attribute type 4 has an invalid length. [ 82.993561][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.005480][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.032358][ T6567] team0: Port device team_slave_0 added [ 83.039030][ T6567] team0: Port device team_slave_1 added [ 83.056805][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.063859][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.095711][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.107008][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.113958][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.115840][ T6599] loop5: detected capacity change from 0 to 512 [ 83.139968][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.156545][ T6567] hsr_slave_0: entered promiscuous mode [ 83.162911][ T6567] hsr_slave_1: entered promiscuous mode [ 83.178747][ T6567] debugfs: 'hsr0' already exists in 'hsr' [ 83.187480][ T6599] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 83.198566][ T6567] Cannot create hsr debugfs directory [ 83.209888][ T6599] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1150: inode #15: comm syz.5.1150: iget: illegal inode # [ 83.247262][ T6599] loop5: lost filesystem error report for type 5 error -117 [ 83.247450][ T6599] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1150: couldn't read orphan inode 15 (err -117) [ 83.254804][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.254821][ C0] EXT4-fs (loop5): initial error at time 1780905596: ext4_orphan_get:1397 [ 83.254841][ C0] EXT4-fs (loop5): last error at time 1780905596: ext4_orphan_get:1397 [ 83.297381][ T6567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.306128][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.313654][ T6567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.322694][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.330436][ T6599] loop5: lost filesystem error report for type 5 error -117 [ 83.330993][ T6567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.331231][ T6599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.359360][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.367218][ T6567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.380713][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.388830][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.415044][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.417268][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.424756][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.430452][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.445383][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.452501][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.487602][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.550065][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.604630][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.628126][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.636476][ T6618] SELinux: failed to load policy [ 83.645475][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.652534][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.668802][ T6620] loop1: detected capacity change from 0 to 128 [ 83.677518][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.684578][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.702294][ T6567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.713316][ T6567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.725336][ T6620] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.738965][ T6620] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.803237][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.815294][ T28] audit: type=1400 audit(1780905596.899:767): avc: denied { relabelfrom } for pid=6624 comm="syz.4.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.851831][ T28] audit: type=1400 audit(1780905596.899:768): avc: denied { relabelto } for pid=6624 comm="syz.4.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.973753][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.995257][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.009923][ T28] audit: type=1400 audit(1780905597.089:769): avc: denied { ioctl } for pid=6646 comm="syz.1.1161" path="socket:[15196]" dev="sockfs" ino=15196 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.168963][ T6567] veth0_vlan: entered promiscuous mode [ 84.180594][ T6567] veth1_vlan: entered promiscuous mode [ 84.211162][ T6567] veth0_macvtap: entered promiscuous mode [ 84.221586][ T6567] veth1_macvtap: entered promiscuous mode [ 84.240034][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.257852][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.268843][ T6272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.279787][ T6272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.297289][ T6272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.309082][ T6272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.344531][ T28] audit: type=1400 audit(1780905597.429:770): avc: denied { mounton } for pid=6567 comm="syz-executor" path="/root/syzkaller.9TqK9h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.393268][ T6674] loop5: detected capacity change from 0 to 8192 [ 84.406057][ T6674] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.639746][ T6726] loop3: detected capacity change from 0 to 1024 [ 84.656506][ T6726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.680134][ T6726] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 84.704575][ T6726] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 84.724411][ T6726] EXT4-fs (loop3): mount failed [ 85.028986][ T6787] loop1: detected capacity change from 0 to 512 [ 85.043885][ T6787] EXT4-fs: Ignoring removed bh option [ 85.049904][ T6787] EXT4-fs: Mount option(s) incompatible with ext3 [ 85.061568][ T6787] loop1: detected capacity change from 0 to 512 [ 85.068730][ T6787] EXT4-fs: Ignoring removed nobh option [ 85.087461][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.1169: corrupted inode contents [ 85.099370][ T6787] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.099537][ T6787] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #3: comm syz.1.1169: mark_inode_dirty error [ 85.108630][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.108652][ C1] EXT4-fs (loop1): initial error at time 1780905598: ext4_do_update_inode:5690: inode 3 [ 85.108681][ C1] EXT4-fs (loop1): last error at time 1780905598: ext4_do_update_inode:5690: inode 3 [ 85.146385][ T6787] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.146850][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.1169: corrupted inode contents [ 85.167844][ T6787] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.168566][ T6787] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.1169: mark_inode_dirty error [ 85.188929][ T6787] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.189121][ T6787] Quota error (device loop1): write_blk: dquota write failed [ 85.205612][ T6787] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1169: Failed to acquire dquot type 0 [ 85.216915][ T6787] loop1: lost filesystem error report for type 5 error -117 [ 85.217554][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1169: corrupted inode contents [ 85.236920][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.237149][ T6787] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1169: mark_inode_dirty error [ 85.257957][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.258208][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1169: corrupted inode contents [ 85.279396][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.280759][ T6787] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1169: mark_inode_dirty error [ 85.301309][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.301551][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1169: corrupted inode contents [ 85.322770][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.322959][ T6787] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 85.340900][ T6787] loop1: lost filesystem error report for type 5 error -117 [ 85.341123][ T6787] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1169: corrupted inode contents [ 85.360403][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.360605][ T6787] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1169: mark_inode_dirty error [ 85.380818][ T6787] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.381100][ T6787] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 85.399160][ T6787] loop1: lost filesystem error report for type 5 error -117 [ 85.399756][ T6787] EXT4-fs (loop1): 1 truncate cleaned up [ 85.413680][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.426302][ T6787] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.437738][ T6787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.578184][ T6805] loop3: detected capacity change from 0 to 8192 [ 85.585772][ T6805] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.699965][ T6814] ipvlan2: entered promiscuous mode [ 85.706510][ T6814] team0: Device ipvlan2 failed to register rx_handler [ 85.915485][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 85.987342][ T6825] loop5: detected capacity change from 0 to 512 [ 86.002610][ T6825] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.1184: inode #1792: comm syz.5.1184: iget: illegal inode # [ 86.016271][ T6825] loop5: lost filesystem error report for type 5 error -117 [ 86.016681][ T6825] EXT4-fs (loop5): Remounting filesystem read-only [ 86.024312][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 86.024482][ C1] EXT4-fs (loop5): initial error at time 1780905599: ext4_get_journal_inode:5896 [ 86.024602][ C1] EXT4-fs (loop5): last error at time 1780905599: ext4_get_journal_inode:5896 [ 86.055168][ T6132] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.071552][ T6825] EXT4-fs (loop5): no journal found [ 86.077723][ T6825] EXT4-fs (loop5): can't get journal size [ 86.080007][ T6832] loop3: detected capacity change from 0 to 512 [ 86.091750][ T6825] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 86.094513][ T6832] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 86.114227][ T6825] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 86.131231][ T6825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.164478][ T6835] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.175615][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.183961][ T6835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 86.205774][ T6835] System zones: 1-12 [ 86.209934][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1188: bad orphan inode 131072 [ 86.220638][ T6835] loop3: lost filesystem error report for type 5 error -117 [ 86.222409][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.246653][ T6840] SELinux: failed to load policy [ 86.270699][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.892554][ T6870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.917277][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.987261][ T6874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.999918][ T6874] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.096932][ T6878] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 87.118089][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.137071][ T6880] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.353377][ T6890] __quota_error: 7 callbacks suppressed [ 87.353391][ T6890] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 87.368177][ T6890] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 87.377675][ T6890] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1207: Failed to acquire dquot type 0 [ 87.389032][ T6890] loop5: lost filesystem error report for type 5 error -117 [ 87.389393][ T6890] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, [ 87.394288][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 87.396906][ T6890] inode 13: [ 87.404350][ C1] EXT4-fs (loop5): initial error at time 1780905600: ext4_acquire_dquot:7034 [ 87.410734][ T6890] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 87.413955][ C1] [ 87.413962][ C1] EXT4-fs (loop5): last error at time 1780905600: ext4_acquire_dquot:7034 [ 87.423150][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #13: comm syz.5.1207: corrupted inode contents [ 87.430975][ C1] : inode 13: block 144 [ 87.458326][ T6890] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.458559][ T6890] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #13: comm syz.5.1207: mark_inode_dirty error [ 87.481252][ T6890] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.481509][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #13: comm syz.5.1207: corrupted inode contents [ 87.502805][ T6890] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.502949][ T6890] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.1207: mark_inode_dirty error [ 87.523735][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #13: comm syz.5.1207: corrupted inode contents [ 87.537113][ T6890] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 87.547414][ T6890] loop5: lost filesystem error report for type 5 error -117 [ 87.547699][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #13: comm syz.5.1207: corrupted inode contents [ 87.567626][ T6890] EXT4-fs error (device loop5): ext4_truncate:4690: inode #13: comm syz.5.1207: mark_inode_dirty error [ 87.579007][ T6890] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 87.588028][ T6890] loop5: lost filesystem error report for type 5 error -117 [ 87.588446][ T6890] EXT4-fs (loop5): 1 truncate cleaned up [ 87.601844][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.693645][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.705983][ T28] audit: type=1400 audit(1780905600.789:777): avc: denied { map } for pid=6903 comm="syz.3.1213" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.809754][ T28] audit: type=1400 audit(1780905600.889:778): avc: denied { read } for pid=6915 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.833846][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.842380][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.879519][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 87.889105][ T6922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1221'. [ 87.903242][ T6922] veth3: entered promiscuous mode [ 87.923500][ T28] audit: type=1400 audit(1780905600.999:779): avc: denied { create } for pid=6923 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.944138][ T28] audit: type=1400 audit(1780905600.999:780): avc: denied { bind } for pid=6923 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.079657][ T28] audit: type=1400 audit(1780905601.159:781): avc: denied { watch } for pid=6933 comm="syz.1.1226" path="pipe:[14155]" dev="pipefs" ino=14155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.361973][ T6944] set_capacity_and_notify: 5 callbacks suppressed [ 88.361983][ T6944] loop4: detected capacity change from 0 to 2048 [ 88.416186][ T6944] loop4: p1 < > p4 < > [ 88.453522][ T6952] loop3: detected capacity change from 0 to 512 [ 88.460351][ T6952] EXT4-fs: Ignoring removed bh option [ 88.466479][ T6952] EXT4-fs: Mount option(s) incompatible with ext3 [ 88.478010][ T6952] loop3: detected capacity change from 0 to 512 [ 88.484955][ T6952] EXT4-fs: Ignoring removed nobh option [ 88.507965][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.1233: corrupted inode contents [ 88.520144][ T6952] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #3: comm syz.3.1233: mark_inode_dirty error [ 88.531430][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 88.531452][ C0] EXT4-fs (loop3): initial error at time 1780905601: ext4_do_update_inode:5690: inode 3 [ 88.531481][ C0] EXT4-fs (loop3): last error at time 1780905601: ext4_do_update_inode:5690: inode 3 [ 88.558880][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.1233: corrupted inode contents [ 88.570905][ T6952] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.1233: mark_inode_dirty error [ 88.582450][ T6952] Quota error (device loop3): write_blk: dquota write failed [ 88.590020][ T6952] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 88.603080][ T6952] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1233: Failed to acquire dquot type 0 [ 88.614850][ T6952] loop3: lost filesystem error report for type 5 error -117 [ 88.615385][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1233: corrupted inode contents [ 88.634946][ T6952] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.1233: mark_inode_dirty error [ 88.649382][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1233: corrupted inode contents [ 88.662157][ T6952] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1233: mark_inode_dirty error [ 88.673672][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1233: corrupted inode contents [ 88.685757][ T6952] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 88.694511][ T6952] loop3: lost filesystem error report for type 5 error -117 [ 88.694699][ T6952] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1233: corrupted inode contents [ 88.714402][ T6952] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.1233: mark_inode_dirty error [ 88.725850][ T6952] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 88.735315][ T6952] EXT4-fs (loop3): 1 truncate cleaned up [ 88.741269][ T6952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.753809][ T6952] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.766352][ T6952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.877424][ T6970] loop4: detected capacity change from 0 to 1024 [ 88.884836][ T6970] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.894534][ T6970] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 88.904969][ T6970] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 88.919930][ T6970] EXT4-fs (loop4): mount failed [ 89.122474][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.131055][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.292066][ T6987] loop5: detected capacity change from 0 to 512 [ 89.298884][ T6987] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.309799][ T6987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 89.318293][ T6987] System zones: 1-12 [ 89.322384][ T6987] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1245: bad orphan inode 131072 [ 89.689472][ T7009] loop3: detected capacity change from 0 to 512 [ 89.701760][ T7010] loop5: detected capacity change from 0 to 512 [ 89.723566][ T7009] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.732942][ T7010] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1254: attempt to clear invalid blocks 2 len 1 [ 89.803889][ T7010] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 89.818528][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 89.818547][ C0] EXT4-fs (loop5): initial error at time 1780905602: ext4_clear_blocks:876: inode 13 [ 89.818572][ C0] EXT4-fs (loop5): last error at time 1780905602: ext4_clear_blocks:876: inode 13 [ 89.877566][ T7010] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1254: invalid indirect mapped block 1819239214 (level 0) [ 89.899348][ T7010] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1254: invalid indirect mapped block 1819239214 (level 1) [ 89.913933][ T7021] loop4: detected capacity change from 0 to 512 [ 89.916674][ T7010] EXT4-fs (loop5): 1 truncate cleaned up [ 89.941894][ T7021] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.982233][ T7004] Set syz1 is full, maxelem 65536 reached [ 90.055962][ T7038] loop5: detected capacity change from 0 to 256 [ 90.174996][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.184236][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.256749][ T7059] loop5: detected capacity change from 0 to 1024 [ 90.278289][ T7059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.281103][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.291847][ T7059] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 90.294079][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.314044][ T7059] EXT4-fs (loop5): mount failed [ 90.322132][ T7020] bridge_slave_0: entered allmulticast mode [ 90.347261][ T7020] bridge_slave_0: entered promiscuous mode [ 90.366104][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.381256][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.397212][ T7020] bridge_slave_1: entered allmulticast mode [ 90.409127][ T7020] bridge_slave_1: entered promiscuous mode [ 90.454012][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.466342][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.509372][ T7020] team0: Port device team_slave_0 added [ 90.516241][ T7020] team0: Port device team_slave_1 added [ 90.534219][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.541232][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.587916][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.599301][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.607034][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.649746][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.686878][ T7020] hsr_slave_0: entered promiscuous mode [ 90.692933][ T7020] hsr_slave_1: entered promiscuous mode [ 90.698995][ T7020] debugfs: 'hsr0' already exists in 'hsr' [ 90.706107][ T7020] Cannot create hsr debugfs directory [ 90.791556][ T7077] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.804160][ T7077] IPv6: Can't replace route, no match found [ 90.843661][ T7020] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.864137][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.878564][ T7020] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.889664][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.904055][ T7020] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.924936][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.936228][ T7020] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.949663][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.991550][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.004557][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.015780][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.022919][ T6270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.032256][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.039384][ T6270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.216710][ T7111] EXT4-fs (loop1): 1 truncate cleaned up [ 91.222983][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.254956][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.334871][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.554838][ T7125] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.1284: inode #1792: comm syz.1.1284: iget: illegal inode # [ 91.570808][ T7125] fserror_report: 2 callbacks suppressed [ 91.570833][ T7125] loop1: lost filesystem error report for type 5 error -117 [ 91.579142][ T7125] EXT4-fs (loop1): Remounting filesystem read-only [ 91.587153][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 91.587181][ C1] EXT4-fs (loop1): initial error at time 1780905604: ext4_get_journal_inode:5896 [ 91.587253][ C1] EXT4-fs (loop1): last error at time 1780905604: ext4_get_journal_inode:5896 [ 91.622214][ T7125] EXT4-fs (loop1): no journal found [ 91.628332][ T7125] EXT4-fs (loop1): can't get journal size [ 91.651006][ T7125] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 91.671405][ T7020] veth0_vlan: entered promiscuous mode [ 91.679849][ T7020] veth1_vlan: entered promiscuous mode [ 91.680568][ T7125] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 91.693313][ T7020] veth0_macvtap: entered promiscuous mode [ 91.709498][ T7020] veth1_macvtap: entered promiscuous mode [ 91.717498][ T7139] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.738183][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.750020][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.771317][ T6270] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.798841][ T6270] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.823291][ T6270] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859256][ T6270] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935680][ T7145] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.008147][ T7156] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.035611][ T7159] vcan0: tx drop: invalid sa for name 0x0000000000040001 [ 92.251696][ T7173] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.276516][ T7173] IPv6: Can't replace route, no match found [ 92.685057][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 92.685073][ T28] audit: type=1400 audit(1780905605.769:789): avc: denied { write } for pid=7201 comm="syz.3.1310" path="socket:[16824]" dev="sockfs" ino=16824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.812062][ T7206] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.825533][ T28] audit: type=1400 audit(1780905605.909:790): avc: denied { write } for pid=7204 comm="syz.7.1311" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.918587][ T7216] EXT4-fs (loop3): 1 truncate cleaned up [ 92.946325][ T28] audit: type=1400 audit(1780905606.029:791): avc: denied { read } for pid=7220 comm="syz.1.1317" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.970472][ T28] audit: type=1400 audit(1780905606.029:792): avc: denied { open } for pid=7220 comm="syz.1.1317" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.018770][ T28] audit: type=1400 audit(1780905606.099:793): avc: denied { write } for pid=7221 comm="syz.7.1318" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.044882][ T28] audit: type=1400 audit(1780905606.129:794): avc: denied { ioctl } for pid=7220 comm="syz.1.1317" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.291592][ T7259] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.359707][ T28] audit: type=1400 audit(1780905606.439:795): avc: denied { write } for pid=7256 comm="syz.1.1325" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.454158][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 94.383478][ T28] audit: type=1400 audit(1780905607.459:796): avc: denied { sys_admin } for pid=7374 comm="syz.7.1336" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 94.468801][ T7384] set_capacity_and_notify: 9 callbacks suppressed [ 94.468818][ T7384] loop7: detected capacity change from 0 to 128 [ 94.516922][ T7384] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.533239][ T28] audit: type=1400 audit(1780905607.619:797): avc: denied { write } for pid=7383 comm="syz.7.1340" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.769417][ T7400] loop5: detected capacity change from 0 to 8192 [ 94.881785][ T7390] loop4: detected capacity change from 0 to 512 [ 94.944750][ T7390] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.1342: inode #1792: comm syz.4.1342: iget: illegal inode # [ 94.959890][ T7390] loop4: lost filesystem error report for type 5 error -117 [ 94.960806][ T7390] EXT4-fs (loop4): Remounting filesystem read-only [ 94.968544][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 94.968587][ C0] EXT4-fs (loop4): initial error at time 1780905608: ext4_get_journal_inode:5896 [ 94.968657][ C0] EXT4-fs (loop4): last error at time 1780905608: ext4_get_journal_inode:5896 [ 95.018285][ T7390] EXT4-fs (loop4): no journal found [ 95.024362][ T7390] EXT4-fs (loop4): can't get journal size [ 95.035560][ T7390] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 95.049189][ T7390] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 95.222645][ T7429] netlink: 8752 bytes leftover after parsing attributes in process `syz.7.1357'. [ 95.326522][ T7436] loop3: detected capacity change from 0 to 128 [ 95.347626][ T7436] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.360583][ T28] audit: type=1400 audit(1780905608.439:798): avc: denied { write } for pid=7435 comm="syz.3.1360" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.869278][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1372'. [ 95.894141][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 97.172596][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 97.422621][ T7555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.451057][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1409'. [ 97.461789][ T7543] loop4: detected capacity change from 0 to 512 [ 97.468575][ T7543] EXT4-fs: Ignoring removed bh option [ 97.477246][ T7543] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.1402: lblock 0 mapped to illegal pblock 3 (length 1) [ 97.491729][ T7543] fserror_report: 18 callbacks suppressed [ 97.491740][ T7543] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 97.499858][ T7543] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1402: error -117 reading directory block [ 97.508999][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.509015][ C1] EXT4-fs (loop4): initial error at time 1780905610: ext4_map_blocks:791: inode 2: block 3 [ 97.509045][ C1] EXT4-fs (loop4): last error at time 1780905610: ext4_map_blocks:791: inode 2: block 3 [ 97.547861][ T7543] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 97.559798][ T7543] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.1402: lblock 0 mapped to illegal pblock 3 (length 1) [ 97.586669][ T7543] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1402: error -117 reading directory block [ 97.647715][ T7555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.747084][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 97.747099][ T28] audit: type=1400 audit(1780905610.829:808): avc: denied { bind } for pid=7583 comm="syz.4.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.810834][ T7555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.833329][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 97.904666][ T7555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.957114][ T6270] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.013061][ T6270] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.068043][ T7608] loop4: detected capacity change from 0 to 512 [ 98.111513][ T28] audit: type=1400 audit(1780905611.189:809): avc: denied { write } for pid=7607 comm="syz.4.1429" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.182014][ T6270] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.221377][ T6783] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.259301][ T6268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.279058][ T6268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309545][ T6270] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.340650][ T6268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.444635][ T6270] bridge_slave_1: left allmulticast mode [ 98.464385][ T6270] bridge_slave_1: left promiscuous mode [ 98.477137][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.496085][ T6270] bridge_slave_0: left allmulticast mode [ 98.511306][ T6270] bridge_slave_0: left promiscuous mode [ 98.523014][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.570618][ T28] audit: type=1400 audit(1780905611.649:810): avc: denied { write } for pid=7621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.618325][ T28] audit: type=1400 audit(1780905611.699:811): avc: denied { write } for pid=7638 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.722689][ T6270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.751932][ T6270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.775043][ T6270] bond0 (unregistering): Released all slaves [ 98.786621][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 98.881235][ T6270] hsr_slave_0: left promiscuous mode [ 98.889468][ T6270] hsr_slave_1: left promiscuous mode [ 98.895480][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.902864][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.914935][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.922339][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.940370][ T6270] veth1_macvtap: left promiscuous mode [ 98.946711][ T6270] veth0_macvtap: left promiscuous mode [ 98.955954][ T6270] veth1_vlan: left promiscuous mode [ 98.967262][ T6270] veth0_vlan: left promiscuous mode [ 98.981147][ T28] audit: type=1326 audit(1780905612.059:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.012402][ T28] audit: type=1326 audit(1780905612.059:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.040738][ T28] audit: type=1326 audit(1780905612.059:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.131331][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 99.155075][ T28] audit: type=1326 audit(1780905612.059:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.183455][ T28] audit: type=1326 audit(1780905612.059:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.209316][ T28] audit: type=1326 audit(1780905612.059:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.4.1439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f90d302ce59 code=0x7ffc0000 [ 99.261071][ T6270] team0 (unregistering): Port device team_slave_1 removed [ 99.272475][ T6270] team0 (unregistering): Port device team_slave_0 removed [ 99.316560][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 99.577420][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.584616][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.592026][ T7629] bridge_slave_0: entered allmulticast mode [ 99.598995][ T7629] bridge_slave_0: entered promiscuous mode [ 99.606029][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.613194][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.621780][ T7629] bridge_slave_1: entered allmulticast mode [ 99.628461][ T7629] bridge_slave_1: entered promiscuous mode [ 99.656653][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.675423][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.698982][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 99.735169][ T7629] team0: Port device team_slave_0 added [ 99.741854][ T7629] team0: Port device team_slave_1 added [ 99.758894][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.766049][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.794189][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.805700][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.815080][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.843687][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.887214][ T7629] hsr_slave_0: entered promiscuous mode [ 99.893396][ T7629] hsr_slave_1: entered promiscuous mode [ 99.906558][ T7629] debugfs: 'hsr0' already exists in 'hsr' [ 99.914938][ T7629] Cannot create hsr debugfs directory [ 99.952076][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 100.016532][ T7629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.026251][ T7629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.036167][ T7629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.045188][ T7629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.052785][ T7629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.061994][ T7629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.072206][ T7629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.081505][ T7629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.098938][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.106054][ T7629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.113343][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.120397][ T7629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.160087][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.172837][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.181121][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.196382][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.207606][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.214729][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.225666][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.232741][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.365425][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.690540][ T7629] veth0_vlan: entered promiscuous mode [ 100.706680][ T7629] veth1_vlan: entered promiscuous mode [ 100.761330][ T7801] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 100.782699][ T7801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.789465][ T7799] loop4: detected capacity change from 0 to 1024 [ 100.799423][ T7629] veth0_macvtap: entered promiscuous mode [ 100.799758][ T7799] EXT4-fs: Ignoring removed bh option [ 100.819101][ T7629] veth1_macvtap: entered promiscuous mode [ 100.833814][ T7799] EXT4-fs mount: 34 callbacks suppressed [ 100.833832][ T7799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.837371][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.876503][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.892027][ T6270] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.902709][ T6270] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.918558][ T7801] bond1: (slave geneve2): making interface the new active one [ 100.928153][ T7801] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.963162][ T6270] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.972239][ T6270] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.001564][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.079440][ T7813] xt_hashlimit: size too large, truncated to 1048576 [ 101.081848][ T7815] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1464'. [ 101.105852][ T7815] syzkaller1: entered promiscuous mode [ 101.113413][ T7815] syzkaller1: entered allmulticast mode [ 101.920596][ T7862] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1480'. [ 101.932697][ T7862] syzkaller1: entered promiscuous mode [ 101.938698][ T7862] syzkaller1: entered allmulticast mode [ 102.069625][ T7868] loop3: detected capacity change from 0 to 512 [ 102.113777][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.137804][ T7868] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.159130][ T7870] loop5: detected capacity change from 0 to 8192 [ 102.168799][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.181081][ T7870] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.185234][ T7876] loop4: detected capacity change from 0 to 128 [ 102.214203][ T6274] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.228425][ T7876] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.241126][ T7876] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.266228][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.278309][ T7881] Unsupported ieee802154 address type: 0 [ 102.359545][ T7889] syzkaller0: entered promiscuous mode [ 102.414641][ T7895] loop4: detected capacity change from 0 to 1024 [ 102.421542][ T7895] EXT4-fs: Ignoring removed bh option [ 102.455293][ T7895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.532741][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.577618][ T7909] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 102.585762][ T7909] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 102.654525][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.661807][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.768161][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.797329][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.865627][ T6270] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.912511][ T6270] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.938560][ T7939] loop1: detected capacity change from 0 to 1024 [ 102.938601][ T6270] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.975896][ T6270] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.002930][ T7939] EXT4-fs: Ignoring removed bh option [ 103.029495][ T7939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.043611][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 103.043625][ T28] audit: type=1400 audit(1780905616.119:874): avc: denied { write } for pid=7938 comm="syz.1.1504" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.098415][ T28] audit: type=1400 audit(1780905616.159:875): avc: denied { map } for pid=7938 comm="syz.1.1504" path="/345/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.124984][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.127486][ T28] audit: type=1400 audit(1780905616.159:876): avc: denied { execute } for pid=7938 comm="syz.1.1504" path="/345/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.159193][ T7949] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1508'. [ 103.179152][ T7951] loop4: detected capacity change from 0 to 512 [ 103.185573][ T28] audit: type=1326 audit(1780905616.259:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.217035][ T7951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.230649][ T28] audit: type=1326 audit(1780905616.259:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.232326][ T7951] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.256098][ T28] audit: type=1326 audit(1780905616.259:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.292037][ T28] audit: type=1326 audit(1780905616.259:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.317627][ T28] audit: type=1326 audit(1780905616.259:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.343408][ T28] audit: type=1326 audit(1780905616.259:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.368830][ T28] audit: type=1326 audit(1780905616.259:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.1.1509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1760cce59 code=0x7ffc0000 [ 103.423129][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.464146][ T7968] loop8: detected capacity change from 0 to 128 [ 103.475005][ T7968] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.496659][ T7968] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.544192][ T7629] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.589691][ T7977] syzkaller0: entered promiscuous mode [ 104.284289][ T7886] Bluetooth: hci0: command 0x1003 tx timeout [ 104.290344][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.364333][ T6132] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 104.370481][ T3558] Bluetooth: hci1: command 0x1003 tx timeout [ 104.562677][ T8005] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1531'. [ 104.686989][ T8009] loop5: detected capacity change from 0 to 1024 [ 104.694025][ T8009] EXT4-fs: Ignoring removed bh option [ 104.709284][ T8009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.841794][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.899015][ T8035] loop3: detected capacity change from 0 to 512 [ 104.905667][ T8035] EXT4-fs: Ignoring removed orlov option [ 104.911371][ T8035] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.923656][ T8035] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.1544: corrupted in-inode xattr: e_value size too large [ 104.946113][ T8035] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.947420][ T8035] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1544: couldn't read orphan inode 15 (err -117) [ 104.956594][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.956613][ C1] EXT4-fs (loop3): initial error at time 1780905618: ext4_iget_extra_inode:5128: inode 15 [ 104.956647][ C1] EXT4-fs (loop3): last error at time 1780905618: ext4_iget_extra_inode:5128: inode 15 [ 104.994744][ T8035] loop3: lost filesystem error report for type 5 error -117 [ 104.995356][ T8039] EXT4-fs: Ignoring removed orlov option [ 104.996432][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.033180][ T8039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.050587][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.077922][ T8045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.109483][ T8049] EXT4-fs: Ignoring removed bh option [ 105.119413][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.133046][ T8049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.169891][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.184529][ T8057] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 105.197365][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.210089][ T8057] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.1550: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.276348][ T8057] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.277401][ T8057] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.1550: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.286525][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.286545][ C1] EXT4-fs (loop1): initial error at time 1780905618: ext4_map_blocks:791: inode 3: block 2 [ 105.286588][ C1] EXT4-fs (loop1): last error at time 1780905618: ext4_map_blocks:791: inode 3: block 2 [ 105.329199][ T8057] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.329310][ T8057] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1550: Failed to acquire dquot type 0 [ 105.350045][ T8057] loop1: lost filesystem error report for type 5 error -117 [ 105.350143][ T8057] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 105.367239][ T8057] loop1: lost filesystem error report for type 5 error -117 [ 105.367378][ T8057] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.1550: mark_inode_dirty error [ 105.372467][ T8059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.374831][ T8057] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.375045][ T8057] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 105.375083][ T8057] EXT4-fs (loop1): 1 orphan inode deleted [ 105.375623][ T8057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.380440][ T8057] EXT4-fs (loop1): shut down requested (1) [ 105.400631][ T6268] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.470530][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.481579][ T3874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.533958][ T8075] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.540615][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.550653][ T8075] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 105.551223][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.559158][ T8075] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.574762][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.575573][ T8075] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1557: Allocating blocks 41-42 which overlap fs metadata [ 105.583056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.596730][ T8075] loop4: lost filesystem error report for type 5 error -117 [ 105.605489][ T8075] EXT4-fs (loop4): Remounting filesystem read-only [ 105.605840][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.619393][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 105.619411][ C0] EXT4-fs (loop4): initial error at time 1780905618: ext4_mb_mark_diskspace_used:4222 [ 105.619453][ C0] EXT4-fs (loop4): last error at time 1780905618: ext4_mb_mark_diskspace_used:4222 [ 105.651774][ T8075] EXT4-fs (loop4): 1 truncate cleaned up [ 105.653324][ T6274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.657710][ T8075] EXT4-fs (loop4): pa ffff88810811b4d0: logic 1, phys. 41, len 23 [ 105.666307][ T6270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.681488][ T7914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.689569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.690687][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.697882][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.721087][ T7929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.729190][ T7929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.738704][ T7914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.761141][ T8083] msdos: Bad value for 'gid' [ 105.774285][ T8083] msdos: Bad value for 'gid' [ 105.782962][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.791591][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.794351][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.802698][ T8077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.818257][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.831429][ T8077] veth1_vlan: left promiscuous mode [ 105.838158][ T8077] veth0_vlan: left promiscuous mode [ 105.844006][ T8077] veth0_vlan: entered promiscuous mode [ 105.852313][ T8077] veth1_vlan: entered promiscuous mode [ 105.860580][ T8077] veth1_macvtap: left promiscuous mode [ 105.866895][ T8077] veth0_macvtap: left promiscuous mode [ 105.873453][ T8077] veth0_macvtap: entered promiscuous mode [ 105.880145][ T8077] veth1_macvtap: entered promiscuous mode [ 105.890522][ T8077] 8021q: adding VLAN 0 to HW filter on device eth0 [ 105.899209][ T8077] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.907808][ T8077] 8021q: adding VLAN 0 to HW filter on device eth2 [ 105.916398][ T8077] 8021q: adding VLAN 0 to HW filter on device eth3 [ 105.924766][ T8077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.949355][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.956452][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.971093][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.978176][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.008425][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1558'. [ 106.017799][ T2362] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.026406][ T2362] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.038255][ T2362] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.047480][ T6270] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.125614][ T8099] set_capacity_and_notify: 7 callbacks suppressed [ 106.125629][ T8099] loop3: detected capacity change from 0 to 512 [ 106.235470][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1566'. [ 106.246503][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.256057][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.614374][ T8091] ================================================================== [ 106.622489][ T8091] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 106.630307][ T8091] [ 106.632627][ T8091] write to 0xffff88811b54de7c of 4 bytes by task 8088 on cpu 1: [ 106.640260][ T8091] inode_update_time+0x2d3/0x360 [ 106.645205][ T8091] file_update_time_flags+0x277/0x2e0 [ 106.650588][ T8091] file_update_time+0x17/0x20 [ 106.655268][ T8091] shmem_file_write_iter+0x9c/0xf0 [ 106.660386][ T8091] iter_file_splice_write+0x6c4/0xa80 [ 106.665769][ T8091] direct_splice_actor+0x156/0x2a0 [ 106.670891][ T8091] splice_direct_to_actor+0x311/0x670 [ 106.676286][ T8091] do_splice_direct+0x119/0x1a0 [ 106.681152][ T8091] do_sendfile+0x382/0x650 [ 106.685563][ T8091] __x64_sys_sendfile64+0x105/0x150 [ 106.690759][ T8091] x64_sys_call+0x2dc4/0x3020 [ 106.695438][ T8091] do_syscall_64+0x12c/0x3b0 [ 106.700042][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.705930][ T8091] [ 106.708242][ T8091] read to 0xffff88811b54de7c of 4 bytes by task 8091 on cpu 0: [ 106.715775][ T8091] atime_needs_update+0x2a8/0x3e0 [ 106.720811][ T8091] touch_atime+0x4a/0x330 [ 106.725137][ T8091] shmem_file_splice_read+0x549/0x5a0 [ 106.730507][ T8091] splice_direct_to_actor+0x26e/0x670 [ 106.735889][ T8091] do_splice_direct+0x119/0x1a0 [ 106.740752][ T8091] do_sendfile+0x382/0x650 [ 106.745168][ T8091] __x64_sys_sendfile64+0x105/0x150 [ 106.750358][ T8091] x64_sys_call+0x2dc4/0x3020 [ 106.755036][ T8091] do_syscall_64+0x12c/0x3b0 [ 106.759637][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.765536][ T8091] [ 106.767847][ T8091] value changed: 0x291b8ee9 -> 0x29b42569 [ 106.773553][ T8091] [ 106.775868][ T8091] Reported by Kernel Concurrency Sanitizer on: [ 106.782031][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.4.1560 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.791322][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.801368][ T8091] ================================================================== [ 110.023865][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 110.023881][ T28] audit: type=1400 audit(1780905623.099:913): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.068801][ T28] audit: type=1400 audit(1780905623.139:914): avc: denied { write } for pid=8120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.128044][ T28] audit: type=1400 audit(1780905623.209:915): avc: denied { write } for pid=8123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.151188][ T28] audit: type=1400 audit(1780905623.229:916): avc: denied { write } for pid=8134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.604380][ T2362] net_ratelimit: 37 callbacks suppressed [ 110.604398][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.618428][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.014722][ T6274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.022975][ T7929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.031160][ T7929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.039951][ T7929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.404445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.534849][ T28] audit: type=1400 audit(1780905624.619:917): avc: denied { write } for pid=8137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.557817][ T28] audit: type=1400 audit(1780905624.619:918): avc: denied { write } for pid=8148 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.584391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.627869][ T28] audit: type=1400 audit(1780905624.709:919): avc: denied { write } for pid=8151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.651640][ T28] audit: type=1400 audit(1780905624.709:920): avc: denied { write } for pid=8162 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.734652][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.742848][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.194390][ T2362] net_ratelimit: 14 callbacks suppressed [ 116.194406][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.208270][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.216444][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog