last executing test programs: 39.96746312s ago: executing program 0 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) 39.937502082s ago: executing program 0 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r1) 39.834667571s ago: executing program 0 (id=737): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 39.797351644s ago: executing program 0 (id=739): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 39.432831623s ago: executing program 0 (id=753): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 39.126481618s ago: executing program 0 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 39.092685241s ago: executing program 32 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 19.746739359s ago: executing program 5 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 19.232130001s ago: executing program 5 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r1) 19.207662003s ago: executing program 5 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 19.167090516s ago: executing program 5 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 19.110636581s ago: executing program 5 (id=1471): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 18.986811151s ago: executing program 5 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 18.950649443s ago: executing program 33 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 8.190617796s ago: executing program 3 (id=1839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4001, 0x10000, 0xf9, 0x1, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f0000000380)=""/190, 0xbe) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.038507408s ago: executing program 3 (id=1846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x6, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6103064b0202818102cea102"], 0xc) 7.034363869s ago: executing program 3 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000006c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 6.974770655s ago: executing program 3 (id=1918): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, &(0x7f0000000180)=0x8) 6.723307325s ago: executing program 3 (id=1926): unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 6.687125578s ago: executing program 34 (id=1926): unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 817.861924ms ago: executing program 2 (id=2070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 813.811484ms ago: executing program 1 (id=2071): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 736.24066ms ago: executing program 2 (id=2075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000100000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x1, 0x60, 0x0, 0x5c}) 723.623371ms ago: executing program 1 (id=2079): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 652.539657ms ago: executing program 6 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 652.312987ms ago: executing program 1 (id=2081): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0x800, 0x8000) 652.025197ms ago: executing program 2 (id=2083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xff) 608.439421ms ago: executing program 4 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 561.299895ms ago: executing program 2 (id=2086): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 561.090134ms ago: executing program 4 (id=2087): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) 446.693004ms ago: executing program 1 (id=2089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 446.479414ms ago: executing program 2 (id=2090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 347.558882ms ago: executing program 2 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2097a3}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 347.407992ms ago: executing program 4 (id=2093): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 277.886167ms ago: executing program 4 (id=2105): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 260.094699ms ago: executing program 1 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 234.868141ms ago: executing program 4 (id=2098): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 232.700241ms ago: executing program 6 (id=2099): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xd7487aa6f8c07d18, 0xf7fa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 209.641733ms ago: executing program 1 (id=2100): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(r1) syz_io_uring_setup(0x112, &(0x7f00000003c0)={0x0, 0xf5cc, 0x10000, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 195.761484ms ago: executing program 7 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) 144.167518ms ago: executing program 7 (id=2102): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="deb9505f8e54018ec300000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 128.91421ms ago: executing program 7 (id=2103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 126.26073ms ago: executing program 6 (id=2104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x7b36, 0x0, 0x1, 0x2fd}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8001, r0, 0x20, {0x9, 0x7a}, 0xa}, 0x1) 103.386632ms ago: executing program 6 (id=2106): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}]}, 0x5, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 103.132072ms ago: executing program 7 (id=2107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 81.305573ms ago: executing program 7 (id=2108): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000000340)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) 68.473285ms ago: executing program 6 (id=2109): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 51.708826ms ago: executing program 4 (id=2110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 12.571669ms ago: executing program 6 (id=2111): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x1, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 0s ago: executing program 7 (id=2112): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000000000004f7,nocase,nodots,flush,allow_utime=00000000000000000\x0077777,nodots,dots,umask=00000000000000000000004,quiet,dots,allow_utime=00000000000000000000011,dots,fmask=00000000000017777777777,sys_immutable,usefree,check=normal,\x00'], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) kernel console output (not intermixed with test programs): t4_do_update_inode:5653: inode #16: comm syz.3.464: corrupted inode contents [ 46.822243][ T3685] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 46.832757][ T4726] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.464: mark_inode_dirty error [ 46.851258][ T4726] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 46.860749][ T4726] EXT4-fs (loop3): 1 truncate cleaned up [ 46.866910][ T4726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.879487][ T4726] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.925719][ T4740] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.934813][ T4726] syz.3.464 (4726) used greatest stack depth: 9760 bytes left [ 46.945460][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.969800][ T4742] loop4: detected capacity change from 0 to 1024 [ 47.006159][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.013299][ T4747] loop1: detected capacity change from 0 to 1024 [ 47.024996][ T4747] EXT4-fs: Ignoring removed orlov option [ 47.030784][ T4747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.045488][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.082478][ T4742] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.468: Allocating blocks 449-513 which overlap fs metadata [ 47.138271][ T4741] EXT4-fs (loop4): pa ffff888106a362a0: logic 48, phys. 177, len 21 [ 47.146377][ T4741] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 47.168368][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.184724][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.535915][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.544873][ T4789] validate_nla: 1 callbacks suppressed [ 47.544892][ T4789] netlink: 'syz.4.488': attribute type 30 has an invalid length. [ 47.558248][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.602406][ T4793] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.490'. [ 47.628355][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.637279][ T4789] netlink: 'syz.4.488': attribute type 30 has an invalid length. [ 47.652903][ T4797] netlink: 'syz.3.492': attribute type 22 has an invalid length. [ 47.682480][ T4797] netlink: 'syz.3.492': attribute type 22 has an invalid length. [ 47.682447][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.682563][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.726416][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.749251][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 47.749257][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.749268][ T29] audit: type=1400 audit(1754259303.851:1049): avc: denied { watch_reads } for pid=4804 comm="syz.1.495" path="/101" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.749845][ T29] audit: type=1400 audit(1754259303.851:1050): avc: denied { bind } for pid=4802 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.805999][ T29] audit: type=1400 audit(1754259303.851:1051): avc: denied { name_bind } for pid=4802 comm="syz.2.504" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.826907][ T29] audit: type=1400 audit(1754259303.851:1052): avc: denied { node_bind } for pid=4802 comm="syz.2.504" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 47.937581][ T29] audit: type=1400 audit(1754259304.001:1053): avc: denied { sqpoll } for pid=4810 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.116010][ T4823] loop4: detected capacity change from 0 to 8192 [ 48.563224][ T29] audit: type=1326 audit(1754259304.671:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b84ba5b27 code=0x7ffc0000 [ 48.628222][ T29] audit: type=1326 audit(1754259304.671:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b84b4ad69 code=0x7ffc0000 [ 48.651626][ T29] audit: type=1326 audit(1754259304.671:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b84ba5b27 code=0x7ffc0000 [ 48.674932][ T29] audit: type=1326 audit(1754259304.671:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b84b4ad69 code=0x7ffc0000 [ 48.698617][ T29] audit: type=1326 audit(1754259304.671:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b84baeb69 code=0x7ffc0000 [ 48.889345][ T4845] bond1: entered promiscuous mode [ 48.894592][ T4845] bond1: entered allmulticast mode [ 48.902368][ T4845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.914569][ T4845] bond1 (unregistering): Released all slaves [ 48.980405][ T4856] SELinux: failed to load policy [ 49.026430][ T4858] loop4: detected capacity change from 0 to 256 [ 49.056364][ T4858] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.069785][ T4858] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.078392][ T4858] FAT-fs (loop4): Filesystem has been set read-only [ 49.502012][ T4901] loop2: detected capacity change from 0 to 256 [ 49.509620][ T4901] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.532985][ T4901] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.541589][ T4901] FAT-fs (loop2): Filesystem has been set read-only [ 49.756909][ T4904] loop0: detected capacity change from 0 to 32768 [ 49.770205][ T4926] __nla_validate_parse: 3 callbacks suppressed [ 49.770223][ T4926] netlink: 830 bytes leftover after parsing attributes in process `syz.2.534'. [ 49.802966][ T4904] loop0: p1 p3 < > [ 50.084679][ T4964] loop0: detected capacity change from 0 to 128 [ 50.098439][ T4964] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.116924][ T4968] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 50.124689][ T4968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.542'. [ 50.135938][ T4964] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.150463][ T4974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 50.197718][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.215463][ T4983] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 50.250105][ T4994] loop0: detected capacity change from 0 to 512 [ 50.276074][ T4994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.307573][ T4998] batadv_slave_0: entered promiscuous mode [ 50.318548][ T4994] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.330526][ T4994] EXT4-fs (loop0): mount failed [ 50.337190][ T4995] batadv_slave_0: left promiscuous mode [ 50.468624][ T5016] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 50.476352][ T5016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.560'. [ 50.641582][ T5041] loop4: detected capacity change from 0 to 512 [ 50.646232][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.665816][ T5044] loop3: detected capacity change from 0 to 1024 [ 50.674252][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.674574][ T5044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.692972][ T5041] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.565: bg 0: block 288: padding at end of block bitmap is not set [ 50.708473][ T5041] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.717516][ T5044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.730483][ T5044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.744448][ T5041] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.565: attempt to clear invalid blocks 1024 len 1 [ 50.757721][ T5041] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.565: invalid indirect mapped block 1819239214 (level 0) [ 50.773120][ T5041] EXT4-fs (loop4): 1 truncate cleaned up [ 50.779654][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.804623][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.856590][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.922040][ T5071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.951959][ T5067] loop3: detected capacity change from 0 to 8192 [ 51.198947][ T5103] pimreg: entered allmulticast mode [ 51.221225][ T5103] pimreg: left allmulticast mode [ 51.320830][ T5114] loop0: detected capacity change from 0 to 512 [ 51.374233][ T5114] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.584: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 51.403686][ T5114] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.584: Bad quota inode: 3, type: 0 [ 51.423147][ T5114] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 51.448929][ T5114] EXT4-fs (loop0): mount failed [ 51.469072][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.483910][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.500621][ T5128] loop2: detected capacity change from 0 to 1024 [ 51.515361][ T5128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.524400][ T5128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.536153][ T5128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.560027][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 51.607514][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.862417][ T5169] syzkaller1: entered promiscuous mode [ 51.868031][ T5169] syzkaller1: entered allmulticast mode [ 51.941591][ T5183] Invalid ELF header magic: != ELF [ 52.121299][ T5216] netlink: 'syz.1.632': attribute type 3 has an invalid length. [ 52.199492][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.225393][ T5230] batadv_slave_1: entered promiscuous mode [ 52.232052][ T5229] batadv_slave_1: left promiscuous mode [ 52.254954][ T5235] netlink: 'syz.2.640': attribute type 16 has an invalid length. [ 52.262889][ T5235] netlink: 'syz.2.640': attribute type 3 has an invalid length. [ 52.270552][ T5235] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.640'. [ 52.345917][ T5242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.352976][ T5245] loop4: detected capacity change from 0 to 764 [ 52.433850][ T5258] loop3: detected capacity change from 0 to 1024 [ 52.457286][ T5258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.476268][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 52.486674][ T5265] veth1_macvtap: left promiscuous mode [ 52.492916][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.507193][ T5266] SELinux: failed to load policy [ 52.514398][ T5268] pim6reg1: entered promiscuous mode [ 52.519742][ T5268] pim6reg1: entered allmulticast mode [ 52.546719][ T5274] loop0: detected capacity change from 0 to 128 [ 52.576843][ T5274] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.590364][ T5274] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.699979][ T5274] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.658: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 52.746921][ T5274] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 52.759167][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 52.759183][ T29] audit: type=1400 audit(1754259308.861:1274): avc: denied { create } for pid=5273 comm="syz.0.658" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 52.807745][ T5274] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.658: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 52.837058][ T5274] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 52.869484][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.884285][ T29] audit: type=1326 audit(1754259308.981:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 52.907661][ T29] audit: type=1326 audit(1754259308.981:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 52.931319][ T29] audit: type=1326 audit(1754259308.991:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 52.987653][ T29] audit: type=1326 audit(1754259309.061:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.006765][ T5305] loop3: detected capacity change from 0 to 4096 [ 53.011077][ T29] audit: type=1326 audit(1754259309.061:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.040877][ T29] audit: type=1326 audit(1754259309.061:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.064294][ T29] audit: type=1326 audit(1754259309.061:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.087733][ T29] audit: type=1326 audit(1754259309.061:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.111087][ T29] audit: type=1326 audit(1754259309.061:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 53.128607][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.366232][ T5319] loop1: detected capacity change from 0 to 32768 [ 53.374685][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.400233][ T5324] loop4: detected capacity change from 0 to 512 [ 53.410174][ T5324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.421147][ T5324] EXT4-fs (loop4): 1 truncate cleaned up [ 53.427945][ T5319] loop1: p1 p3 < > [ 53.446931][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.447841][ T5332] loop2: detected capacity change from 0 to 512 [ 53.463309][ T5324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.484407][ T5332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 53.497842][ T5332] System zones: 1-12 [ 53.507908][ T5332] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.680: error while reading EA inode 32 err=-116 [ 53.535106][ T5332] EXT4-fs (loop2): Remounting filesystem read-only [ 53.541699][ T5332] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 53.552046][ T5332] EXT4-fs (loop2): 1 orphan inode deleted [ 53.558282][ T5332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.573059][ T5332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.844129][ T5389] loop2: detected capacity change from 0 to 1024 [ 53.851322][ T5389] EXT4-fs: Ignoring removed orlov option [ 53.886915][ T5389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.896009][ T5397] SELinux: ebitmap: truncated map [ 53.908794][ T5397] SELinux: failed to load policy [ 54.003389][ T5401] loop3: detected capacity change from 0 to 512 [ 54.014408][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.033237][ T5401] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.049244][ T5401] EXT4-fs (loop3): mount failed [ 54.141574][ T10] IPVS: starting estimator thread 0... [ 54.152791][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 54.170355][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 54.185829][ T5423] random: crng reseeded on system resumption [ 54.195864][ T5419] veth1_macvtap: left promiscuous mode [ 54.234826][ T5428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5428 comm=syz.0.713 [ 54.248031][ T5417] IPVS: using max 2496 ests per chain, 124800 per kthread [ 54.298851][ T5433] loop4: detected capacity change from 0 to 8192 [ 54.345015][ T5444] Illegal XDP return value 4294967294 on prog (id 472) dev N/A, expect packet loss! [ 54.406769][ T5448] pim6reg1: entered promiscuous mode [ 54.434818][ T5456] loop2: detected capacity change from 0 to 1024 [ 54.442275][ T5456] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.453228][ T5456] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.467322][ T5454] vhci_hcd: invalid port number 96 [ 54.472481][ T5454] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 54.480700][ T5456] JBD2: no valid journal superblock found [ 54.486506][ T5456] EXT4-fs (loop2): Could not load journal inode [ 54.503935][ T5462] veth1_macvtap: left promiscuous mode [ 54.544427][ T5456] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 54.647580][ T5485] loop0: detected capacity change from 0 to 512 [ 54.668429][ T5485] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.739: casefold flag without casefold feature [ 54.681560][ T5485] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.739: couldn't read orphan inode 15 (err -117) [ 54.703161][ T5485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.706487][ T5481] loop3: detected capacity change from 0 to 512 [ 54.733884][ T5481] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.744757][ T5481] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.756198][ T5481] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.740: iget: bad i_size value: 38620345925642 [ 54.769926][ T5481] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.740: couldn't read orphan inode 15 (err -117) [ 54.786192][ T5481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.821713][ T5485] loop0: detected capacity change from 512 to 64 [ 54.842961][ T5501] syz.0.739: attempt to access beyond end of device [ 54.842961][ T5501] loop0: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 54.844219][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.856431][ T5501] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 54.884866][ T5501] EXT4-fs error (device loop0): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.0.739: IO error syncing itable block [ 54.919622][ T5501] EXT4-fs error (device loop0) in add_dirent_to_buf:2157: IO failure [ 54.933747][ T5501] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.739: Error while async write back metadata [ 54.961990][ T5513] IPv6: Can't replace route, no match found [ 54.976108][ T5511] loop1: detected capacity change from 0 to 512 [ 54.997984][ T3305] syz-executor: attempt to access beyond end of device [ 54.997984][ T3305] loop0: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 55.011625][ T3305] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 55.030713][ T3305] EXT4-fs error (device loop0): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 55.044860][ T3305] EXT4-fs error (device loop0) in ext4_delete_entry:2739: IO failure [ 55.057066][ T5511] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.749: bg 0: block 288: padding at end of block bitmap is not set [ 55.087878][ T5511] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.132886][ T5511] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.749: attempt to clear invalid blocks 1024 len 1 [ 55.164558][ T5511] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.749: invalid indirect mapped block 1819239214 (level 0) [ 55.196147][ T5511] EXT4-fs (loop1): 1 truncate cleaned up [ 55.202240][ T5511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.220483][ T5531] loop2: detected capacity change from 0 to 512 [ 55.230853][ T5531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.265219][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.310498][ T3657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.397929][ T5545] __nla_validate_parse: 4 callbacks suppressed [ 55.397945][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 55.428008][ T5545] veth1_macvtap: left promiscuous mode [ 55.455617][ T3657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.547607][ T3657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.573024][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 55.645487][ T3657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.681904][ T5549] lo speed is unknown, defaulting to 1000 [ 55.756884][ T5582] vhci_hcd: invalid port number 96 [ 55.762075][ T5582] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 55.834101][ T5592] loop4: detected capacity change from 0 to 2048 [ 55.859532][ T3657] bridge_slave_1: left allmulticast mode [ 55.865284][ T3657] bridge_slave_1: left promiscuous mode [ 55.871014][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.937422][ T5604] syz.1.784 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.961999][ T3657] bridge_slave_0: left allmulticast mode [ 55.967741][ T3657] bridge_slave_0: left promiscuous mode [ 55.973481][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.135971][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.147066][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.164520][ T3657] bond0 (unregistering): Released all slaves [ 56.192869][ T5549] chnl_net:caif_netlink_parms(): no params data found [ 56.253315][ T3657] hsr_slave_0: left promiscuous mode [ 56.265925][ T3657] hsr_slave_1: left promiscuous mode [ 56.271772][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.279226][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.287501][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.294984][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.319992][ T3657] veth0_macvtap: left promiscuous mode [ 56.336705][ T3657] veth1_vlan: left promiscuous mode [ 56.342097][ T3657] veth0_vlan: left promiscuous mode [ 56.350539][ T5641] loop2: detected capacity change from 0 to 512 [ 56.357630][ T5641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.411350][ T5641] EXT4-fs (loop2): 1 truncate cleaned up [ 56.445712][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 56.461980][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 56.465032][ T5652] loop1: detected capacity change from 0 to 764 [ 56.497901][ T5652] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.529416][ T3357] infiniband syz1: ib_query_port failed (-19) [ 56.568248][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.575468][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.585743][ T5663] loop1: detected capacity change from 0 to 128 [ 56.593221][ T5549] bridge_slave_0: entered allmulticast mode [ 56.600332][ T5663] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.635843][ T5549] bridge_slave_0: entered promiscuous mode [ 56.656637][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.659216][ T5663] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 63: comm syz.1.808: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 56.663930][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.703846][ T5549] bridge_slave_1: entered allmulticast mode [ 56.710697][ T5549] bridge_slave_1: entered promiscuous mode [ 56.736240][ T5663] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 56.770317][ T5549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.790021][ T5549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.809679][ T5663] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 63: comm syz.1.808: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 56.831217][ T5663] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 56.842459][ T5549] team0: Port device team_slave_0 added [ 56.849350][ T5549] team0: Port device team_slave_1 added [ 56.903113][ T5673] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 56.911379][ T5673] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 56.922962][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.929957][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.955921][ T5549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.998790][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.005806][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.031831][ T5549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.071418][ T5549] hsr_slave_0: entered promiscuous mode [ 57.082020][ T5549] hsr_slave_1: entered promiscuous mode [ 57.090986][ T5549] debugfs: 'hsr0' already exists in 'hsr' [ 57.096822][ T5549] Cannot create hsr debugfs directory [ 57.266254][ T5549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.295683][ T5549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.306847][ T5699] loop4: detected capacity change from 0 to 128 [ 57.317255][ T5549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.325737][ T5699] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.365903][ T5549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.431381][ T5699] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 63: comm syz.4.823: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 57.434847][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.456771][ T5549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.464127][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.471180][ T5549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.499729][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.512412][ T5699] EXT4-fs error (device loop4) in do_split:2029: Corrupt filesystem [ 57.514747][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.523239][ T5699] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 63: comm syz.4.823: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 57.545866][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.655878][ T5699] EXT4-fs error (device loop4) in do_split:2029: Corrupt filesystem [ 57.682222][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.696329][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.703510][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.711956][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.719088][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.788264][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 57.788280][ T29] audit: type=1400 audit(1754259313.891:1438): avc: denied { shutdown } for pid=5716 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.825586][ T29] audit: type=1326 audit(1754259313.921:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 57.848973][ T29] audit: type=1326 audit(1754259313.931:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 57.872594][ T29] audit: type=1326 audit(1754259313.931:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 57.896325][ T29] audit: type=1326 audit(1754259313.931:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 57.920112][ T29] audit: type=1326 audit(1754259313.931:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 57.944652][ T29] audit: type=1326 audit(1754259313.981:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 58.001483][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.041038][ T29] audit: type=1326 audit(1754259314.051:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 58.064643][ T29] audit: type=1326 audit(1754259314.051:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 58.088080][ T29] audit: type=1326 audit(1754259314.051:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 58.210875][ T5549] veth0_vlan: entered promiscuous mode [ 58.220649][ T5549] veth1_vlan: entered promiscuous mode [ 58.242213][ T5549] veth0_macvtap: entered promiscuous mode [ 58.253264][ T5549] veth1_macvtap: entered promiscuous mode [ 58.269130][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.307894][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.331188][ T3672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.346422][ T3672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.376736][ T3672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.387553][ T3672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.441628][ T5740] loop2: detected capacity change from 0 to 32768 [ 58.471061][ T5776] netlink: 332 bytes leftover after parsing attributes in process `syz.5.763'. [ 58.493564][ T5740] loop2: p1 p3 < > [ 58.513568][ T5781] loop1: detected capacity change from 0 to 512 [ 58.517899][ T5783] loop4: detected capacity change from 0 to 2048 [ 58.545351][ T5781] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.586867][ T5783] EXT4-fs (loop4): failed to initialize system zone (-117) [ 58.601618][ T5783] EXT4-fs (loop4): mount failed [ 58.865249][ T5833] macvtap0: refused to change device tx_queue_len [ 58.904806][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.868'. [ 59.059066][ T5862] lo speed is unknown, defaulting to 1000 [ 59.147510][ T5880] lo speed is unknown, defaulting to 1000 [ 59.179660][ T5886] bond2: entered promiscuous mode [ 59.185111][ T5886] bond2: entered allmulticast mode [ 59.190891][ T5886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.203502][ T5886] bond2 (unregistering): Released all slaves [ 59.217383][ T5892] loop5: detected capacity change from 0 to 512 [ 59.256445][ T5892] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.321998][ T5895] loop2: detected capacity change from 0 to 8192 [ 59.484771][ T5913] loop3: detected capacity change from 0 to 512 [ 59.544742][ T5899] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.891: corrupted inode contents [ 59.600298][ T5899] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #19: comm syz.5.891: mark_inode_dirty error [ 59.622808][ T5899] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.891: corrupted inode contents [ 59.637988][ T5899] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.891: mark_inode_dirty error [ 59.652311][ T5899] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.891: mark inode dirty (error -117) [ 59.695796][ T5899] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 59.746026][ T5939] loop4: detected capacity change from 0 to 128 [ 59.767819][ T5939] FAT-fs (loop4): Directory bread(block 32) failed [ 59.782874][ T5939] FAT-fs (loop4): Directory bread(block 33) failed [ 59.792472][ T5941] loop1: detected capacity change from 0 to 2048 [ 59.802676][ T5939] FAT-fs (loop4): Directory bread(block 34) failed [ 59.809227][ T5939] FAT-fs (loop4): Directory bread(block 35) failed [ 59.820551][ T5939] FAT-fs (loop4): Directory bread(block 36) failed [ 59.828541][ T5939] FAT-fs (loop4): Directory bread(block 37) failed [ 59.836613][ T5939] FAT-fs (loop4): Directory bread(block 38) failed [ 59.843519][ T5941] EXT4-fs (loop1): failed to initialize system zone (-117) [ 59.851363][ T5945] loop2: detected capacity change from 0 to 1024 [ 59.857971][ T5941] EXT4-fs (loop1): mount failed [ 59.863280][ T5945] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 59.873127][ T5939] FAT-fs (loop4): Directory bread(block 39) failed [ 59.873169][ T5939] FAT-fs (loop4): Directory bread(block 40) failed [ 59.873190][ T5939] FAT-fs (loop4): Directory bread(block 41) failed [ 59.893608][ T5945] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 59.903666][ T5945] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.914960][ T5945] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.911: unexpected bad inode w/o EXT4_IGET_BAD [ 59.950070][ T5939] syz.4.907: attempt to access beyond end of device [ 59.950070][ T5939] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 59.963782][ T5945] EXT4-fs (loop2): no journal found [ 59.964122][ T5939] FAT-fs (loop4): Filesystem has been set read-only [ 59.969003][ T5945] EXT4-fs (loop2): can't get journal size [ 59.985006][ T5939] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 60.012761][ T5945] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.911: Abort forced by user [ 60.025680][ T5945] EXT4-fs (loop2): Remounting filesystem read-only [ 60.032213][ T5945] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.073572][ T5962] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.082441][ T5962] vhci_hcd: invalid port number 129 [ 60.087832][ T5962] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 60.108413][ T5969] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 60.124107][ T5965] SELinux: ebitmap: truncated map [ 60.141467][ T5965] SELinux: failed to load policy [ 60.237369][ T5986] loop3: detected capacity change from 0 to 1024 [ 60.247929][ T5986] EXT4-fs: Ignoring removed orlov option [ 60.263536][ T5991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.280693][ T5991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.307180][ T5996] 9pnet_fd: Insufficient options for proto=fd [ 60.366136][ T6005] netlink: 'syz.4.937': attribute type 21 has an invalid length. [ 60.392450][ T6005] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 60.400217][ T6005] netlink: 144 bytes leftover after parsing attributes in process `syz.4.937'. [ 60.611721][ T6020] loop3: detected capacity change from 0 to 8192 [ 60.631044][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.943'. [ 60.662360][ T6030] vxlan0: entered promiscuous mode [ 60.669077][ T3672] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.678901][ T3672] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.688850][ T3672] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.698128][ T3672] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.726160][ T6041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.727741][ T6040] IPVS: stopping master sync thread 6041 ... [ 60.799884][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 60.810364][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 60.811526][ T6050] SELinux: failed to load policy [ 60.853109][ T6054] netlink: 332 bytes leftover after parsing attributes in process `syz.4.954'. [ 60.880297][ T6060] loop4: detected capacity change from 0 to 128 [ 60.907376][ T6058] loop3: detected capacity change from 0 to 8192 [ 61.070633][ T6083] loop4: detected capacity change from 0 to 2048 [ 61.098536][ T6083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 61.114093][ T6083] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.126390][ T6083] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.126390][ T6083] [ 61.136131][ T6083] EXT4-fs (loop4): Total free blocks count 0 [ 61.142132][ T6083] EXT4-fs (loop4): Free/Dirty block details [ 61.148141][ T6083] EXT4-fs (loop4): free_blocks=66060288 [ 61.154393][ T6083] EXT4-fs (loop4): dirty_blocks=32 [ 61.159534][ T6083] EXT4-fs (loop4): Block reservation details [ 61.165984][ T6083] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 61.216982][ T3645] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 61.229661][ T3645] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.229661][ T3645] [ 61.530015][ T6137] netlink: 92 bytes leftover after parsing attributes in process `syz.2.990'. [ 61.539063][ T6137] netem: unknown loss type 0 [ 61.543711][ T6137] netem: change failed [ 61.548419][ T3645] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 61.644417][ T6155] atomic_op ffff888119c2f528 conn xmit_atomic 0000000000000000 [ 61.723976][ T6164] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.740452][ T6164] vhci_hcd: invalid port number 129 [ 61.745770][ T6164] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 61.763365][ T6166] IPVS: stopping master sync thread 6169 ... [ 61.833710][ T6178] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1008'. [ 61.899758][ T6187] loop2: detected capacity change from 0 to 512 [ 61.917101][ T6187] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.010196][ T6198] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1013: corrupted inode contents [ 62.023860][ T6198] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #19: comm syz.2.1013: mark_inode_dirty error [ 62.038831][ T6198] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1013: corrupted inode contents [ 62.064405][ T6198] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.1013: mark_inode_dirty error [ 62.122954][ T6198] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.1013: mark inode dirty (error -117) [ 62.139704][ T6206] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 62.152067][ T6205] IPVS: stopping master sync thread 6206 ... [ 62.159261][ T6203] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.167702][ T6198] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 62.177040][ T6203] vhci_hcd: invalid port number 129 [ 62.182278][ T6203] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 62.221922][ T6208] loop5: detected capacity change from 0 to 512 [ 62.248552][ T6210] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.285946][ T6214] loop2: detected capacity change from 0 to 512 [ 62.307401][ T6214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.321864][ T6220] loop1: detected capacity change from 0 to 128 [ 62.339112][ T6214] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.412560][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.422468][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.437916][ T6239] loop3: detected capacity change from 0 to 512 [ 62.444965][ T6235] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.452328][ T6235] vhci_hcd: invalid port number 129 [ 62.457656][ T6235] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 62.489134][ T6239] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.507905][ T6244] netlink: 'syz.1.1034': attribute type 21 has an invalid length. [ 62.518091][ T6244] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 62.525966][ T6244] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1034'. [ 62.622428][ T6246] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1033: corrupted inode contents [ 62.672529][ T6246] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.1033: mark_inode_dirty error [ 62.693414][ T6246] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1033: corrupted inode contents [ 62.712576][ T6246] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.1033: mark_inode_dirty error [ 62.728016][ T6246] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.1033: mark inode dirty (error -117) [ 62.749317][ T6246] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 62.807162][ T6264] loop5: detected capacity change from 0 to 128 [ 62.855215][ T6272] loop1: detected capacity change from 0 to 512 [ 62.875723][ T6272] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.886478][ T6278] loop4: detected capacity change from 0 to 1024 [ 62.893266][ T6278] EXT4-fs: Ignoring removed orlov option [ 63.000997][ T6289] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1053: corrupted inode contents [ 63.020974][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 63.020987][ T29] audit: type=1326 audit(1754259319.121:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.050805][ T29] audit: type=1326 audit(1754259319.121:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.056142][ T6289] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #19: comm syz.1.1053: mark_inode_dirty error [ 63.074971][ T29] audit: type=1326 audit(1754259319.121:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.110395][ T29] audit: type=1326 audit(1754259319.121:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.110874][ T6289] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1053: corrupted inode contents [ 63.133948][ T29] audit: type=1326 audit(1754259319.121:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.204492][ T6306] loop4: detected capacity change from 0 to 2048 [ 63.205733][ T29] audit: type=1326 audit(1754259319.251:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2883eeb69 code=0x7ffc0000 [ 63.211008][ T6289] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.1053: mark_inode_dirty error [ 63.259758][ T6289] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.1053: mark inode dirty (error -117) [ 63.273888][ T6289] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 63.283483][ T6306] loop4: p1 < > p4 [ 63.287877][ T6306] loop4: p4 size 8388608 extends beyond EOD, truncated [ 63.302489][ T29] audit: type=1400 audit(1754259319.401:1573): avc: denied { read write } for pid=6304 comm="syz.4.1050" name="loop4p4" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.326297][ T29] audit: type=1400 audit(1754259319.401:1574): avc: denied { open } for pid=6304 comm="syz.4.1050" path="/dev/loop4p4" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.374376][ T29] audit: type=1400 audit(1754259319.461:1575): avc: denied { read } for pid=6313 comm="syz.4.1052" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.397614][ T29] audit: type=1400 audit(1754259319.461:1576): avc: denied { open } for pid=6313 comm="syz.4.1052" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.421645][ T3357] kernel read not supported for file /vga_arbiter (pid: 3357 comm: kworker/0:2) [ 63.537159][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.558140][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.748130][ T6371] veth0: entered promiscuous mode [ 63.754349][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 63.905623][ T6390] loop5: detected capacity change from 0 to 512 [ 63.915885][ T6390] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 63.933853][ T6390] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.943878][ T6390] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1077: iget: bad i_size value: 38620345925642 [ 63.957326][ T6390] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1077: couldn't read orphan inode 15 (err -117) [ 64.093329][ T6421] loop3: detected capacity change from 0 to 1024 [ 64.399697][ T6476] loop4: detected capacity change from 0 to 512 [ 64.455795][ T6476] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.583882][ T6497] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.1101: corrupted inode contents [ 64.621387][ T6497] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #19: comm syz.4.1101: mark_inode_dirty error [ 64.657395][ T6510] ALSA: seq fatal error: cannot create timer (-22) [ 64.679310][ T6497] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.1101: corrupted inode contents [ 64.741143][ T6497] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.1101: mark_inode_dirty error [ 64.761040][ T6497] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.1101: mark inode dirty (error -117) [ 64.776171][ T6497] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 64.935871][ T6536] loop1: detected capacity change from 0 to 512 [ 64.969560][ T6536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.986836][ T6548] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 65.002123][ T6536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1115: bg 0: block 248: padding at end of block bitmap is not set [ 65.047012][ T6556] random: crng reseeded on system resumption [ 65.065689][ T6536] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1115: Failed to acquire dquot type 1 [ 65.121425][ T6536] EXT4-fs (loop1): 1 truncate cleaned up [ 65.137540][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.144785][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.160120][ T6536] syz.1.1115 (6536) used greatest stack depth: 9280 bytes left [ 65.175677][ T6567] loop4: detected capacity change from 0 to 512 [ 65.239103][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.262934][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.367879][ T6559] vxlan0: left promiscuous mode [ 65.382488][ T6581] pim6reg: entered allmulticast mode [ 65.402805][ T3645] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.411763][ T3645] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.421027][ T6586] pim6reg: left allmulticast mode [ 65.446112][ T3645] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.455195][ T3645] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.493654][ T3645] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.502672][ T3645] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.524266][ T3645] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.533360][ T3645] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.599917][ T6602] loop1: detected capacity change from 0 to 512 [ 65.623800][ T6606] SELinux: Context system_u:object is not valid (left unmapped). [ 65.698640][ T6614] loop1: detected capacity change from 0 to 512 [ 65.750484][ T6614] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.799078][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 65.886334][ T6634] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1151: corrupted inode contents [ 65.899618][ T6634] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #19: comm syz.1.1151: mark_inode_dirty error [ 65.958335][ T6634] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1151: corrupted inode contents [ 65.971594][ T6634] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.1151: mark_inode_dirty error [ 65.985301][ T6634] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.1151: mark inode dirty (error -117) [ 65.998325][ T6634] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 66.213078][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 66.263027][ T6694] loop2: detected capacity change from 0 to 2048 [ 66.293725][ T6701] loop4: detected capacity change from 0 to 128 [ 66.309374][ T6701] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.655245][ T6754] netlink: 256 bytes leftover after parsing attributes in process `wޣ'. [ 66.739383][ T6767] hub 6-0:1.0: USB hub found [ 66.744332][ T6767] hub 6-0:1.0: 8 ports detected [ 66.768973][ T6772] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 66.776887][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1187'. [ 66.814691][ T6777] lo speed is unknown, defaulting to 1000 [ 66.999119][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 67.012305][ T6804] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.111466][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 67.223505][ T6826] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1209'. [ 67.264131][ T6829] loop4: detected capacity change from 0 to 128 [ 67.272722][ T6829] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.327575][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 67.544333][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'. [ 67.574877][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'. [ 67.587970][ T6875] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.624059][ T6875] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.698025][ T6883] netlink: 'syz.5.1237': attribute type 3 has an invalid length. [ 67.723517][ T6887] loop3: detected capacity change from 0 to 512 [ 67.765890][ T6887] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.814898][ T6870] loop2: detected capacity change from 0 to 32768 [ 67.863850][ T6870] loop2: p1 p3 < > [ 67.881086][ T6902] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1238: corrupted inode contents [ 67.914335][ T6902] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.1238: mark_inode_dirty error [ 67.963527][ T6902] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1238: corrupted inode contents [ 67.966592][ T6910] loop5: detected capacity change from 0 to 512 [ 68.011479][ T6902] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.1238: mark_inode_dirty error [ 68.028600][ T6907] loop1: detected capacity change from 0 to 8192 [ 68.031483][ T6902] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.1238: mark inode dirty (error -117) [ 68.051362][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 68.051410][ T29] audit: type=1400 audit(1754259324.151:1788): avc: denied { name_bind } for pid=6915 comm="syz.2.1250" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.053353][ T6902] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 68.057731][ T29] audit: type=1400 audit(1754259324.151:1789): avc: denied { node_bind } for pid=6915 comm="syz.2.1250" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.109331][ T29] audit: type=1400 audit(1754259324.151:1790): avc: denied { mount } for pid=6905 comm="syz.1.1246" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.142708][ T29] audit: type=1400 audit(1754259324.191:1791): avc: denied { open } for pid=6917 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.147816][ T6910] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.162059][ T29] audit: type=1400 audit(1754259324.191:1792): avc: denied { kernel } for pid=6917 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.224259][ T29] audit: type=1400 audit(1754259324.311:1793): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.244119][ T29] audit: type=1400 audit(1754259324.311:1794): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.348845][ T29] audit: type=1400 audit(1754259324.391:1795): avc: denied { execute } for pid=6925 comm="syz.3.1253" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.375304][ T29] audit: type=1400 audit(1754259324.391:1796): avc: denied { write } for pid=6909 comm="syz.5.1248" path="/67/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.398169][ T29] audit: type=1400 audit(1754259324.391:1797): avc: denied { read write } for pid=6909 comm="syz.5.1248" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.495074][ T6940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.506756][ T6943] syzkaller1: entered promiscuous mode [ 68.512277][ T6943] syzkaller1: entered allmulticast mode [ 68.530049][ T6943] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 68.613739][ T6947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.634829][ T6969] netem: change failed [ 68.802181][ T6993] ip6gre1: entered allmulticast mode [ 69.596762][ T7054] loop2: detected capacity change from 0 to 512 [ 69.666563][ T7054] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.807351][ T3303] EXT4-fs unmount: 57 callbacks suppressed [ 69.807368][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.933317][ T7082] loop3: detected capacity change from 0 to 8192 [ 70.097140][ T7101] loop2: detected capacity change from 0 to 512 [ 70.134666][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.158092][ T7101] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.336213][ T7109] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1326: corrupted inode contents [ 70.363999][ T7109] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #19: comm syz.2.1326: mark_inode_dirty error [ 70.386784][ T7109] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1326: corrupted inode contents [ 70.411486][ T7109] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.1326: mark_inode_dirty error [ 70.427800][ T7109] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.1326: mark inode dirty (error -117) [ 70.442478][ T7109] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 70.476901][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.513047][ T7117] loop3: detected capacity change from 0 to 1024 [ 70.527610][ T7117] EXT4-fs: inline encryption not supported [ 70.558259][ T7117] EXT4-fs: Ignoring removed bh option [ 70.594322][ T7117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.704614][ T7141] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 70.712979][ T7141] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 70.734815][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.790472][ T7148] program syz.2.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.874638][ T7154] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 70.947960][ T7160] loop4: detected capacity change from 0 to 512 [ 70.996003][ T7160] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.022222][ T7160] EXT4-fs (loop4): 1 truncate cleaned up [ 71.028454][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.099329][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.115493][ T7181] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 71.184178][ T7194] loop1: detected capacity change from 0 to 1024 [ 71.191092][ T7194] EXT4-fs: Ignoring removed orlov option [ 71.211000][ T7194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.290331][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.302834][ T7207] SELinux: Context is not valid (left unmapped). [ 71.502359][ T7229] loop1: detected capacity change from 0 to 1024 [ 71.520885][ T7229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.552640][ T7237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7237 comm=syz.5.1384 [ 71.567469][ T7229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.634300][ T7252] loop1: detected capacity change from 0 to 2048 [ 71.644396][ T7252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.786028][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.048153][ T7271] loop4: detected capacity change from 0 to 1024 [ 72.070911][ T7271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.103067][ T7269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.910416][ T7295] __nla_validate_parse: 2 callbacks suppressed [ 72.910434][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 72.926615][ T7293] atomic_op ffff88811d327128 conn xmit_atomic 0000000000000000 [ 72.931683][ T7297] loop3: detected capacity change from 0 to 2048 [ 72.964097][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.973189][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 73.003105][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.011915][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.022247][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.045588][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.177583][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 73.177601][ T29] audit: type=1400 audit(1754259329.281:1962): avc: denied { connect } for pid=7322 comm="syz.2.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.251664][ T29] audit: type=1400 audit(1754259329.321:1963): avc: denied { write } for pid=7321 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.291857][ T29] audit: type=1400 audit(1754259329.391:1964): avc: denied { create } for pid=7326 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.315354][ T29] audit: type=1400 audit(1754259329.391:1965): avc: denied { write } for pid=7326 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.362995][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.390873][ T29] audit: type=1400 audit(1754259329.491:1966): avc: denied { setcheckreqprot } for pid=7332 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.437313][ T7338] SELinux: failed to load policy [ 73.442368][ T29] audit: type=1400 audit(1754259329.541:1967): avc: denied { load_policy } for pid=7337 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.494990][ T29] audit: type=1400 audit(1754259329.601:1968): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.521654][ T7343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7343 comm=syz.1.1422 [ 73.550995][ T7345] veth0: entered promiscuous mode [ 73.558509][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 73.680367][ T7351] loop1: detected capacity change from 0 to 512 [ 73.695961][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.708621][ T7351] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.720845][ T7351] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 73.736052][ T7351] EXT4-fs (loop1): Remounting filesystem read-only [ 73.752248][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.762041][ T3678] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 73.775337][ T3678] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 73.798016][ T29] audit: type=1400 audit(1754259329.901:1969): avc: denied { mount } for pid=7356 comm="syz.1.1428" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.889085][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 74.113329][ T7384] loop5: detected capacity change from 0 to 1024 [ 74.124955][ T7384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.152180][ T5549] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.171906][ T7388] loop2: detected capacity change from 0 to 1024 [ 74.184758][ T7388] EXT4-fs: Ignoring removed orlov option [ 74.193046][ T7388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.480055][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.481525][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 74.498506][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 74.728715][ T7436] loop1: detected capacity change from 0 to 1024 [ 74.744274][ T7436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.769544][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.223629][ T7446] random: crng reseeded on system resumption [ 75.237780][ T7452] loop2: detected capacity change from 0 to 512 [ 75.278957][ T7452] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.295292][ T7452] EXT4-fs (loop2): mount failed [ 75.424479][ T7478] netlink: 'syz.4.1479': attribute type 13 has an invalid length. [ 75.454049][ T7478] gretap0: refused to change device tx_queue_len [ 75.460510][ T7478] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.551348][ T7486] loop1: detected capacity change from 0 to 2048 [ 75.563400][ T7488] netlink: 'syz.4.1484': attribute type 3 has an invalid length. [ 75.574726][ T7484] loop3: detected capacity change from 0 to 8192 [ 75.598390][ T3645] bridge_slave_1: left allmulticast mode [ 75.604159][ T3645] bridge_slave_1: left promiscuous mode [ 75.609987][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.623722][ T3645] bridge_slave_0: left allmulticast mode [ 75.627787][ T7486] loop1: p2 p3 p7 [ 75.629418][ T3645] bridge_slave_0: left promiscuous mode [ 75.639113][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.734998][ T3645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.744838][ T3645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.754927][ T3645] bond0 (unregistering): Released all slaves [ 75.807506][ T7514] loop2: detected capacity change from 0 to 512 [ 75.830279][ T3645] hsr_slave_0: left promiscuous mode [ 75.837836][ T3645] hsr_slave_1: left promiscuous mode [ 75.845778][ T7514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.859126][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.872990][ T7514] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.884053][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.923765][ T7514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 75.976083][ T7514] EXT4-fs (loop2): Remounting filesystem read-only [ 75.992052][ T3645] team0 (unregistering): Port device team_slave_1 removed [ 76.026094][ T3645] team0 (unregistering): Port device team_slave_0 removed [ 76.048953][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.117326][ T7491] lo speed is unknown, defaulting to 1000 [ 76.182867][ T7533] random: crng reseeded on system resumption [ 76.190302][ T7531] loop3: detected capacity change from 0 to 2048 [ 76.244511][ T7491] chnl_net:caif_netlink_parms(): no params data found [ 76.257891][ T7531] loop3: p2 p3 p7 [ 76.324793][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.332120][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.352944][ T7491] bridge_slave_0: entered allmulticast mode [ 76.359544][ T7491] bridge_slave_0: entered promiscuous mode [ 76.381503][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.389707][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.398735][ T7491] bridge_slave_1: entered allmulticast mode [ 76.406484][ T7491] bridge_slave_1: entered promiscuous mode [ 76.435318][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.446674][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.474649][ T7491] team0: Port device team_slave_0 added [ 76.481428][ T7491] team0: Port device team_slave_1 added [ 76.497775][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.504783][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.530903][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.542314][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.549361][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.575482][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.605097][ T7557] loop3: detected capacity change from 0 to 512 [ 76.619959][ T7491] hsr_slave_0: entered promiscuous mode [ 76.627152][ T7491] hsr_slave_1: entered promiscuous mode [ 76.634807][ T7491] debugfs: 'hsr0' already exists in 'hsr' [ 76.640588][ T7491] Cannot create hsr debugfs directory [ 76.648654][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.658754][ T7559] loop4: detected capacity change from 0 to 8192 [ 76.661716][ T7557] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.695363][ T7557] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 76.714853][ T7557] EXT4-fs (loop3): Remounting filesystem read-only [ 76.776817][ T7491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.795389][ T7491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.806250][ T7491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.813817][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.824854][ T7491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.008384][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.024226][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.031240][ T7581] loop3: detected capacity change from 0 to 512 [ 77.039865][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.046998][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.056004][ T7581] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.063506][ T7581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1515: bg 0: block 248: padding at end of block bitmap is not set [ 77.063777][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.079798][ T7581] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1515: Failed to acquire dquot type 1 [ 77.084926][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.098239][ T7581] EXT4-fs (loop3): 1 truncate cleaned up [ 77.109925][ T7581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.159139][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.197159][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.326920][ T7491] veth0_vlan: entered promiscuous mode [ 77.335688][ T7491] veth1_vlan: entered promiscuous mode [ 77.352897][ T7491] veth0_macvtap: entered promiscuous mode [ 77.360696][ T7491] veth1_macvtap: entered promiscuous mode [ 77.374118][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.386889][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.401364][ T3657] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.410475][ T3657] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422308][ T3657] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446451][ T3657] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.483772][ T7600] loop2: detected capacity change from 0 to 2048 [ 77.539180][ T7600] loop2: p2 p3 p7 [ 77.926934][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'. [ 78.184300][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 78.184328][ T29] audit: type=1400 audit(1754259334.291:2052): avc: denied { setcurrent } for pid=7670 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.241962][ T29] audit: type=1400 audit(1754259334.291:2053): avc: denied { create } for pid=7671 comm="syz.1.1544" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.262848][ T29] audit: type=1400 audit(1754259334.291:2054): avc: denied { write } for pid=7671 comm="syz.1.1544" name="file0" dev="tmpfs" ino=1694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.285467][ T29] audit: type=1400 audit(1754259334.291:2055): avc: denied { open } for pid=7671 comm="syz.1.1544" path="/324/file0" dev="tmpfs" ino=1694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.308477][ T29] audit: type=1401 audit(1754259334.321:2056): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 78.325667][ T29] audit: type=1400 audit(1754259334.321:2057): avc: denied { ioctl } for pid=7671 comm="syz.1.1544" path="/324/file0" dev="tmpfs" ino=1694 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.350196][ T29] audit: type=1400 audit(1754259334.341:2058): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=1694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.373397][ T29] audit: type=1326 audit(1754259334.431:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b23ceb69 code=0x7ffc0000 [ 78.396930][ T29] audit: type=1326 audit(1754259334.431:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b23ceb69 code=0x7ffc0000 [ 78.420869][ T29] audit: type=1326 audit(1754259334.431:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa5b23ceb69 code=0x7ffc0000 [ 78.478979][ T7682] loop4: detected capacity change from 0 to 1024 [ 78.485692][ T7682] EXT4-fs: Ignoring removed orlov option [ 78.506809][ T7682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.538691][ T7687] vhci_hcd: invalid port number 96 [ 78.543918][ T7687] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 78.555513][ T7692] loop2: detected capacity change from 0 to 512 [ 78.577447][ T7692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.591483][ T7692] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.606798][ T7692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.608913][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 78.726929][ T7710] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 78.739064][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.750950][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1562'. [ 78.808531][ T7715] loop4: detected capacity change from 0 to 2048 [ 78.817771][ T7721] loop3: detected capacity change from 0 to 512 [ 78.849366][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.862065][ T7721] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.887882][ T7729] lo speed is unknown, defaulting to 1000 [ 78.901502][ T7715] loop4: p2 p3 p7 [ 79.001538][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.024182][ T7741] netem: change failed [ 79.107248][ T7745] loop4: detected capacity change from 0 to 8192 [ 79.369656][ T7764] hub 6-0:1.0: USB hub found [ 79.383923][ T7764] hub 6-0:1.0: 8 ports detected [ 79.512205][ T7778] loop6: detected capacity change from 0 to 2048 [ 79.536243][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 79.586924][ T7778] loop6: p2 p3 p7 [ 79.646752][ T7784] loop4: detected capacity change from 0 to 1764 [ 79.681489][ T7794] sd 0:0:1:0: device reset [ 79.720065][ T7788] loop6: detected capacity change from 0 to 8192 [ 79.768761][ T7796] loop1: detected capacity change from 0 to 8192 [ 79.869505][ T7806] lo speed is unknown, defaulting to 1000 [ 79.879964][ T7805] netlink: 256 bytes leftover after parsing attributes in process `wޣ'. [ 80.126076][ T7812] hub 6-0:1.0: USB hub found [ 80.130928][ T7812] hub 6-0:1.0: 8 ports detected [ 80.178623][ T7818] loop4: detected capacity change from 0 to 512 [ 80.228853][ T7818] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.291106][ T7820] lo speed is unknown, defaulting to 1000 [ 80.383669][ T3678] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.403076][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 80.440151][ T7830] ref_ctr_offset mismatch. inode: 0x70f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 80.694043][ T7855] lo speed is unknown, defaulting to 1000 [ 80.812110][ T7866] loop3: detected capacity change from 0 to 128 [ 80.832139][ T7866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.917480][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1629'. [ 80.926910][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1629'. [ 80.936223][ T7866] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.990578][ T7881] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1631'. [ 81.011744][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.105742][ T7888] loop1: detected capacity change from 0 to 8192 [ 81.118328][ T7896] hub 6-0:1.0: USB hub found [ 81.123347][ T7896] hub 6-0:1.0: 8 ports detected [ 81.140838][ T7899] loop6: detected capacity change from 0 to 8192 [ 81.207265][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 81.218202][ T7910] bridge_slave_1: left allmulticast mode [ 81.223932][ T7910] bridge_slave_1: left promiscuous mode [ 81.229653][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.238309][ T7910] bridge_slave_0: left allmulticast mode [ 81.244113][ T7910] bridge_slave_0: left promiscuous mode [ 81.249823][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.375741][ T7922] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.403484][ T7922] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.493355][ T7930] loop2: detected capacity change from 0 to 512 [ 81.525699][ T7930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.542956][ T7930] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.590643][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.657763][ T7945] loop2: detected capacity change from 0 to 128 [ 81.687161][ T7945] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.708037][ T7952] loop6: detected capacity change from 0 to 128 [ 81.715196][ T7945] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.734097][ T7952] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.755607][ T7952] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.790014][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.794980][ T7491] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.940348][ T7971] loop3: detected capacity change from 0 to 1024 [ 81.973769][ T7971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.234917][ T7986] loop2: detected capacity change from 0 to 256 [ 82.251988][ T7988] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.286891][ T7971] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 82.336699][ T7990] lo speed is unknown, defaulting to 1000 [ 82.421425][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.509075][ T8008] loop2: detected capacity change from 0 to 128 [ 82.530553][ T8001] loop4: detected capacity change from 0 to 8192 [ 82.814696][ T8019] syzkaller1: entered promiscuous mode [ 82.820345][ T8019] syzkaller1: entered allmulticast mode [ 82.848149][ T8005] loop3: detected capacity change from 0 to 32768 [ 82.861067][ T8022] loop6: detected capacity change from 0 to 512 [ 82.874258][ T8022] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.889798][ T8005] loop3: p1 p3 < > [ 82.890110][ T8022] EXT4-fs (loop6): mount failed [ 83.028795][ T8026] loop2: detected capacity change from 0 to 8192 [ 83.069381][ T8034] ip6gre1: entered allmulticast mode [ 83.202632][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 83.202650][ T29] audit: type=1326 audit(1754259339.301:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe53beb69 code=0x7ffc0000 [ 83.232424][ T29] audit: type=1326 audit(1754259339.301:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe53beb69 code=0x7ffc0000 [ 83.255956][ T29] audit: type=1400 audit(1754259339.301:2342): avc: denied { watch } for pid=8043 comm="syz.2.1705" path="/371" dev="tmpfs" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.328310][ T29] audit: type=1326 audit(1754259339.381:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe53beb69 code=0x7ffc0000 [ 83.352262][ T29] audit: type=1326 audit(1754259339.381:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe53beb69 code=0x7ffc0000 [ 83.375818][ T29] audit: type=1326 audit(1754259339.381:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe53beb69 code=0x7ffc0000 [ 83.399315][ T29] audit: type=1400 audit(1754259339.411:2346): avc: denied { connect } for pid=8050 comm="syz.2.1708" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.420344][ T29] audit: type=1400 audit(1754259339.411:2347): avc: denied { write } for pid=8050 comm="syz.2.1708" path="socket:[17932]" dev="sockfs" ino=17932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.574671][ T29] audit: type=1400 audit(1754259339.661:2348): avc: denied { compute_member } for pid=8070 comm="syz.1.1717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.596735][ T8073] syzkaller1: entered promiscuous mode [ 83.602351][ T8073] syzkaller1: entered allmulticast mode [ 83.657087][ T8057] loop6: detected capacity change from 0 to 32768 [ 83.668091][ T29] audit: type=1400 audit(1754259339.771:2349): avc: denied { create } for pid=8081 comm="syz.2.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.713829][ T8057] loop6: p1 p3 < > [ 83.752096][ T8088] loop2: detected capacity change from 0 to 8192 [ 84.104459][ T8140] loop3: detected capacity change from 0 to 764 [ 84.113005][ T8137] loop4: detected capacity change from 0 to 1024 [ 84.120114][ T8137] EXT4-fs: Ignoring removed oldalloc option [ 84.126092][ T8137] EXT4-fs: Ignoring removed bh option [ 84.134942][ T8140] Symlink component flag not implemented [ 84.141210][ T8140] Symlink component flag not implemented (7) [ 84.156065][ T8137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.229153][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.264829][ T8152] SELinux: policydb version 280 does not match my version range 15-35 [ 84.278000][ T8152] SELinux: failed to load policy [ 84.351947][ T8165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.420397][ T8176] loop1: detected capacity change from 0 to 512 [ 84.466503][ T8176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.507902][ T8176] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.540080][ T8176] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1763: bg 0: block 64: padding at end of block bitmap is not set [ 84.617729][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.727246][ T8214] loop3: detected capacity change from 0 to 512 [ 84.737615][ T8214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.767896][ T8217] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1773'. [ 84.833251][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.900999][ T8232] loop4: detected capacity change from 0 to 512 [ 84.918392][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.931131][ T8240] bridge1: entered promiscuous mode [ 84.961643][ T8232] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.983339][ T8232] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1787: corrupted inode contents [ 84.998681][ T8247] loop1: detected capacity change from 0 to 512 [ 85.007004][ T8232] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1787: mark_inode_dirty error [ 85.024291][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1796'. [ 85.034048][ T8232] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1787: corrupted inode contents [ 85.055531][ T8247] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 85.068534][ T8250] SELinux: failed to load policy [ 85.073691][ T8256] loop6: detected capacity change from 0 to 164 [ 85.080372][ T8247] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.104560][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.113871][ T8256] rock: directory entry would overflow storage [ 85.120091][ T8256] rock: sig=0x66, size=4, remaining=3 [ 85.166061][ T8247] FAT-fs (loop1): FAT read failed (blocknr 128) [ 85.177254][ T8256] rock: directory entry would overflow storage [ 85.183506][ T8256] rock: sig=0x66, size=4, remaining=3 [ 85.212857][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1802'. [ 85.230327][ T8266] SELinux: Context :syz0:M:18446744073709551614:{ jᴒw@+K2 -~(D@(L eD0XVlw{IڏF &t}AE$zוEUsp%KW=Q#HԩsFUg`"0q HID v0.00 Device [sy] on syz0 [ 88.376773][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.404093][ T8574] loop1: detected capacity change from 0 to 512 [ 88.411235][ T8574] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 88.416065][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1940'. [ 88.422156][ T8574] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.436494][ T3678] bond0 (unregistering): Released all slaves [ 88.436854][ T8574] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 88.462305][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 88.472148][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 88.480905][ T8574] EXT4-fs (loop1): 1 truncate cleaned up [ 88.496280][ T8574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.515837][ T3678] tipc: Disabling bearer [ 88.520882][ T3678] tipc: Left network mode [ 88.521763][ T29] audit: type=1400 audit(1754259344.621:2516): avc: denied { setopt } for pid=8579 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.572802][ T3678] hsr_slave_0: left promiscuous mode [ 88.578625][ T3678] hsr_slave_1: left promiscuous mode [ 88.584555][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.584741][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.592008][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.609237][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.616678][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.624125][ T8587] loop4: detected capacity change from 0 to 128 [ 88.634678][ T3678] veth0_macvtap: left promiscuous mode [ 88.636983][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888120ed7400: rx timeout, send abort [ 88.640379][ T3678] veth1_vlan: left promiscuous mode [ 88.648603][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888120ed6a00: rx timeout, send abort [ 88.648706][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888120ed7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.676595][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888120ed6a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.678055][ T3678] veth0_vlan: left promiscuous mode [ 88.698270][ T8587] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 88.706501][ T8587] FAT-fs (loop4): Filesystem has been set read-only [ 88.716849][ T8589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8589 comm=syz.1.1943 [ 88.729376][ T8589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8589 comm=syz.1.1943 [ 88.739531][ T8587] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 88.775091][ T8587] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 88.859816][ T3678] team0 (unregistering): Port device team_slave_1 removed [ 88.870466][ T3678] team0 (unregistering): Port device C removed [ 88.934592][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.941773][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.956550][ T8542] bridge_slave_0: entered allmulticast mode [ 88.963227][ T8542] bridge_slave_0: entered promiscuous mode [ 88.969210][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 88.978205][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1955'. [ 88.988081][ T8606] lo speed is unknown, defaulting to 1000 [ 88.988464][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.001024][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.008761][ T8542] bridge_slave_1: entered allmulticast mode [ 89.015770][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 89.025058][ T8542] bridge_slave_1: entered promiscuous mode [ 89.057569][ T8614] loop2: detected capacity change from 0 to 1024 [ 89.090558][ T8614] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.101655][ T8614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.112307][ T8614] JBD2: no valid journal superblock found [ 89.118144][ T8614] EXT4-fs (loop2): Could not load journal inode [ 89.135241][ T8614] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 89.137707][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.187539][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.193886][ T29] audit: type=1400 audit(1754259345.291:2517): avc: denied { name_bind } for pid=8622 comm="syz.2.1960" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.256123][ T8542] team0: Port device team_slave_0 added [ 89.289750][ T8542] team0: Port device team_slave_1 added [ 89.336612][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.343660][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.362279][ T8638] loop4: detected capacity change from 0 to 512 [ 89.369772][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.397930][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.402718][ T29] audit: type=1400 audit(1754259345.491:2518): avc: denied { relabelfrom } for pid=8635 comm="syz.6.1965" name="" dev="pipefs" ino=20146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.404979][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.453471][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.476663][ T8638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.489503][ T8638] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.511154][ T8542] hsr_slave_0: entered promiscuous mode [ 89.517394][ T8542] hsr_slave_1: entered promiscuous mode [ 89.523455][ T8542] debugfs: 'hsr0' already exists in 'hsr' [ 89.529204][ T8542] Cannot create hsr debugfs directory [ 89.583531][ T29] audit: type=1400 audit(1754259345.691:2519): avc: denied { setattr } for pid=8637 comm="syz.4.1966" path="/398/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.614824][ T8638] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 89.631698][ T8638] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 89.644056][ T8638] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.644056][ T8638] [ 89.653733][ T8638] EXT4-fs (loop4): Total free blocks count 0 [ 89.659737][ T8638] EXT4-fs (loop4): Free/Dirty block details [ 89.665683][ T8638] EXT4-fs (loop4): free_blocks=65280 [ 89.671011][ T8638] EXT4-fs (loop4): dirty_blocks=33 [ 89.676173][ T8638] EXT4-fs (loop4): Block reservation details [ 89.682239][ T8638] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 89.691109][ T29] audit: type=1326 audit(1754259345.791:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.6.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7ad1eb69 code=0x7ffc0000 [ 89.716905][ T8542] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 89.730388][ T8542] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 89.739189][ T29] audit: type=1326 audit(1754259345.791:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.6.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7ad1eb69 code=0x7ffc0000 [ 89.762857][ T29] audit: type=1326 audit(1754259345.791:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.6.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f0f7ad1eb69 code=0x7ffc0000 [ 89.763524][ T8542] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 89.786186][ T29] audit: type=1326 audit(1754259345.791:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.6.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7ad1eb69 code=0x7ffc0000 [ 89.826753][ T8662] loop6: detected capacity change from 0 to 1024 [ 89.834971][ T8662] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.848281][ T8542] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 89.855463][ T8662] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 89.863707][ T8662] EXT4-fs (loop6): orphan cleanup on readonly fs [ 89.875476][ T8662] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1975: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.890819][ T8662] EXT4-fs (loop6): 1 orphan inode deleted [ 89.938824][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.969318][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.985417][ T8681] loop6: detected capacity change from 0 to 128 [ 89.985910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.998795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.010362][ T8681] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 90.018333][ T8681] FAT-fs (loop6): Filesystem has been set read-only [ 90.022742][ T8542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.033057][ T8681] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 90.035447][ T8542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.043137][ T8681] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 90.060698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.068515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.117028][ T8690] Buffer I/O error on dev loop6, logical block 2065, async page read [ 90.125603][ T8690] Buffer I/O error on dev loop6, logical block 2066, async page read [ 90.148444][ T8690] Buffer I/O error on dev loop6, logical block 2067, async page read [ 90.158300][ T8690] Buffer I/O error on dev loop6, logical block 2068, async page read [ 90.163196][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.175926][ T8690] Buffer I/O error on dev loop6, logical block 2069, async page read [ 90.193746][ T8690] Buffer I/O error on dev loop6, logical block 2070, async page read [ 90.210033][ T8700] capability: warning: `syz.2.1987' uses deprecated v2 capabilities in a way that may be insecure [ 90.211521][ T8690] Buffer I/O error on dev loop6, logical block 2071, async page read [ 90.238301][ T8690] Buffer I/O error on dev loop6, logical block 2072, async page read [ 90.256288][ T8690] Buffer I/O error on dev loop6, logical block 2065, async page read [ 90.282736][ T8690] Buffer I/O error on dev loop6, logical block 2066, async page read [ 90.391978][ T8542] veth0_vlan: entered promiscuous mode [ 90.399900][ T8542] veth1_vlan: entered promiscuous mode [ 90.430484][ T8542] veth0_macvtap: entered promiscuous mode [ 90.444050][ T8542] veth1_macvtap: entered promiscuous mode [ 90.467975][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.485860][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.506832][ T3657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517889][ T3657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.527069][ T8681] bio_check_eod: 29624 callbacks suppressed [ 90.527084][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.527084][ T8681] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 90.554301][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.554301][ T8681] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 90.568438][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.568438][ T8681] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 90.581933][ T3657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.602007][ T3657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.612475][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.612475][ T8681] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 90.626811][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.626811][ T8681] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 90.791367][ T8731] loop7: detected capacity change from 0 to 128 [ 90.812940][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.812940][ T8681] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 90.843034][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.843034][ T8681] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 90.859301][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.859301][ T8681] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 90.935765][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.935765][ T8681] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 90.963295][ T8681] syz.6.1981: attempt to access beyond end of device [ 90.963295][ T8681] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 90.997978][ T8740] loop7: detected capacity change from 0 to 512 [ 91.069432][ T8740] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.172708][ T8740] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.198951][ T8740] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 91.211409][ T8740] EXT4-fs (loop7): This should not happen!! Data will be lost [ 91.211409][ T8740] [ 91.221125][ T8740] EXT4-fs (loop7): Total free blocks count 0 [ 91.227148][ T8740] EXT4-fs (loop7): Free/Dirty block details [ 91.233582][ T8740] EXT4-fs (loop7): free_blocks=65280 [ 91.238946][ T8740] EXT4-fs (loop7): dirty_blocks=33 [ 91.244470][ T8740] EXT4-fs (loop7): Block reservation details [ 91.245120][ T8754] netlink: 'syz.2.2002': attribute type 3 has an invalid length. [ 91.250533][ T8740] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 91.532009][ T8777] loop6: detected capacity change from 0 to 1024 [ 91.548018][ T8777] EXT4-fs: inline encryption not supported [ 91.554017][ T8777] EXT4-fs: Ignoring removed i_version option [ 91.670551][ T8785] loop2: detected capacity change from 0 to 512 [ 91.725159][ T8785] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.865027][ T8785] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.956906][ T8785] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 91.969418][ T8785] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.969418][ T8785] [ 91.979112][ T8785] EXT4-fs (loop2): Total free blocks count 0 [ 91.987097][ T8785] EXT4-fs (loop2): Free/Dirty block details [ 91.993142][ T8785] EXT4-fs (loop2): free_blocks=65280 [ 91.998644][ T8785] EXT4-fs (loop2): dirty_blocks=33 [ 92.003884][ T8785] EXT4-fs (loop2): Block reservation details [ 92.009948][ T8785] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 92.033342][ T8809] netlink: 'syz.4.2022': attribute type 3 has an invalid length. [ 92.186362][ T8823] __nla_validate_parse: 1 callbacks suppressed [ 92.186380][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2033'. [ 92.362973][ T8833] loop4: detected capacity change from 0 to 512 [ 92.371310][ T8835] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 92.410418][ T8839] loop1: detected capacity change from 0 to 1024 [ 92.418937][ T8833] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.441982][ T8839] EXT4-fs: Ignoring removed orlov option [ 92.736862][ T8852] loop7: detected capacity change from 0 to 512 [ 92.754402][ T8856] loop1: detected capacity change from 0 to 512 [ 92.800488][ T8856] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.820320][ T8856] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 92.837699][ T8852] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.858508][ T8856] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 92.871065][ T8856] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.871065][ T8856] [ 92.880842][ T8856] EXT4-fs (loop1): Total free blocks count 0 [ 92.886886][ T8856] EXT4-fs (loop1): Free/Dirty block details [ 92.892830][ T8856] EXT4-fs (loop1): free_blocks=65280 [ 92.898123][ T8856] EXT4-fs (loop1): dirty_blocks=33 [ 92.903295][ T8856] EXT4-fs (loop1): Block reservation details [ 92.909285][ T8856] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 93.049752][ T8869] bond_slave_1: mtu less than device minimum [ 93.075792][ T8865] loop7: detected capacity change from 0 to 1024 [ 93.105362][ T8865] EXT4-fs: inline encryption not supported [ 93.111298][ T8865] EXT4-fs: Ignoring removed i_version option [ 93.228675][ T8885] loop2: detected capacity change from 0 to 1024 [ 93.271144][ T8885] EXT4-fs: Ignoring removed orlov option [ 93.411404][ T8900] sd 0:0:1:0: device reset [ 93.574629][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 93.574647][ T29] audit: type=1401 audit(1754259349.681:2656): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 93.618478][ T8918] loop2: detected capacity change from 0 to 1024 [ 93.635636][ T8918] EXT4-fs: inline encryption not supported [ 93.641508][ T8918] EXT4-fs: Ignoring removed i_version option [ 93.731492][ T8934] loop1: detected capacity change from 0 to 1764 [ 93.739590][ T8935] sd 0:0:1:0: device reset [ 93.780088][ T8939] loop1: detected capacity change from 0 to 512 [ 93.807757][ T8944] loop6: detected capacity change from 0 to 1024 [ 93.826779][ T29] audit: type=1401 audit(1754259349.921:2657): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 93.858710][ T8944] EXT4-fs: Ignoring removed orlov option [ 93.872016][ T8939] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.882519][ T29] audit: type=1401 audit(1754259349.971:2658): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 94.054685][ T8962] loop1: detected capacity change from 0 to 1024 [ 94.079871][ T8962] EXT4-fs: inline encryption not supported [ 94.085929][ T8962] EXT4-fs: Ignoring removed i_version option [ 94.123592][ T8967] loop7: detected capacity change from 0 to 1764 [ 94.167092][ T8974] bond_slave_1: mtu less than device minimum [ 94.197470][ T8976] sd 0:0:1:0: device reset [ 94.236027][ T29] audit: type=1400 audit(1754259350.341:2659): avc: denied { map } for pid=8980 comm="syz.6.2099" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.238437][ T8982] vhci_hcd: invalid port number 96 [ 94.265455][ T8982] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 94.338526][ T8998] loop6: detected capacity change from 0 to 1764 [ 94.385348][ T9004] loop4: detected capacity change from 0 to 1024 [ 94.398728][ T9004] EXT4-fs: inline encryption not supported [ 94.404679][ T9004] EXT4-fs: Ignoring removed i_version option [ 94.438046][ T9010] loop7: detected capacity change from 0 to 512 [ 94.445682][ T9010] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 94.466852][ T3657] ================================================================== [ 94.474972][ T3657] BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic [ 94.483583][ T3657] [ 94.485908][ T3657] write to 0xffff88813583a05c of 4 bytes by task 9010 on cpu 1: [ 94.493546][ T3657] __fat_write_inode+0x236/0x520 [ 94.498512][ T3657] fat_write_inode+0xbf/0xd0 [ 94.503119][ T3657] __writeback_single_inode+0x319/0x7c0 [ 94.508793][ T3657] writeback_single_inode+0x167/0x3e0 [ 94.514173][ T3657] sync_inode_metadata+0x5b/0x90 [ 94.519146][ T3657] fat_flush_inodes+0x77/0x150 [ 94.523916][ T3657] fat_truncate_blocks+0x4d8/0x550 [ 94.529177][ T3657] fat_write_end+0xba/0x160 [ 94.533688][ T3657] generic_perform_write+0x30f/0x490 [ 94.538992][ T3657] __generic_file_write_iter+0x9e/0x120 [ 94.544558][ T3657] generic_file_write_iter+0x8d/0x2f0 [ 94.549937][ T3657] vfs_write+0x4a0/0x8e0 [ 94.554194][ T3657] ksys_write+0xda/0x1a0 [ 94.558453][ T3657] __x64_sys_write+0x40/0x50 [ 94.563075][ T3657] x64_sys_call+0x27fe/0x2ff0 [ 94.567896][ T3657] do_syscall_64+0xd2/0x200 [ 94.572416][ T3657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.578325][ T3657] [ 94.580655][ T3657] read to 0xffff88813583a000 of 2048 bytes by task 3657 on cpu 0: [ 94.588487][ T3657] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 94.594401][ T3657] generic_perform_write+0x2c2/0x490 [ 94.599702][ T3657] shmem_file_write_iter+0xc5/0xf0 [ 94.604829][ T3657] lo_rw_aio+0x6a0/0x760 [ 94.609096][ T3657] loop_process_work+0x52d/0xa60 [ 94.614079][ T3657] loop_workfn+0x31/0x40 [ 94.618347][ T3657] process_scheduled_works+0x4ce/0x9d0 [ 94.623827][ T3657] worker_thread+0x582/0x770 [ 94.628467][ T3657] kthread+0x489/0x510 [ 94.632561][ T3657] ret_from_fork+0xdd/0x150 [ 94.637084][ T3657] ret_from_fork_asm+0x1a/0x30 [ 94.641883][ T3657] [ 94.644207][ T3657] Reported by Kernel Concurrency Sanitizer on: [ 94.650372][ T3657] CPU: 0 UID: 0 PID: 3657 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 94.662721][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.672787][ T3657] Workqueue: loop7 loop_workfn [ 94.677618][ T3657] ================================================================== [ 94.813101][ T3645] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)