last executing test programs: 1m47.216386233s ago: executing program 1 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x15}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 1m47.069322596s ago: executing program 1 (id=1797): unshare(0x2c020400) r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m47.035572846s ago: executing program 1 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x0) 1m46.991212396s ago: executing program 1 (id=1791): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000380)={[{@min_batch_time}, {@errors_remount}, {@init_itable}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) 1m46.848746069s ago: executing program 1 (id=1796): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r0], 0x30}}, 0x0) 1m46.674221632s ago: executing program 2 (id=1802): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x9, 0x5}}}, 0x24}}, 0x0) 1m46.571182193s ago: executing program 2 (id=1807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 1m46.501065405s ago: executing program 2 (id=1811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) tee(0xffffffffffffffff, r0, 0x200, 0x3) 1m46.476834405s ago: executing program 2 (id=1823): r0 = io_uring_setup(0x3eaf, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000340)=[{&(0x7f0000000480)=""/233}], 0x1) 1m46.441204445s ago: executing program 1 (id=1814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m46.441114845s ago: executing program 32 (id=1814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m46.412257015s ago: executing program 2 (id=1817): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 1m46.396470176s ago: executing program 2 (id=1819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@nouid32}, {@block_validity}, {@nombcache}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0) 1m46.262980718s ago: executing program 3 (id=1820): io_setup(0x2007, &(0x7f0000000200)=0x0) r1 = eventfd2(0x7f, 0x80800) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) 1m46.136738139s ago: executing program 3 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073795932000000000900010073797a30"], 0x2c}}, 0x8004) 1m45.928297223s ago: executing program 3 (id=1827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) setpgid(0x0, 0x0) 1m45.898709253s ago: executing program 3 (id=1828): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000380)={[{@min_batch_time}, {@errors_remount}, {@init_itable}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) 1m45.719987766s ago: executing program 3 (id=1832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x270bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x401, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 1m45.188050604s ago: executing program 3 (id=1849): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m45.148248205s ago: executing program 33 (id=1849): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m31.475921575s ago: executing program 34 (id=1819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@nouid32}, {@block_validity}, {@nombcache}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0) 50.538145594s ago: executing program 7 (id=4152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x4, 0x0) 50.515733634s ago: executing program 7 (id=4154): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 50.460423665s ago: executing program 7 (id=4156): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32, @ANYBLOB='0'], 0x50}, 0x0) 50.443472805s ago: executing program 7 (id=4159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 50.364481336s ago: executing program 7 (id=4161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = getpid() syz_pidfd_open(r1, 0x0) 50.188231359s ago: executing program 7 (id=4173): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000200000003000000020000004d01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) 50.173747269s ago: executing program 35 (id=4173): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000200000003000000020000004d01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) 47.808378566s ago: executing program 4 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000800)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 47.800709555s ago: executing program 4 (id=4247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x1ff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 47.760308856s ago: executing program 4 (id=4248): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x2208017, &(0x7f0000000800), 0x1, 0x520, &(0x7f0000000240)="$eJzs3U9vI2cZAPBnZu1tspviFDiUSrQVLdqs6DpJw7YRh1IkBKdKQDlwQSEk3iiKEy+J026iClLxAZAQAiQu5cQFwQdAQv0ICKkSvSNAIARbOIBUGOTxOGSzduK0jr2Nfz9pdv54Zp7n2cjjeecdewIYW09GxExEZFmWXY+ISrE8LZbFQURraK33zt3XVlpDEln28t+SSIplnX09VIyvtjeJiYj4yhcjvpncH3dnb39juV6vbRfzs83N5N0s27+xvrm8VlurbS0szD+3+PzizcW5gdQ5HREvfP5PP/zez77wwq+fefX3S3+Z+XZeZOFoHT1llTPHbZdezv8vOkoRsX3mPT24SnmFbTdHnAsAACdrndF+OCI+ERHXoxKX8rM5AAAA4CLJPjsV7ybtvj4AAADgYkojYiqStFrc8zsVaVqttu/h/WhcSeuNneanjtz3Oh3l9NZ6vTZX3DswHeWkNf9icY9tZ/7ZY/MLEfFIRPygMpnPV1ca9dWRXvkAAACA8XH1WPv/n5V2+x8AAAC4YKZHnQAAAABw7o63/y+NKA8AAADg/PTs/39j6etfG24qAAAAwOB96aWXWkPWef716it7uxuNV26s1nY2qpu7K9WVxvbt6lqjsZb/Zt/mafurNxq3Px1bu3dmm7Wd5uzO3v7SZmN3q7m0fs8jsAEAAIAheuSJN99OIuLgM5NpRGTJkdfKEdk9XwUoDT8/4PykZ1n5j+eXBzB8vuoH48spPYyv8qgTAEbutONAz5t3fjP4XAAAgPNx7WOH/f/5AIyPov8/Sd7b5r/4Vt+r6mmAB43+fxhfl0edADAy5ZPOAN5jowD44Ej7eKt37f//d5Zlfff/Z9mZEwMAAAZqKh+StFq0A6YizbsEH84fC1BObq3Xa3MR8aGI+F2l/FBrfj7fMnF5AAAAAAAAAAAAAAAAAAAAAAAAAAD6lGVJZD1MHq4DAAAAfJBFpH9Oiud/Xas8PXX8+sDl5F+VKJ4T+upPXv7RneVmc3u+tfzvh8ubPy6WPzvsqxcAAABAN512eqcdDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACD9M7d11Y6wzDj/vVzETHdLX4pJvLxRJQj4so/kigd2S6JiEsDiH/wekQ82i1+0korpvNI98dPI2JyKPEnesa/OoD4MM7ebB1/Xuz2/kvjyXzc/f1XKob3q/fxLz08/l3qcfx7uNsO0/sXPfbWL2d7xn894rFS9+NPK/7lmMhjdYv/VJ81fuOr+/u9Xst+GnGt6+dPck+s2aR0e3Znb//G+ubyWm2ttrWwMP/c4vOLNxfnZm+t12vFv11jfP/jv/rvSfVf6RF/Oh/3rv/pPuv/z1t37n6kPVk+9lI53siymae6//0f7RG/89n3yeLP3Zq/1pk+aE8f9fjPf/v4EyfUv9qj/olT6p/ps/7rX/7uH/pcFQAYgp29/Y3ler22beLCTLTOzR6ANI5MTA4zn+U4aZ3OSewQ8vlOEer8S377mYhB73mEByUAAOBc/P+kf9SZAAAAAAAAAAAAAAAAAAAAwPg67WfAYgA/J3Y85sFoSgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONH/AgAA//+KZdRZ") sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 47.50577709s ago: executing program 4 (id=4252): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 47.475116301s ago: executing program 4 (id=4253): unshare(0x22020600) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_acorn}, {@uid}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x41}}, {@map_acorn}, {@map_normal}, {@overriderock}, {@nojoliet}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000001880)="$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") rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 47.196455305s ago: executing program 4 (id=4261): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000000000061104c000000000005000000000000009500000c000000001d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 47.191612715s ago: executing program 36 (id=4261): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000000000061104c000000000005000000000000009500000c000000001d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.758308493s ago: executing program 8 (id=6248): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x200) sendto$inet(r0, &(0x7f00000002c0)="f0", 0x1, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 1.709581813s ago: executing program 8 (id=6250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.581925355s ago: executing program 8 (id=6255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f00000000c0)) 1.162826732s ago: executing program 0 (id=6271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.091214463s ago: executing program 0 (id=6274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000340)=""/221, 0xdd}]}, &(0x7f0000000040)="ff33501ef663", 0x0, 0x800804, 0x10032, 0x1000, 0x0}) 1.058457753s ago: executing program 0 (id=6276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 993.925514ms ago: executing program 0 (id=6283): io_setup(0x4, &(0x7f0000000280)=0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[0x0]) 879.810227ms ago: executing program 0 (id=6285): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 879.279847ms ago: executing program 0 (id=6287): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 676.44477ms ago: executing program 8 (id=6297): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) 643.79496ms ago: executing program 9 (id=6299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 629.83985ms ago: executing program 8 (id=6300): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) 610.07939ms ago: executing program 9 (id=6301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 602.77494ms ago: executing program 8 (id=6302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_usb_connect(0x5, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x55, 0x8c, 0xa1, 0x8, 0x1235, 0xa, 0x3608, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x20, 0x7, [{{0x9, 0x4, 0xb1, 0x3, 0x0, 0xf5, 0x77, 0xe7, 0x2}}]}}]}}, 0x0) 602.615351ms ago: executing program 6 (id=6303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 600.345701ms ago: executing program 5 (id=6304): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) 534.111601ms ago: executing program 6 (id=6305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x5b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x3, 0x9, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0xc, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0x2, 0x4, 0x6, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x120, 0x80, "316f748a6d2d020d1c0dda27a9bca207141b9a451c00aa1271df019aeb512657849383b4"}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 528.370102ms ago: executing program 9 (id=6306): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x0, 0x4) 527.914882ms ago: executing program 5 (id=6307): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 445.453803ms ago: executing program 5 (id=6308): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 436.082283ms ago: executing program 6 (id=6309): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 419.687344ms ago: executing program 9 (id=6310): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000980)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@i_version}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) creat(&(0x7f0000000ec0)='./file0\x00', 0x18) 352.558574ms ago: executing program 6 (id=6311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000005, 0xa5d4}, 0x5df8, 0x5, 0x0, 0x1, 0x7, 0x20002, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x40) 352.093365ms ago: executing program 5 (id=6312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 288.489375ms ago: executing program 5 (id=6313): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x80000d}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 287.238935ms ago: executing program 9 (id=6314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 281.892535ms ago: executing program 6 (id=6315): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 619.96µs ago: executing program 6 (id=6316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 490.11µs ago: executing program 9 (id=6317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8 [ 140.738026][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4650'. [ 140.826079][T13959] loop0: detected capacity change from 0 to 512 [ 140.833137][T13959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.847494][T13959] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 140.863783][T13959] EXT4-fs (loop0): 1 truncate cleaned up [ 140.869970][T13959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.904234][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.956508][T13974] netlink: 'syz.5.4662': attribute type 2 has an invalid length. [ 140.974503][T13977] loop9: detected capacity change from 0 to 512 [ 141.001829][T13977] EXT4-fs warning (device loop9): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 141.016382][T13977] EXT4-fs (loop9): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 141.269505][T14005] loop8: detected capacity change from 0 to 512 [ 141.276014][T14007] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 141.277678][T14005] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.4675: casefold flag without casefold feature [ 141.299261][T14005] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.4675: couldn't read orphan inode 15 (err -117) [ 141.312351][T14005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.346812][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.365541][T14015] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.989817][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4694'. [ 142.080266][T14063] tipc: Started in network mode [ 142.080372][T14063] tipc: Node identity ac14140f, cluster identity 4711 [ 142.080467][T14063] tipc: New replicast peer: 255.255.255.255 [ 142.080534][T14063] tipc: Enabled bearer , priority 10 [ 142.416974][T14106] loop5: detected capacity change from 0 to 512 [ 142.434022][T14101] loop8: detected capacity change from 0 to 8192 [ 142.442132][T14106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.455522][T14106] ext4 filesystem being mounted at /635/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.476231][T14101] loop8: p2 p3 p4 [ 142.480030][T14101] loop8: p2 size 130943 extends beyond EOD, truncated [ 142.493078][T14101] loop8: p3 size 16776960 extends beyond EOD, truncated [ 142.497803][ T7430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.502619][T14101] loop8: p4 size 3599499392 extends beyond EOD, truncated [ 142.573170][T14120] openvswitch: netlink: Message has 6 unknown bytes. [ 142.697469][T14144] loop8: detected capacity change from 0 to 512 [ 142.716708][T14144] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 142.729433][T14149] netlink: 'syz.5.4742': attribute type 1 has an invalid length. [ 142.740260][T14144] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 142.771136][T14144] EXT4-fs (loop8): 1 truncate cleaned up [ 142.777617][T14144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.806234][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.859648][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.970488][T14183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.979465][T14183] bridge0: port 3(bond1) entered blocking state [ 142.986058][T14183] bridge0: port 3(bond1) entered disabled state [ 142.992843][T14183] bond1: entered allmulticast mode [ 143.001328][T14183] bond1: entered promiscuous mode [ 143.006790][T14183] bridge0: port 3(bond1) entered blocking state [ 143.013198][T14183] bridge0: port 3(bond1) entered forwarding state [ 143.129862][T14210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.224383][ T36] tipc: Node number set to 2886997007 [ 143.285410][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 143.285429][ T29] audit: type=1400 audit(1751986184.267:2139): avc: denied { checkpoint_restore } for pid=14225 comm="syz.0.4776" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.333608][T14229] loop5: detected capacity change from 0 to 256 [ 143.341727][ T37] bridge0: port 3(bond1) entered disabled state [ 143.372798][ T29] audit: type=1400 audit(1751986184.347:2140): avc: denied { create } for pid=14230 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 143.392486][ T29] audit: type=1400 audit(1751986184.347:2141): avc: denied { ioctl } for pid=14230 comm="syz.6.4780" path="socket:[39536]" dev="sockfs" ino=39536 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 143.420139][T14239] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 143.429719][ T29] audit: type=1400 audit(1751986184.397:2142): avc: denied { relabelfrom } for pid=14238 comm="syz.6.4783" name="UNIX" dev="sockfs" ino=39552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 143.453707][ T29] audit: type=1400 audit(1751986184.407:2143): avc: denied { relabelto } for pid=14238 comm="syz.6.4783" name="UNIX" dev="sockfs" ino=39552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:su_exec_t:s0" [ 143.491906][T14229] FAT-fs (loop5): Directory bread(block 64) failed [ 143.499100][T14229] FAT-fs (loop5): Directory bread(block 65) failed [ 143.506176][T14229] FAT-fs (loop5): Directory bread(block 66) failed [ 143.512737][T14229] FAT-fs (loop5): Directory bread(block 67) failed [ 143.529773][T14243] loop8: detected capacity change from 0 to 512 [ 143.531522][T14229] FAT-fs (loop5): Directory bread(block 68) failed [ 143.543120][T14229] FAT-fs (loop5): Directory bread(block 69) failed [ 143.555661][T14229] FAT-fs (loop5): Directory bread(block 70) failed [ 143.562440][T14229] FAT-fs (loop5): Directory bread(block 71) failed [ 143.569787][T14243] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 143.589117][T14229] FAT-fs (loop5): Directory bread(block 72) failed [ 143.596247][T14247] loop9: detected capacity change from 0 to 512 [ 143.602909][T14247] EXT4-fs: Ignoring removed nobh option [ 143.618896][T14229] FAT-fs (loop5): Directory bread(block 73) failed [ 143.628677][T14243] EXT4-fs (loop8): 1 truncate cleaned up [ 143.634985][T14243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.648544][T14247] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 143.667286][T14257] loop0: detected capacity change from 0 to 512 [ 143.671585][T14255] tipc: Started in network mode [ 143.675310][T14229] bio_check_eod: 11521 callbacks suppressed [ 143.675329][T14229] syz.5.4777: attempt to access beyond end of device [ 143.675329][T14229] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 143.678538][T14255] tipc: Node identity ac14140f, cluster identity 4711 [ 143.684564][T14229] syz.5.4777: attempt to access beyond end of device [ 143.684564][T14229] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 143.706225][T14247] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4786: invalid indirect mapped block 2683928664 (level 1) [ 143.734728][T14257] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.741310][T14257] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.4790: bad orphan inode 13 [ 143.742972][T14255] tipc: New replicast peer: 255.255.255.255 [ 143.754611][T14247] EXT4-fs (loop9): 1 truncate cleaned up [ 143.757418][T14255] tipc: Enabled bearer , priority 10 [ 143.764281][T14247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.793258][T14257] ext4_test_bit(bit=12, block=18) = 1 [ 143.798885][T14257] is_bad_inode(inode)=0 [ 143.803295][T14257] NEXT_ORPHAN(inode)=2130706432 [ 143.808168][T14257] max_ino=32 [ 143.811385][T14257] i_nlink=1 [ 143.824659][T14247] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4786: invalid indirect mapped block 65536 (level 1) [ 143.839307][T14257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.857194][T14247] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4786: invalid indirect mapped block 480848489 (level 1) [ 143.871541][T14257] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 143.883098][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.893972][T14257] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 143.908146][T14257] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 143.938799][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.942664][T14271] loop5: detected capacity change from 0 to 512 [ 143.948787][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.966426][T14271] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.996589][T14272] bond1: entered promiscuous mode [ 144.001697][T14272] bond1: entered allmulticast mode [ 144.001815][T14276] loop9: detected capacity change from 0 to 1024 [ 144.007240][T14272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.023029][T14276] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.035844][T14271] EXT4-fs (loop5): 1 truncate cleaned up [ 144.036230][T14272] bond1 (unregistering): Released all slaves [ 144.042052][T14271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.062715][T14276] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 144.081000][T14276] EXT4-fs (loop9): orphan cleanup on readonly fs [ 144.100375][T14276] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.4795: Invalid inode table block 0 in block_group 0 [ 144.117682][T14276] EXT4-fs (loop9): Remounting filesystem read-only [ 144.124294][T14276] Quota error (device loop9): write_blk: dquota write failed [ 144.131796][T14276] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 144.158183][T14276] EXT4-fs (loop9): 1 truncate cleaned up [ 144.164747][T14276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.195377][ T29] audit: type=1326 audit(1751986185.157:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 144.195643][ T7430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.218979][ T29] audit: type=1326 audit(1751986185.157:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 144.251491][ T29] audit: type=1326 audit(1751986185.157:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 144.286966][T14297] loop8: detected capacity change from 0 to 512 [ 144.295385][T14276] EXT4-fs (loop9): shut down requested (1) [ 144.302175][T14297] EXT4-fs: Ignoring removed nobh option [ 144.325337][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.339704][T14297] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 144.362492][T14303] loop5: detected capacity change from 0 to 1024 [ 144.392228][T14297] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4807: invalid indirect mapped block 2683928664 (level 1) [ 144.408591][T14303] EXT4-fs: Ignoring removed oldalloc option [ 144.414627][T14303] EXT4-fs: Ignoring removed orlov option [ 144.416918][T14297] EXT4-fs (loop8): 1 truncate cleaned up [ 144.435766][T14303] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.436066][T14297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.475574][T14313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14313 comm=syz.6.4813 [ 144.510008][T14297] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4807: invalid indirect mapped block 65536 (level 1) [ 144.529460][T14317] loop0: detected capacity change from 0 to 128 [ 144.537279][T14303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.550184][T14297] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4807: invalid indirect mapped block 480848489 (level 1) [ 144.557882][T14303] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.4806: Allocating blocks 481-513 which overlap fs metadata [ 144.578977][T14317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 144.596330][T14317] System zones: 1-3, 19-19, 35-36 [ 144.605135][T14317] ext4 filesystem being mounted at /1031/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.622822][T14317] EXT4-fs warning (device loop0): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 144.638435][T14317] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 144.639420][T14322] bond1: entered promiscuous mode [ 144.654199][T14322] bond1: entered allmulticast mode [ 144.675748][T14322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.697106][T14322] bond1 (unregistering): Released all slaves [ 144.753184][ T36] tipc: Node number set to 2886997007 [ 144.859684][T14346] ip6gretap1: entered promiscuous mode [ 144.865266][T14346] ip6gretap1: entered allmulticast mode [ 144.980593][T14367] loop9: detected capacity change from 0 to 256 [ 145.029696][T14371] xt_CT: No such helper "snmp_trap" [ 145.069177][T14375] netlink: 'syz.6.4839': attribute type 25 has an invalid length. [ 145.110676][T14383] loop9: detected capacity change from 0 to 256 [ 145.119046][T14384] loop6: detected capacity change from 0 to 1024 [ 145.124406][T14383] FAT-fs (loop9): Directory bread(block 64) failed [ 145.132050][T14383] FAT-fs (loop9): Directory bread(block 65) failed [ 145.138733][T14383] FAT-fs (loop9): Directory bread(block 66) failed [ 145.145576][T14383] FAT-fs (loop9): Directory bread(block 67) failed [ 145.152172][T14383] FAT-fs (loop9): Directory bread(block 68) failed [ 145.158754][T14383] FAT-fs (loop9): Directory bread(block 69) failed [ 145.165382][T14383] FAT-fs (loop9): Directory bread(block 70) failed [ 145.172005][T14383] FAT-fs (loop9): Directory bread(block 71) failed [ 145.178690][T14383] FAT-fs (loop9): Directory bread(block 72) failed [ 145.185271][T14383] FAT-fs (loop9): Directory bread(block 73) failed [ 145.246530][T14395] loop0: detected capacity change from 0 to 764 [ 145.299278][T14404] loop5: detected capacity change from 0 to 1024 [ 145.312266][T14404] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 145.325787][T14410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.330140][T14404] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.353624][T14404] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 145.363795][T14404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.374197][T14404] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.4850: Inode bitmap for bg 0 marked uninitialized [ 145.432657][T14422] loop6: detected capacity change from 0 to 1024 [ 145.823926][T14457] Falling back ldisc for ttyS3. [ 145.901420][T14462] loop8: detected capacity change from 0 to 512 [ 145.908541][T14462] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 145.938234][T14462] EXT4-fs (loop8): 1 truncate cleaned up [ 146.001639][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.032004][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 146.044274][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 146.044274][ T12] [ 146.053967][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 146.060047][ T12] EXT4-fs (loop6): Free/Dirty block details [ 146.066014][ T12] EXT4-fs (loop6): free_blocks=68451041280 [ 146.071866][ T12] EXT4-fs (loop6): dirty_blocks=16416 [ 146.077435][ T12] EXT4-fs (loop6): Block reservation details [ 146.083474][ T12] EXT4-fs (loop6): i_reserved_data_blocks=1026 [ 146.149735][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 146.162403][ T37] EXT4-fs (loop6): This should not happen!! Data will be lost [ 146.162403][ T37] [ 146.264195][T14494] loop0: detected capacity change from 0 to 256 [ 146.300521][T14494] FAT-fs (loop0): Directory bread(block 64) failed [ 146.332803][T14494] FAT-fs (loop0): Directory bread(block 65) failed [ 146.342213][T14494] FAT-fs (loop0): Directory bread(block 66) failed [ 146.350203][T14494] FAT-fs (loop0): Directory bread(block 67) failed [ 146.358741][T14494] FAT-fs (loop0): Directory bread(block 68) failed [ 146.368808][T14494] FAT-fs (loop0): Directory bread(block 69) failed [ 146.376393][T14494] FAT-fs (loop0): Directory bread(block 70) failed [ 146.384471][T14494] FAT-fs (loop0): Directory bread(block 71) failed [ 146.391657][T14494] FAT-fs (loop0): Directory bread(block 72) failed [ 146.399203][T14494] FAT-fs (loop0): Directory bread(block 73) failed [ 146.436289][T14494] syz.0.4890: attempt to access beyond end of device [ 146.436289][T14494] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 146.451968][T14494] syz.0.4890: attempt to access beyond end of device [ 146.451968][T14494] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 146.499274][T14504] loop5: detected capacity change from 0 to 8192 [ 146.533047][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.554442][T14504] loop5: p2 p3 p4 [ 146.558263][T14504] loop5: p2 size 130943 extends beyond EOD, truncated [ 146.565639][T14504] loop5: p3 size 16776960 extends beyond EOD, truncated [ 146.573499][T14504] loop5: p4 size 3599499392 extends beyond EOD, truncated [ 146.638998][T14525] loop6: detected capacity change from 0 to 256 [ 146.650106][T14524] bridge0: port 4(gretap0) entered blocking state [ 146.656773][T14524] bridge0: port 4(gretap0) entered disabled state [ 146.667083][T14524] gretap0: entered allmulticast mode [ 146.674599][T14524] gretap0: entered promiscuous mode [ 146.680196][T14524] bridge0: port 4(gretap0) entered blocking state [ 146.686796][T14524] bridge0: port 4(gretap0) entered forwarding state [ 146.701813][T14525] FAT-fs (loop6): Directory bread(block 64) failed [ 146.708501][T14525] FAT-fs (loop6): Directory bread(block 65) failed [ 146.716761][T14525] FAT-fs (loop6): Directory bread(block 66) failed [ 146.723436][T14525] FAT-fs (loop6): Directory bread(block 67) failed [ 146.730261][T14525] FAT-fs (loop6): Directory bread(block 68) failed [ 146.739131][T14525] FAT-fs (loop6): Directory bread(block 69) failed [ 146.746001][T14525] FAT-fs (loop6): Directory bread(block 70) failed [ 146.752620][T14525] FAT-fs (loop6): Directory bread(block 71) failed [ 146.770871][T14525] FAT-fs (loop6): Directory bread(block 72) failed [ 146.779602][T14525] FAT-fs (loop6): Directory bread(block 73) failed [ 146.793495][T14537] __nla_validate_parse: 6 callbacks suppressed [ 146.793510][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4911'. [ 147.224640][T14559] loop8: detected capacity change from 0 to 128 [ 147.247109][T14561] loop0: detected capacity change from 0 to 512 [ 147.266708][T14559] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.347414][T14561] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.4920: iget: bogus i_mode (0) [ 147.360332][T14561] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4920: couldn't read orphan inode 17 (err -117) [ 147.417535][T14571] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4926'. [ 147.467127][T14577] xt_hashlimit: max too large, truncated to 1048576 [ 147.487815][T14583] loop8: detected capacity change from 0 to 256 [ 147.537039][T14583] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 147.545103][T14583] FAT-fs (loop8): Filesystem has been set read-only [ 147.585129][T14590] loop6: detected capacity change from 0 to 512 [ 147.591858][T14590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.612962][T14590] ext4 filesystem being mounted at /625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.722020][T14614] loop6: detected capacity change from 0 to 256 [ 147.788415][T14614] FAT-fs (loop6): Directory bread(block 64) failed [ 147.798457][T14614] FAT-fs (loop6): Directory bread(block 65) failed [ 147.842844][T14614] FAT-fs (loop6): Directory bread(block 66) failed [ 147.849504][T14614] FAT-fs (loop6): Directory bread(block 67) failed [ 147.859859][T14621] loop8: detected capacity change from 0 to 1024 [ 147.892989][T14614] FAT-fs (loop6): Directory bread(block 68) failed [ 147.899581][T14614] FAT-fs (loop6): Directory bread(block 69) failed [ 147.919565][T14621] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.941807][T14614] FAT-fs (loop6): Directory bread(block 70) failed [ 147.961377][T14614] FAT-fs (loop6): Directory bread(block 71) failed [ 147.968867][T14614] FAT-fs (loop6): Directory bread(block 72) failed [ 147.975916][T14614] FAT-fs (loop6): Directory bread(block 73) failed [ 148.069210][T14614] syz.6.4944: attempt to access beyond end of device [ 148.069210][T14614] loop6: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 148.099371][ T37] kworker/u8:2: attempt to access beyond end of device [ 148.099371][ T37] loop6: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 148.118859][ T37] kworker/u8:2: attempt to access beyond end of device [ 148.118859][ T37] loop6: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 148.201378][T14654] loop6: detected capacity change from 0 to 128 [ 148.281161][T14658] netlink: 277 bytes leftover after parsing attributes in process `syz.9.4963'. [ 148.369538][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 148.369628][ T29] audit: type=1400 audit(1751986189.347:2227): avc: denied { read } for pid=14665 comm="syz.6.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.467102][T14675] loop8: detected capacity change from 0 to 512 [ 148.515927][T14675] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.535699][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4974'. [ 148.617248][T14691] netlink: 'syz.0.4978': attribute type 13 has an invalid length. [ 148.685662][T14691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.851980][ T29] audit: type=1326 audit(1751986189.827:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.878078][ T29] audit: type=1326 audit(1751986189.827:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.901792][ T29] audit: type=1326 audit(1751986189.827:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.925339][ T29] audit: type=1326 audit(1751986189.827:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.949203][ T29] audit: type=1326 audit(1751986189.827:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.972871][ T29] audit: type=1326 audit(1751986189.857:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 148.997240][ T29] audit: type=1326 audit(1751986189.857:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 149.020935][ T29] audit: type=1326 audit(1751986189.857:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 149.044644][ T29] audit: type=1326 audit(1751986189.887:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 149.091817][T14723] loop0: detected capacity change from 0 to 512 [ 149.099196][T14723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.111869][T14723] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4992: invalid indirect mapped block 83886080 (level 1) [ 149.128122][T14723] EXT4-fs (loop0): Remounting filesystem read-only [ 149.135051][T14723] EXT4-fs (loop0): 1 orphan inode deleted [ 149.140874][T14723] EXT4-fs (loop0): 1 truncate cleaned up [ 149.156319][T14728] loop6: detected capacity change from 0 to 512 [ 149.163124][T14728] EXT4-fs: Ignoring removed bh option [ 149.169022][T14728] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.178163][T14728] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 149.188174][T14728] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 149.197570][T14728] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 149.211237][T14728] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 149.221367][T14728] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4994: bg 0: block 353: padding at end of block bitmap is not set [ 149.265807][T14735] loop0: detected capacity change from 0 to 256 [ 149.281227][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4999'. [ 149.290630][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4999'. [ 149.342158][T14745] netlink: 'syz.9.5002': attribute type 2 has an invalid length. [ 149.388996][T14755] loop0: detected capacity change from 0 to 128 [ 149.427185][T14759] loop6: detected capacity change from 0 to 512 [ 149.440520][T14759] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.452230][T14759] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5009: bg 0: block 248: padding at end of block bitmap is not set [ 149.467073][T14759] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5009: Failed to acquire dquot type 1 [ 149.473507][T14755] syz.0.5007: attempt to access beyond end of device [ 149.473507][T14755] loop0: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 149.480998][T14759] EXT4-fs (loop6): 1 truncate cleaned up [ 149.492710][T14755] syz.0.5007: attempt to access beyond end of device [ 149.492710][T14755] loop0: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 149.511227][T14759] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 149.511324][T14755] syz.0.5007: attempt to access beyond end of device [ 149.511324][T14755] loop0: rw=2049, sector=201, nr_sectors = 16 limit=128 [ 149.535110][T14755] syz.0.5007: attempt to access beyond end of device [ 149.535110][T14755] loop0: rw=2049, sector=225, nr_sectors = 16 limit=128 [ 149.549217][T14755] syz.0.5007: attempt to access beyond end of device [ 149.549217][T14755] loop0: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 149.570814][T14759] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000001 r/w. [ 149.570861][T14755] syz.0.5007: attempt to access beyond end of device [ 149.570861][T14755] loop0: rw=2049, sector=273, nr_sectors = 16 limit=128 [ 149.594399][T14755] syz.0.5007: attempt to access beyond end of device [ 149.594399][T14755] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 149.608129][T14755] syz.0.5007: attempt to access beyond end of device [ 149.608129][T14755] loop0: rw=2049, sector=313, nr_sectors = 16 limit=128 [ 149.622875][T14755] syz.0.5007: attempt to access beyond end of device [ 149.622875][T14755] loop0: rw=2049, sector=337, nr_sectors = 16 limit=128 [ 149.636914][T14755] syz.0.5007: attempt to access beyond end of device [ 149.636914][T14755] loop0: rw=2049, sector=361, nr_sectors = 16 limit=128 [ 149.676139][T14770] rdma_op ffff888126c23980 conn xmit_rdma 0000000000000000 [ 149.765746][T14780] loop5: detected capacity change from 0 to 512 [ 149.772492][T14780] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.811045][T14792] loop6: detected capacity change from 0 to 256 [ 149.828270][T14780] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 149.860389][T14794] tun0: tun_chr_ioctl cmd 1074025677 [ 149.868677][T14794] tun0: linktype set to 776 [ 149.873551][T14780] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 149.885311][T14797] loop0: detected capacity change from 0 to 1024 [ 149.889587][T14780] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.921320][T14780] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.5018: Invalid block bitmap block 0 in block_group 0 [ 149.951080][T14780] EXT4-fs (loop5): Remounting filesystem read-only [ 149.958234][T14780] EXT4-fs (loop5): 1 orphan inode deleted [ 150.075070][T14819] loop8: detected capacity change from 0 to 256 [ 150.080014][T14817] loop6: detected capacity change from 0 to 512 [ 150.150130][T14817] ext4 filesystem being mounted at /654/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.267843][T14835] loop5: detected capacity change from 0 to 256 [ 150.278696][T14837] loop8: detected capacity change from 0 to 512 [ 150.287476][T14837] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.302032][T14837] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 150.329794][T14837] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 150.334849][T14835] FAT-fs (loop5): Directory bread(block 64) failed [ 150.340450][T14837] EXT4-fs (loop8): orphan cleanup on readonly fs [ 150.362688][T14835] FAT-fs (loop5): Directory bread(block 65) failed [ 150.379386][T14835] FAT-fs (loop5): Directory bread(block 66) failed [ 150.380453][T14837] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5044: Invalid block bitmap block 0 in block_group 0 [ 150.392622][T14835] FAT-fs (loop5): Directory bread(block 67) failed [ 150.423759][T14835] FAT-fs (loop5): Directory bread(block 68) failed [ 150.452797][T14835] FAT-fs (loop5): Directory bread(block 69) failed [ 150.468537][T14835] FAT-fs (loop5): Directory bread(block 70) failed [ 150.477521][T14837] EXT4-fs (loop8): Remounting filesystem read-only [ 150.487676][T14835] FAT-fs (loop5): Directory bread(block 71) failed [ 150.496932][T14837] EXT4-fs (loop8): 1 orphan inode deleted [ 150.504810][T14835] FAT-fs (loop5): Directory bread(block 72) failed [ 150.511444][T14835] FAT-fs (loop5): Directory bread(block 73) failed [ 150.583685][T14765] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 150.600599][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5051'. [ 150.609709][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5051'. [ 150.654387][T14864] program syz.6.5056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.677707][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.690024][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.690024][ T31] [ 150.699744][ T31] EXT4-fs (loop0): Total free blocks count 0 [ 150.702663][T14864] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 150.705893][ T31] EXT4-fs (loop0): Free/Dirty block details [ 150.720382][ T31] EXT4-fs (loop0): free_blocks=68451041280 [ 150.726303][ T31] EXT4-fs (loop0): dirty_blocks=16416 [ 150.731744][ T31] EXT4-fs (loop0): Block reservation details [ 150.737913][ T31] EXT4-fs (loop0): i_reserved_data_blocks=1026 [ 150.762395][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 150.775156][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.775156][ T37] [ 150.822194][T14877] loop8: detected capacity change from 0 to 1024 [ 150.840060][T14877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.907052][T14891] loop9: detected capacity change from 0 to 512 [ 150.922373][T14891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.932408][T14891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.961554][T14893] loop5: detected capacity change from 0 to 4096 [ 150.980043][T14891] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.023646][T14893] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.5070: corrupted inode contents [ 151.077817][T14893] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #15: comm syz.5.5070: mark_inode_dirty error [ 151.078065][T14893] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.5070: corrupted inode contents [ 151.078251][T14893] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.5070: mark_inode_dirty error [ 151.078435][T14893] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.5070: corrupted inode contents [ 151.078609][T14893] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.5070: mark_inode_dirty error [ 151.078778][T14893] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.5070: corrupted inode contents [ 151.078988][T14893] EXT4-fs error (device loop5): ext4_truncate:4597: inode #15: comm syz.5.5070: mark_inode_dirty error [ 151.079165][T14893] EXT4-fs error (device loop5) in ext4_setattr:5986: Corrupt filesystem [ 151.079483][T14908] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.5070: corrupted inode contents [ 151.236638][T14918] loop6: detected capacity change from 0 to 128 [ 151.243446][T14918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 151.243480][T14918] System zones: 1-3, 19-19, 35-36 [ 151.244545][T14918] ext4 filesystem being mounted at /666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.246633][T14918] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 151.276741][T14925] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.5081'. [ 151.391312][T14940] loop0: detected capacity change from 0 to 512 [ 151.394504][T14940] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.394999][T14940] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5085: bg 0: block 248: padding at end of block bitmap is not set [ 151.395207][T14940] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5085: Failed to acquire dquot type 1 [ 151.395592][T14940] EXT4-fs (loop0): 1 truncate cleaned up [ 151.408394][T14940] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 151.427419][T14940] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000001 r/w. [ 151.487907][T14951] netlink: 'syz.8.5091': attribute type 25 has an invalid length. [ 151.499601][T14951] netlink: 'syz.8.5091': attribute type 1 has an invalid length. [ 151.507578][T14951] bridge0: port 1(bridge_slave_0) entered learning state [ 151.544923][T14957] xt_cgroup: xt_cgroup: no path or classid specified [ 151.734838][T14981] loop5: detected capacity change from 0 to 512 [ 151.741854][T14981] ext4: Unknown parameter 'uid<00000000000000000000' [ 151.812113][T14998] loop5: detected capacity change from 0 to 512 [ 151.820325][T14997] loop9: detected capacity change from 0 to 1024 [ 151.828533][T14998] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.841897][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 151.863211][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 4: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 151.884410][T14997] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.899710][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 151.931219][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 151.967616][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 151.977176][T15009] loop8: detected capacity change from 0 to 512 [ 151.996061][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 151.997255][T15009] EXT4-fs: test_dummy_encryption option not supported [ 152.025337][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 152.049925][T15011] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5115'. [ 152.060154][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.069214][T15011] 0ªX¹¦D: renamed from gretap0 (while UP) [ 152.083211][T14998] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 18: comm syz.5.5110: lblock 23 mapped to illegal pblock 18 (length 1) [ 152.103415][T15011] 0ªX¹¦D: entered allmulticast mode [ 152.109278][T15011] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 152.126847][T14998] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz.5.5110: path /702/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 152.159744][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5117'. [ 152.220386][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5121'. [ 152.257428][T15025] loop9: detected capacity change from 0 to 2048 [ 152.329313][T15025] loop9: p1 < > p4 [ 152.355004][T15025] loop9: p4 size 8388608 extends beyond EOD, truncated [ 152.580471][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5132'. [ 152.589513][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5132'. [ 152.598479][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5132'. [ 152.622227][T15050] loop6: detected capacity change from 0 to 256 [ 152.634155][T15049] loop9: detected capacity change from 0 to 1024 [ 152.642592][T15049] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.660412][T15049] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.5133: Invalid block bitmap block 0 in block_group 0 [ 152.685216][T15049] EXT4-fs (loop9): Remounting filesystem read-only [ 152.699673][T15049] EXT4-fs (loop9): 1 orphan inode deleted [ 152.754436][T15061] netlink: 'syz.0.5140': attribute type 21 has an invalid length. [ 152.762759][T15059] pim6reg: entered allmulticast mode [ 152.773086][T15059] pim6reg: left allmulticast mode [ 152.865705][T15081] netlink: 'syz.5.5148': attribute type 1 has an invalid length. [ 152.873766][T15081] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5148'. [ 152.885762][T15083] loop6: detected capacity change from 0 to 128 [ 152.897238][T15083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 152.905544][T15083] System zones: 1-3, 19-19, 35-36 [ 152.911352][T15083] ext4 filesystem being mounted at /680/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.289330][T15097] loop5: detected capacity change from 0 to 1024 [ 153.414152][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 153.414166][ T29] audit: type=1400 audit(1751986194.398:2268): avc: denied { connect } for pid=15111 comm="syz.8.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.475628][ T29] audit: type=1400 audit(1751986194.418:2269): avc: denied { listen } for pid=15111 comm="syz.8.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.495461][ T29] audit: type=1400 audit(1751986194.418:2270): avc: denied { ioctl } for pid=15111 comm="syz.8.5159" path="socket:[42792]" dev="sockfs" ino=42792 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.551195][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5165'. [ 153.671578][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5172'. [ 153.684674][T15137] SELinux: Context @ is not valid (left unmapped). [ 153.691642][ T29] audit: type=1400 audit(1751986194.668:2271): avc: denied { relabelto } for pid=15136 comm="syz.9.5173" name="cgroup.controllers" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 153.716842][ T29] audit: type=1400 audit(1751986194.668:2272): avc: denied { associate } for pid=15136 comm="syz.9.5173" name="cgroup.controllers" dev="tmpfs" ino=886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 153.759263][ T29] audit: type=1400 audit(1751986194.738:2273): avc: denied { unlink } for pid=13025 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 153.883079][ T29] audit: type=1400 audit(1751986194.858:2274): avc: denied { unmount } for pid=13025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.898873][T15145] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 153.974485][ T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 154.009929][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.022306][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.022306][ T31] [ 154.031971][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 154.038010][ T31] EXT4-fs (loop5): Free/Dirty block details [ 154.043999][ T31] EXT4-fs (loop5): free_blocks=68451041280 [ 154.049835][ T31] EXT4-fs (loop5): dirty_blocks=16416 [ 154.055397][ T31] EXT4-fs (loop5): Block reservation details [ 154.061470][ T31] EXT4-fs (loop5): i_reserved_data_blocks=1026 [ 154.069699][ T29] audit: type=1400 audit(1751986195.038:2275): avc: denied { execute } for pid=15156 comm="syz.6.5184" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 154.100696][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 154.113411][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.113411][ T37] [ 154.220018][T15168] loop9: detected capacity change from 0 to 512 [ 154.233947][T15168] EXT4-fs: Ignoring removed oldalloc option [ 154.245404][T15168] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.257407][T15170] random: crng reseeded on system resumption [ 154.264161][ T29] audit: type=1400 audit(1751986195.238:2276): avc: denied { append } for pid=15169 comm="syz.5.5183" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.322891][T15176] syz.6.5191 (15176) used greatest stack depth: 8976 bytes left [ 154.328365][T15168] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5188: bg 0: block 217: padding at end of block bitmap is not set [ 154.492542][T15197] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 154.499118][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.506787][T15197] vhci_hcd vhci_hcd.0: Device attached [ 154.533238][T15203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.554485][T15197] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(5) [ 154.558572][T15210] netlink: 'syz.0.5203': attribute type 4 has an invalid length. [ 154.561094][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.576410][T15197] vhci_hcd vhci_hcd.0: Device attached [ 154.592466][T15197] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(9) [ 154.599136][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.606930][T15197] vhci_hcd vhci_hcd.0: Device attached [ 154.617261][T15211] vhci_hcd: connection closed [ 154.617450][T15198] vhci_hcd: connection closed [ 154.633960][T15210] netlink: 'syz.0.5203': attribute type 4 has an invalid length. [ 154.646571][ T37] vhci_hcd: stop threads [ 154.646640][T15207] vhci_hcd: connection closed [ 154.650852][ T37] vhci_hcd: release socket [ 154.660275][ T37] vhci_hcd: disconnect device [ 154.667545][T15214] loop6: detected capacity change from 0 to 512 [ 154.670439][ T37] vhci_hcd: stop threads [ 154.678227][ T37] vhci_hcd: release socket [ 154.682697][T15214] EXT4-fs: Ignoring removed oldalloc option [ 154.688676][ T37] vhci_hcd: disconnect device [ 154.700941][ T37] vhci_hcd: stop threads [ 154.705423][ T37] vhci_hcd: release socket [ 154.705503][ T3402] vhci_hcd: vhci_device speed not set [ 154.715356][ T37] vhci_hcd: disconnect device [ 154.723711][T15214] ext4 filesystem being mounted at /693/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.777767][T15214] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5206: bg 0: block 217: padding at end of block bitmap is not set [ 154.849870][T15232] loop6: detected capacity change from 0 to 1024 [ 154.857515][T15232] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 154.868350][T15232] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.879721][T15232] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 154.888165][T15232] EXT4-fs (loop6): orphan cleanup on readonly fs [ 154.893355][ T29] audit: type=1400 audit(1751986195.868:2277): avc: denied { connect } for pid=15240 comm="syz.8.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.896860][T15232] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.5213: Inode bitmap for bg 0 marked uninitialized [ 154.940214][T15232] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 155.129401][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5225'. [ 155.724125][T15322] loop0: detected capacity change from 0 to 4096 [ 155.750515][T15322] EXT4-fs (loop0): shut down requested (2) [ 155.981948][T15351] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 156.005586][T15353] loop6: detected capacity change from 0 to 128 [ 156.074818][T15362] random: crng reseeded on system resumption [ 156.841482][T15430] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.915372][T15430] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.987320][T15430] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.070881][T15430] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.139746][T15430] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.167373][T15430] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.189721][T15430] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.202552][T15430] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.303053][T15469] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.329621][T15471] __nla_validate_parse: 1 callbacks suppressed [ 157.329636][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 157.452980][T15488] openvswitch: netlink: Message has 6 unknown bytes. [ 157.659847][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5342'. [ 157.885889][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5358'. [ 157.895073][T15549] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5358'. [ 157.907679][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5358'. [ 157.917251][T15549] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5358'. [ 157.926420][T15549] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5358'. [ 158.175009][T15589] netlink: 16222 bytes leftover after parsing attributes in process `syz.9.5374'. [ 158.257055][ T10] IPVS: starting estimator thread 0... [ 158.352135][T15601] IPVS: using max 1920 ests per chain, 96000 per kthread [ 158.362336][T15610] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 158.368483][T15610] syzkaller0: linktype set to 6 [ 158.478149][T15628] loop5: detected capacity change from 0 to 512 [ 158.504391][T15628] ext4 filesystem being mounted at /743/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.541227][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 158.541243][ T29] audit: type=1400 audit(1751986199.518:2319): avc: denied { rmdir } for pid=15627 comm="syz.5.5392" name="control" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 158.693056][T15630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.701618][T15630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.764381][T15654] sctp: [Deprecated]: syz.5.5402 (pid 15654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.764381][T15654] Use struct sctp_sack_info instead [ 158.807052][ T29] audit: type=1400 audit(1751986199.788:2320): avc: denied { create } for pid=15655 comm="syz.0.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.834928][ T29] audit: type=1400 audit(1751986199.808:2321): avc: denied { connect } for pid=15655 comm="syz.0.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.862838][T15664] loop5: detected capacity change from 0 to 1024 [ 158.875483][ T29] audit: type=1400 audit(1751986199.858:2322): avc: denied { read } for pid=15663 comm="syz.5.5407" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.902484][T15666] loop8: detected capacity change from 0 to 8192 [ 158.921120][T15666] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 158.929997][T15666] FAT-fs (loop8): Filesystem has been set read-only [ 158.990717][ T29] audit: type=1400 audit(1751986199.968:2323): avc: granted { setsecparam } for pid=15678 comm="syz.8.5412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 159.060952][T15689] loop5: detected capacity change from 0 to 1024 [ 159.075043][ T29] audit: type=1400 audit(1751986200.058:2324): avc: denied { mount } for pid=15688 comm="syz.5.5417" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.080042][T15689] EXT4-fs (loop5): shut down requested (1) [ 159.112076][ T29] audit: type=1400 audit(1751986200.058:2325): avc: denied { read write } for pid=15688 comm="syz.5.5417" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.136359][ T29] audit: type=1400 audit(1751986200.058:2326): avc: denied { open } for pid=15688 comm="syz.5.5417" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.160880][ T29] audit: type=1400 audit(1751986200.098:2327): avc: denied { add_name } for pid=15688 comm="syz.5.5417" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.181659][ T29] audit: type=1400 audit(1751986200.098:2328): avc: denied { create } for pid=15688 comm="syz.5.5417" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 159.255659][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5424'. [ 159.264718][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5424'. [ 159.373280][T15720] 9pnet_fd: Insufficient options for proto=fd [ 159.376245][T15716] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.404782][T15716] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.425885][T15727] netlink: 'syz.6.5430': attribute type 16 has an invalid length. [ 159.433799][T15727] netlink: 'syz.6.5430': attribute type 17 has an invalid length. [ 159.461884][T15730] loop8: detected capacity change from 0 to 128 [ 159.470632][T15730] FAT-fs (loop8): Directory bread(block 162) failed [ 159.477568][T15730] FAT-fs (loop8): Directory bread(block 163) failed [ 159.485798][T15730] FAT-fs (loop8): Directory bread(block 164) failed [ 159.493738][T15730] FAT-fs (loop8): Directory bread(block 165) failed [ 159.509346][T15730] FAT-fs (loop8): Directory bread(block 166) failed [ 159.522003][T15730] FAT-fs (loop8): Directory bread(block 167) failed [ 159.536697][T15730] FAT-fs (loop8): Directory bread(block 168) failed [ 159.547959][T15727] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.555116][T15727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.572468][T15730] FAT-fs (loop8): Directory bread(block 169) failed [ 159.582056][T15727] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.589281][T15727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.607666][T15730] FAT-fs (loop8): Directory bread(block 162) failed [ 159.615398][T15730] FAT-fs (loop8): Directory bread(block 163) failed [ 159.622722][T15730] bio_check_eod: 69 callbacks suppressed [ 159.622817][T15730] syz.8.5436: attempt to access beyond end of device [ 159.622817][T15730] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 159.658544][T15730] syz.8.5436: attempt to access beyond end of device [ 159.658544][T15730] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 159.673037][T15736] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 159.896622][T15760] netlink: 'syz.6.5450': attribute type 13 has an invalid length. [ 159.948040][T15764] loop9: detected capacity change from 0 to 2048 [ 159.998248][T15760] gretap0: refused to change device tx_queue_len [ 160.004732][T15760] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.067554][T15775] loop0: detected capacity change from 0 to 4096 [ 160.103959][T15775] EXT4-fs (loop0): shut down requested (1) [ 160.121511][T15775] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 160.140687][T15775] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 160.151569][T15785] loop5: detected capacity change from 0 to 1024 [ 160.155408][T15778] loop6: detected capacity change from 0 to 8192 [ 160.166378][T15775] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 160.194158][T15778] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.206046][T15775] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 160.307153][T15785] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.5461: missing EA_INODE flag [ 160.333528][T15807] loop0: detected capacity change from 0 to 512 [ 160.340528][T15807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.347986][T15785] EXT4-fs (loop5): Remounting filesystem read-only [ 160.367723][T15785] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1221: inode #18: comm syz.5.5461: ea_inode dec ref err=-30 [ 160.369943][T15807] EXT4-fs (loop0): 1 truncate cleaned up [ 160.428305][T15785] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 160.517022][T15825] 9pnet_fd: Insufficient options for proto=fd [ 160.602017][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.717888][T15852] loop8: detected capacity change from 0 to 512 [ 160.801036][ T1035] IPVS: starting estimator thread 0... [ 160.809746][T15852] EXT4-fs (loop8): 1 orphan inode deleted [ 160.820272][T15852] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.846028][ T3461] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 160.880844][T15869] loop5: detected capacity change from 0 to 128 [ 160.892043][T15863] IPVS: using max 2352 ests per chain, 117600 per kthread [ 160.906969][T15869] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 160.915186][T15869] FAT-fs (loop5): Filesystem has been set read-only [ 160.928264][T15869] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 160.998071][ T1035] kernel write not supported for file /vcsa1 (pid: 1035 comm: kworker/1:2) [ 161.032539][T15886] netlink: 'syz.5.5504': attribute type 1 has an invalid length. [ 161.479491][T15945] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.520725][T15953] loop9: detected capacity change from 0 to 1024 [ 161.540963][T15953] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.5536: missing EA_INODE flag [ 161.553510][T15953] EXT4-fs (loop9): Remounting filesystem read-only [ 161.560155][T15953] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1221: inode #18: comm syz.9.5536: ea_inode dec ref err=-30 [ 161.573189][T15953] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -30) [ 161.587910][T15945] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.654665][T15945] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.708316][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.719256][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.729009][T15975] netlink: 'syz.9.5542': attribute type 16 has an invalid length. [ 161.736928][T15975] netlink: 'syz.9.5542': attribute type 17 has an invalid length. [ 161.819795][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.827068][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.843871][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.851109][T15975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.920902][T15945] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.999837][T15945] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.062296][T15945] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.094230][T15978] netlink: 'syz.0.5545': attribute type 13 has an invalid length. [ 162.115713][T15945] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.201748][T15978] 0ªX¹¦D: refused to change device tx_queue_len [ 162.208197][T15978] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 162.229998][T15945] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.326599][T15986] loop8: detected capacity change from 0 to 512 [ 162.374754][T15986] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 162.402713][T15986] EXT4-fs (loop8): 1 truncate cleaned up [ 162.408933][T15986] EXT4-fs mount: 82 callbacks suppressed [ 162.408950][T15986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.493520][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.556382][T16010] __nla_validate_parse: 5 callbacks suppressed [ 162.556397][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5560'. [ 162.597524][T16012] netlink: 'syz.8.5558': attribute type 16 has an invalid length. [ 162.605469][T16012] netlink: 'syz.8.5558': attribute type 17 has an invalid length. [ 162.609241][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.626045][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.745636][T16019] loop5: detected capacity change from 0 to 256 [ 162.801460][T16012] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.808606][T16012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.827110][T16012] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.834249][T16012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.882652][T16026] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5567'. [ 162.900333][T16026] netlink: 'syz.0.5567': attribute type 9 has an invalid length. [ 162.908209][T16026] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5567'. [ 162.917617][T16026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5567'. [ 163.183225][T16076] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5591'. [ 163.239347][T16086] loop8: detected capacity change from 0 to 512 [ 163.264804][T16086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.279130][T16086] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.296786][T16086] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #18: comm syz.8.5595: corrupted inode contents [ 163.311135][T16086] EXT4-fs (loop8): Remounting filesystem read-only [ 163.318106][T16086] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -30) [ 163.357755][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.398387][T16106] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5604'. [ 163.545226][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 163.545243][ T29] audit: type=1400 audit(1751986204.528:2549): avc: denied { write } for pid=16128 comm="syz.5.5616" path="socket:[45735]" dev="sockfs" ino=45735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.598078][ T29] audit: type=1400 audit(1751986204.578:2550): avc: denied { write } for pid=16135 comm="syz.6.5619" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.623851][T16138] vhci_hcd: default hub control req: 600e v09fa i0008 l0 [ 163.657940][T16142] IPVS: stopping master sync thread 16143 ... [ 163.664505][T16143] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 163.705121][ T29] audit: type=1400 audit(1751986204.678:2551): avc: denied { ioctl } for pid=16146 comm="syz.8.5623" path="socket:[45759]" dev="sockfs" ino=45759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.747896][T16151] xt_hashlimit: max too large, truncated to 1048576 [ 163.772310][ T29] audit: type=1400 audit(1751986204.758:2552): avc: denied { map } for pid=16152 comm="syz.6.5627" path="socket:[46426]" dev="sockfs" ino=46426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 163.826031][ T29] audit: type=1400 audit(1751986204.778:2553): avc: denied { setopt } for pid=16152 comm="syz.6.5627" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.846602][ T29] audit: type=1400 audit(1751986204.788:2554): avc: denied { read write } for pid=16158 comm="syz.9.5629" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.871240][ T29] audit: type=1400 audit(1751986204.788:2555): avc: denied { open } for pid=16158 comm="syz.9.5629" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.875422][T16166] loop9: detected capacity change from 0 to 512 [ 163.907043][ T29] audit: type=1326 audit(1751986204.888:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16160 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 163.930677][ T29] audit: type=1326 audit(1751986204.888:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16160 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 163.967928][ T29] audit: type=1326 audit(1751986204.948:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16160 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 164.002971][T16166] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5633: bg 0: block 248: padding at end of block bitmap is not set [ 164.022708][T16166] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5633: Failed to acquire dquot type 1 [ 164.042891][T16166] EXT4-fs (loop9): 1 truncate cleaned up [ 164.049088][T16166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.084952][T16166] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.119220][T16187] loop0: detected capacity change from 0 to 1764 [ 164.130377][T16166] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5633: Failed to acquire dquot type 1 [ 164.206321][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.381285][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5653'. [ 164.391056][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5653'. [ 164.400670][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.413065][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.686451][T16256] netlink: 'syz.0.5674': attribute type 21 has an invalid length. [ 164.686812][T16259] sctp: [Deprecated]: syz.5.5676 (pid 16259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.686812][T16259] Use struct sctp_sack_info instead [ 164.711341][T16256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5674'. [ 164.783061][T16268] loop0: detected capacity change from 0 to 128 [ 164.818064][T16274] bond2: entered promiscuous mode [ 164.823222][T16274] bond2: entered allmulticast mode [ 164.829714][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.830510][T16274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.838472][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.880641][T16274] bond2 (unregistering): Released all slaves [ 165.046533][T16306] netlink: 'syz.5.5697': attribute type 9 has an invalid length. [ 165.060458][T16306] bond_slave_0: entered promiscuous mode [ 165.066218][T16306] bond_slave_1: entered promiscuous mode [ 165.079781][T16306] macvlan2: entered promiscuous mode [ 165.085599][T16306] bond0: entered promiscuous mode [ 165.096862][T16306] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.217621][T16324] netlink: 'syz.9.5714': attribute type 1 has an invalid length. [ 165.449215][T16352] loop6: detected capacity change from 0 to 128 [ 165.476374][T16352] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.530307][T16352] ext4 filesystem being mounted at /767/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.588906][ T7511] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.871325][T16393] loop9: detected capacity change from 0 to 764 [ 165.922178][T16396] xt_cluster: node mask cannot exceed total number of nodes [ 166.028320][T16403] loop9: detected capacity change from 0 to 164 [ 166.055740][T16413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.074558][T16403] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.083135][T16413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.086800][T16403] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.102085][T16403] Symlink component flag not implemented [ 166.107785][T16403] Symlink component flag not implemented [ 166.115989][T16403] Symlink component flag not implemented (7) [ 166.122967][T16403] Symlink component flag not implemented (116) [ 166.178054][T16430] loop9: detected capacity change from 0 to 2048 [ 166.194159][T16430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.209009][T16430] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:169: inode #12: comm syz.9.5754: inline data xattr refers to an external xattr inode [ 166.225011][T16430] EXT4-fs (loop9): Remounting filesystem read-only [ 166.242404][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.278450][T16438] loop9: detected capacity change from 0 to 128 [ 166.286348][T16438] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 166.482088][T16443] loop9: detected capacity change from 0 to 164 [ 166.489248][T16443] ISOFS: unable to read i-node block [ 166.494615][T16443] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 167.059064][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5774'. [ 167.103080][T16483] loop6: detected capacity change from 0 to 1024 [ 167.113049][T16483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.168766][T16483] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.5777: Allocating blocks 497-513 which overlap fs metadata [ 167.269192][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.390143][T16521] loop5: detected capacity change from 0 to 512 [ 167.532944][T16545] program syz.8.5806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.592289][T16552] __nla_validate_parse: 2 callbacks suppressed [ 167.592306][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5809'. [ 167.608232][T16552] netlink: 'syz.6.5809': attribute type 20 has an invalid length. [ 167.616163][T16552] netlink: 'syz.6.5809': attribute type 21 has an invalid length. [ 167.757601][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.766297][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.841082][T16576] loop6: detected capacity change from 0 to 256 [ 167.906766][T16583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.916771][T16583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.961616][T16588] loop8: detected capacity change from 0 to 1764 [ 168.035146][T16602] loop5: detected capacity change from 0 to 128 [ 168.045385][T16602] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.058366][T16602] ext4 filesystem being mounted at /858/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.087299][ T7430] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.134240][T16613] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 168.140812][T16613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.148469][T16613] vhci_hcd vhci_hcd.0: Device attached [ 168.155235][T16614] vhci_hcd: connection closed [ 168.155478][ T12] vhci_hcd: stop threads [ 168.165377][ T12] vhci_hcd: release socket [ 168.169852][ T12] vhci_hcd: disconnect device [ 168.184862][T16618] loop0: detected capacity change from 0 to 2048 [ 168.223643][T16618] Alternate GPT is invalid, using primary GPT. [ 168.230013][T16618] loop0: p1 p2 p3 [ 168.316568][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5841'. [ 168.407524][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5849'. [ 168.485325][T16649] netlink: 'syz.6.5854': attribute type 5 has an invalid length. [ 168.712344][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 168.712362][ T29] audit: type=1326 audit(1751986209.698:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.742914][ T29] audit: type=1326 audit(1751986209.698:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.819875][ T29] audit: type=1326 audit(1751986209.748:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.844385][ T29] audit: type=1326 audit(1751986209.748:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.867951][ T29] audit: type=1326 audit(1751986209.748:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.892244][ T29] audit: type=1326 audit(1751986209.748:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.915807][ T29] audit: type=1326 audit(1751986209.748:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.6.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd620e929 code=0x7ffc0000 [ 168.963045][T16686] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5870'. [ 169.049032][T16699] loop8: detected capacity change from 0 to 1024 [ 169.058587][T16699] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.069119][T16699] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 169.085581][T16699] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.130803][T16699] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #5: comm syz.8.5875: unexpected bad inode w/o EXT4_IGET_BAD [ 169.146381][T16699] EXT4-fs (loop8): no journal found [ 169.151858][T16699] EXT4-fs (loop8): can't get journal size [ 169.163538][T16699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.184452][T16699] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.5875: Abort forced by user [ 169.195519][ T29] audit: type=1400 audit(1751986210.168:2676): avc: denied { remount } for pid=16698 comm="syz.8.5875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 169.216035][ T29] audit: type=1400 audit(1751986210.168:2677): avc: denied { bind } for pid=16713 comm="syz.6.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.243251][T16699] EXT4-fs (loop8): Remounting filesystem read-only [ 169.249869][T16699] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.312845][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.329897][ T29] audit: type=1326 audit(1751986210.308:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16728 comm="syz.5.5891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40883ae929 code=0x7ffc0000 [ 169.388947][T16732] loop9: detected capacity change from 0 to 4096 [ 169.438446][T16732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.472407][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'. [ 169.481325][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5901'. [ 169.531896][T16752] wireguard1: entered promiscuous mode [ 169.537433][T16752] wireguard1: entered allmulticast mode [ 169.560308][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.578000][T16759] loop6: detected capacity change from 0 to 2048 [ 169.632798][T16759] Alternate GPT is invalid, using primary GPT. [ 169.639109][T16759] loop6: p1 p2 p3 [ 169.661135][T16774] loop5: detected capacity change from 0 to 1024 [ 169.690598][T16774] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.726918][T16774] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.5910: Invalid block bitmap block 0 in block_group 0 [ 169.742327][T16774] EXT4-fs (loop5): Remounting filesystem read-only [ 169.749035][T16774] EXT4-fs (loop5): 1 orphan inode deleted [ 169.757868][T16774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.834252][ T7430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.865461][T16805] loop8: detected capacity change from 0 to 512 [ 169.873979][T16805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.902206][T16805] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.5925: invalid block [ 169.922653][T16805] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5925: invalid indirect mapped block 4294967295 (level 1) [ 169.943652][T16805] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5925: invalid indirect mapped block 4294967295 (level 1) [ 169.985644][T16805] EXT4-fs (loop8): 2 truncates cleaned up [ 169.992713][T16805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.034536][T16827] loop0: detected capacity change from 0 to 164 [ 170.177679][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.196558][T16850] loop0: detected capacity change from 0 to 512 [ 170.219437][T16850] EXT4-fs: Ignoring removed nobh option [ 170.234785][T16850] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.5946: iget: bad i_size value: 38620345925642 [ 170.263348][T16850] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.5946: couldn't read orphan inode 15 (err -117) [ 170.278593][T16850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.308262][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.488544][T16887] netlink: 'syz.6.5963': attribute type 1 has an invalid length. [ 170.507361][T16890] SELinux: syz.0.5965 (16890) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 170.540264][T16893] vhci_hcd: invalid port number 255 [ 170.545652][T16893] vhci_hcd: default hub control req: 8003 v000a i00ff l0 [ 170.583339][T16901] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 170.592446][T16901] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 170.635714][T16909] veth0_to_bond: entered allmulticast mode [ 170.667350][T16912] openvswitch: netlink: Message has 6 unknown bytes. [ 170.734477][T16924] netlink: 300 bytes leftover after parsing attributes in process `syz.5.5981'. [ 170.739286][T16925] netlink: 'syz.0.5980': attribute type 3 has an invalid length. [ 170.754708][T16925] netlink: 'syz.0.5980': attribute type 3 has an invalid length. [ 170.813701][T16927] loop6: detected capacity change from 0 to 1024 [ 170.820473][T16927] EXT4-fs: Ignoring removed orlov option [ 170.826217][T16927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.853574][T16935] loop0: detected capacity change from 0 to 128 [ 170.854011][T16927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.874765][T16935] FAT-fs (loop0): Directory bread(block 162) failed [ 170.876202][T16927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.890495][T16935] FAT-fs (loop0): Directory bread(block 163) failed [ 170.898288][T16935] FAT-fs (loop0): Directory bread(block 164) failed [ 170.905900][T16935] FAT-fs (loop0): Directory bread(block 165) failed [ 170.912712][T16935] FAT-fs (loop0): Directory bread(block 166) failed [ 170.919414][T16935] FAT-fs (loop0): Directory bread(block 167) failed [ 170.926216][T16935] FAT-fs (loop0): Directory bread(block 168) failed [ 170.933565][T16935] FAT-fs (loop0): Directory bread(block 169) failed [ 170.941389][T16935] FAT-fs (loop0): Directory bread(block 162) failed [ 170.948565][T16935] FAT-fs (loop0): Directory bread(block 163) failed [ 170.955584][T16935] syz.0.5986: attempt to access beyond end of device [ 170.955584][T16935] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 170.969477][T16935] syz.0.5986: attempt to access beyond end of device [ 170.969477][T16935] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 171.083149][T16953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.092548][T16953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.126197][T16957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.136531][T16957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.165178][T16961] netlink: 'syz.5.5997': attribute type 1 has an invalid length. [ 171.171204][T16963] bpf: Bad value for 'uid' [ 171.339216][T16987] loop9: detected capacity change from 0 to 512 [ 171.346198][T16987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.356747][T16987] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.6010: invalid block [ 171.369343][T16987] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6010: invalid indirect mapped block 4294967295 (level 1) [ 171.383826][T16987] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6010: invalid indirect mapped block 4294967295 (level 1) [ 171.398763][T16987] EXT4-fs (loop9): 2 truncates cleaned up [ 171.405511][T16987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.582123][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.640425][T17003] program syz.5.6017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.707236][T17015] loop8: detected capacity change from 0 to 512 [ 171.716552][T17015] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #17: comm syz.8.6022: iget: bogus i_mode (0) [ 171.739002][T17018] netlink: 'syz.6.6024': attribute type 1 has an invalid length. [ 171.746508][T17015] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.6022: couldn't read orphan inode 17 (err -117) [ 171.776102][T17015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.844601][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.888697][T17036] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 171.900768][T17036] ip6erspan0: linktype set to 768 [ 171.906849][T17041] loop6: detected capacity change from 0 to 128 [ 171.922604][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6036'. [ 171.924426][T17041] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.947688][T17041] ext4 filesystem being mounted at /847/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.996293][T17051] loop9: detected capacity change from 0 to 128 [ 172.016676][ T7511] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.032292][T17051] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.048018][T17051] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.076230][T17051] EXT4-fs (loop9): resizing filesystem from 64 to 2 blocks [ 172.084222][T17051] EXT4-fs warning (device loop9): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 172.125124][T13025] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.134451][T17068] loop5: detected capacity change from 0 to 1024 [ 172.141233][T17068] EXT4-fs: Ignoring removed nobh option [ 172.147693][T17068] EXT4-fs: Ignoring removed bh option [ 172.165910][T17068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.178602][T17074] netlink: 'syz.6.6049': attribute type 3 has an invalid length. [ 172.178746][T17074] netlink: 'syz.6.6049': attribute type 3 has an invalid length. [ 172.239907][ T7430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.276776][T17085] loop9: detected capacity change from 0 to 1024 [ 172.307542][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6055'. [ 172.325812][T17085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.386552][T17085] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.6053: Allocating blocks 497-513 which overlap fs metadata [ 172.507763][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.835054][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6069'. [ 172.947613][T17127] loop9: detected capacity change from 0 to 256 [ 172.968506][T17127] FAT-fs (loop9): Directory bread(block 64) failed [ 172.975205][T17127] FAT-fs (loop9): Directory bread(block 65) failed [ 172.983225][T17127] FAT-fs (loop9): Directory bread(block 66) failed [ 172.989807][T17127] FAT-fs (loop9): Directory bread(block 67) failed [ 173.013206][T17127] FAT-fs (loop9): Directory bread(block 68) failed [ 173.021095][T17127] FAT-fs (loop9): Directory bread(block 69) failed [ 173.028000][T17127] FAT-fs (loop9): Directory bread(block 70) failed [ 173.035013][T17127] FAT-fs (loop9): Directory bread(block 71) failed [ 173.041877][T17127] FAT-fs (loop9): Directory bread(block 72) failed [ 173.048512][T17127] FAT-fs (loop9): Directory bread(block 73) failed [ 173.259898][T17153] SELinux: ebitmap: truncated map [ 173.265282][T17153] SELinux: failed to load policy [ 173.420767][T17170] loop0: detected capacity change from 0 to 764 [ 173.449233][T17170] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 173.509213][T17177] loop8: detected capacity change from 0 to 128 [ 173.615683][T17191] loop0: detected capacity change from 0 to 128 [ 173.643683][T17191] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.657748][T17191] ext4 filesystem being mounted at /1300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.694520][T17197] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6103'. [ 173.719588][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.750700][T17199] netlink: 'syz.8.6105': attribute type 3 has an invalid length. [ 173.759244][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6105'. [ 173.831744][T17207] xt_hashlimit: max too large, truncated to 1048576 [ 173.889744][T17215] xt_hashlimit: size too large, truncated to 1048576 [ 173.898224][T17217] loop9: detected capacity change from 0 to 128 [ 173.995964][T17223] –: renamed from vxcan1 (while UP) [ 173.996848][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 173.996866][ T29] audit: type=1400 audit(1751986214.978:2760): avc: denied { remount } for pid=17216 comm="syz.9.6114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.091471][ T29] audit: type=1400 audit(1751986215.068:2761): avc: denied { watch_reads } for pid=17230 comm="syz.5.6120" path="/916" dev="tmpfs" ino=4730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.162954][T17237] SELinux: ebitmap: truncated map [ 174.168352][T17237] SELinux: failed to load policy [ 174.194969][ T29] audit: type=1326 audit(1751986215.178:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.219524][ T29] audit: type=1326 audit(1751986215.178:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.243410][ T29] audit: type=1326 audit(1751986215.178:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.267176][ T29] audit: type=1326 audit(1751986215.178:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.290794][ T29] audit: type=1326 audit(1751986215.178:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.314525][ T29] audit: type=1326 audit(1751986215.178:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.338266][ T29] audit: type=1326 audit(1751986215.198:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.344725][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6137'. [ 174.361837][ T29] audit: type=1326 audit(1751986215.198:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17244 comm="syz.0.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5f41e929 code=0x7ffc0000 [ 174.395199][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6137'. [ 174.456488][T17252] loop8: detected capacity change from 0 to 2048 [ 174.496804][T17261] sctp: [Deprecated]: syz.5.6129 (pid 17261) Use of int in max_burst socket option. [ 174.496804][T17261] Use struct sctp_assoc_value instead [ 174.516083][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6132'. [ 174.533236][T17252] Alternate GPT is invalid, using primary GPT. [ 174.539585][T17252] loop8: p1 p2 p3 [ 174.752572][T17284] loop8: detected capacity change from 0 to 164 [ 174.814792][T17292] loop8: detected capacity change from 0 to 2048 [ 174.830591][T17294] loop0: detected capacity change from 0 to 1024 [ 174.838947][T17294] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 174.850803][T17294] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 174.864525][T17294] JBD2: no valid journal superblock found [ 174.866220][T17298] sctp: [Deprecated]: syz.9.6151 (pid 17298) Use of int in max_burst socket option. [ 174.866220][T17298] Use struct sctp_assoc_value instead [ 174.870275][T17294] EXT4-fs (loop0): Could not load journal inode [ 174.888130][T17292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.936676][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.086348][T17329] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6164'. [ 175.141393][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6169'. [ 175.150552][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6169'. [ 175.195030][T17345] loop9: detected capacity change from 0 to 512 [ 175.224913][T17345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.244917][T17345] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.269635][T17345] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.6172: iget: bad i_size value: 2533274857506816 [ 175.300605][T17345] EXT4-fs (loop9): Remounting filesystem read-only [ 175.338720][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.368819][T17371] netlink: 'syz.5.6185': attribute type 1 has an invalid length. [ 175.465188][T17391] loop5: detected capacity change from 0 to 512 [ 175.479420][T17391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.490689][T17391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.504608][T17391] EXT4-fs (loop5): 1 truncate cleaned up [ 175.526809][T17391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.559282][T17406] loop8: detected capacity change from 0 to 512 [ 175.595067][T17406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 175.609076][T17406] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.643691][T17415] loop6: detected capacity change from 0 to 512 [ 175.650728][T12793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 175.674756][T17415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.693487][T17415] ext4 filesystem being mounted at /871/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.717818][T17415] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.753686][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.778145][ T7430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.840449][T17431] loop5: detected capacity change from 0 to 1024 [ 175.877865][T17431] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.889040][T17431] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.921864][T17431] JBD2: no valid journal superblock found [ 175.927674][T17431] EXT4-fs (loop5): Could not load journal inode [ 176.174231][T17465] loop0: detected capacity change from 0 to 1024 [ 176.214147][T17465] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.234669][T17465] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6224: Invalid block bitmap block 0 in block_group 0 [ 176.255528][T17465] EXT4-fs (loop0): Remounting filesystem read-only [ 176.263791][T17465] EXT4-fs (loop0): 1 orphan inode deleted [ 176.270133][T17465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.320065][T17472] loop8: detected capacity change from 0 to 512 [ 176.330600][T17476] SELinux: syz.6.6229 (17476) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 176.332126][T17472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.364148][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.374356][T17472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.381349][T17472] ext4: Unknown parameter 'obj_type' [ 176.509725][T17500] loop9: detected capacity change from 0 to 1024 [ 176.527072][T17506] loop6: detected capacity change from 0 to 512 [ 176.535439][T17500] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.548462][T17510] random: crng reseeded on system resumption [ 176.574088][T17506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 176.594830][T17506] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.605041][T17500] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6241: Invalid block bitmap block 0 in block_group 0 [ 176.645006][T17523] veth0_to_bond: entered allmulticast mode [ 176.654050][T17500] EXT4-fs (loop9): Remounting filesystem read-only [ 176.660661][T17500] EXT4-fs (loop9): 1 orphan inode deleted [ 176.660749][T17522] loop8: detected capacity change from 0 to 8192 [ 176.687698][T17500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.710884][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 176.758984][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.877805][T17551] loop0: detected capacity change from 0 to 512 [ 176.900590][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.907814][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.914752][T17551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 176.942075][T17551] ext4 filesystem being mounted at /1337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.004091][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 177.021206][T17563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.031091][T17563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.047980][T17565] loop0: detected capacity change from 0 to 512 [ 177.054718][T17565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.062702][T17565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.078682][T17565] EXT4-fs (loop0): 1 truncate cleaned up [ 177.085003][T17565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.132200][T17570] loop6: detected capacity change from 0 to 8192 [ 177.165068][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.316646][T17592] loop9: detected capacity change from 0 to 2048 [ 177.324473][T17592] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.331034][T17592] EXT4-fs: Ignoring removed i_version option [ 177.344049][T17592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.369773][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.393480][T17596] Invalid logical block size (-1) [ 177.425213][T17600] loop9: detected capacity change from 0 to 8192 [ 177.447124][T17604] loop6: detected capacity change from 0 to 1024 [ 177.458978][T17604] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 177.470713][T17604] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 177.499500][T17606] loop0: detected capacity change from 0 to 8192 [ 177.507240][T17604] JBD2: no valid journal superblock found [ 177.513051][T17604] EXT4-fs (loop6): Could not load journal inode [ 177.747435][T17640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.779562][T17640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.826678][T17650] loop9: detected capacity change from 0 to 128 [ 177.834264][T17650] EXT4-fs: Ignoring removed nobh option [ 177.841522][T17650] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.864361][T17650] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.907230][T13025] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.920935][T17660] bridge0: port 4(gretap0) entered disabled state [ 177.927586][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.947104][T17662] loop9: detected capacity change from 0 to 512 [ 177.956730][T17662] EXT4-fs: Ignoring removed i_version option [ 177.979731][T17662] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.6310: corrupted in-inode xattr: overlapping e_value [ 177.995802][T17662] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.6310: couldn't read orphan inode 15 (err -117) [ 178.013264][T17662] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #2: comm syz.9.6310: Directory hole found for htree leaf block 0 [ 178.325558][T17606] ================================================================== [ 178.333710][T17606] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 178.341120][T17606] [ 178.343453][T17606] read-write to 0xffff88810060c6c0 of 8 bytes by interrupt on cpu 0: [ 178.351529][T17606] __xa_clear_mark+0xf5/0x1e0 [ 178.356222][T17606] __folio_end_writeback+0x177/0x470 [ 178.361531][T17606] folio_end_writeback+0x71/0x3d0 [ 178.366581][T17606] mpage_write_end_io+0x274/0x390 [ 178.371619][T17606] bio_endio+0x377/0x410 [ 178.375893][T17606] blk_update_request+0x336/0x730 [ 178.380943][T17606] blk_mq_end_request+0x26/0x50 [ 178.385821][T17606] lo_complete_rq+0x98/0x140 [ 178.390444][T17606] blk_done_softirq+0x74/0xb0 [ 178.395137][T17606] handle_softirqs+0xba/0x290 [ 178.399841][T17606] __irq_exit_rcu+0x3a/0xc0 [ 178.404367][T17606] common_interrupt+0x83/0x90 [ 178.409062][T17606] asm_common_interrupt+0x26/0x40 [ 178.414102][T17606] filemap_get_entry+0x9e/0x390 [ 178.418977][T17606] shmem_get_folio_gfp+0x1d7/0xd60 [ 178.424119][T17606] shmem_write_begin+0xa8/0x190 [ 178.429000][T17606] generic_perform_write+0x184/0x490 [ 178.434310][T17606] shmem_file_write_iter+0xc5/0xf0 [ 178.439441][T17606] lo_rw_aio+0x6ea/0x7a0 [ 178.443711][T17606] loop_process_work+0x52d/0xa60 [ 178.448676][T17606] loop_workfn+0x31/0x40 [ 178.452945][T17606] process_scheduled_works+0x4ce/0x9d0 [ 178.458430][T17606] worker_thread+0x582/0x770 [ 178.463057][T17606] kthread+0x486/0x510 [ 178.467138][T17606] ret_from_fork+0xda/0x150 [ 178.471659][T17606] ret_from_fork_asm+0x1a/0x30 [ 178.476440][T17606] [ 178.478787][T17606] read to 0xffff88810060c6c0 of 8 bytes by task 17606 on cpu 1: [ 178.486432][T17606] xas_find_marked+0x218/0x620 [ 178.491264][T17606] find_get_entry+0x5d/0x380 [ 178.495887][T17606] filemap_get_folios_tag+0x13b/0x210 [ 178.501287][T17606] file_write_and_wait_range+0x1ea/0x2c0 [ 178.506949][T17606] __generic_file_fsync+0x46/0x140 [ 178.512099][T17606] fat_file_fsync+0x49/0x100 [ 178.516708][T17606] vfs_fsync_range+0x10d/0x130 [ 178.521505][T17606] generic_file_write_iter+0x1b8/0x2f0 [ 178.526983][T17606] vfs_write+0x49d/0x8e0 [ 178.531256][T17606] ksys_write+0xda/0x1a0 [ 178.535529][T17606] __x64_sys_write+0x40/0x50 [ 178.540150][T17606] x64_sys_call+0x2cdd/0x2fb0 [ 178.544853][T17606] do_syscall_64+0xd2/0x200 [ 178.549411][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.555321][T17606] [ 178.557653][T17606] value changed: 0xfffffffffe000000 -> 0xfffffffff0000000 [ 178.564768][T17606] [ 178.567099][T17606] Reported by Kernel Concurrency Sanitizer on: [ 178.573275][T17606] CPU: 1 UID: 0 PID: 17606 Comm: syz.0.6287 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 178.584053][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.594124][T17606] ==================================================================