last executing test programs: 3m12.780368331s ago: executing program 32 (id=1001): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x7fffffff, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90) 3m1.60039622s ago: executing program 33 (id=1227): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m44.361377584s ago: executing program 34 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x394f, &(0x7f00000009c0)={0x0, 0x5881, 0x1000, 0x8005, 0x801001c2}, &(0x7f0000000240)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 2m13.193319079s ago: executing program 6 (id=2719): r0 = socket(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 2m13.138799673s ago: executing program 6 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x7c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfff7, 0x4, 0x5, 0x8}, {0x5, 0x5, 0x90, 0x4}, {0x1, 0x7, 0xff, 0x3}, {0x0, 0x3b, 0xc, 0xc7}, {0x8, 0x0, 0x8, 0x3}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) 2m13.070070259s ago: executing program 6 (id=2723): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2m12.93040282s ago: executing program 6 (id=2726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m12.848358706s ago: executing program 6 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") timer_create(0x3, 0x0, &(0x7f0000001440)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000007500000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='signal_generate\x00', r2}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2m12.79937755s ago: executing program 2 (id=2731): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$eJzs3ctrXFUYAPDvTpKmTWsTQdC6CggaKJ2YGlsFFxUXIlgo6Np2mExDzSRTMpPShIAWEVwoqLgQdNO1j7pz62Or/4ULsVRNixVBidzJ3HbaTNIknWSi8/vBTc65jznnm/s4Z+Ye7gTQtYbTP7mIQxHxfhIx2JifRERfPdUbcWJlvZtLi8V0SmJ5+ZXfkvo6N5YWi9G0TWp/I/NIRHz3dsTh3Opyq/MLU4VyuTTbyI/Wps+PVucXjpybLkyWJkszx8bGx48ef/r4sfbF+sePCweufvDiE1+e+Outh6+8930SJ+JAY1lzHO0yHMON96QvfQvv8EK7C+uwpNMVYEvSU7Nn5SyPQzEYPfUUAPB/9kZELAMAXSbR/gNAl8m+B7ixtFjMps5+I7Gzrj0fEXtX4s/ub64s6W3cs9tbvw86cCO5485IEhFDbSh/OCI+/fq1z9Mptuk+JEArb16KiDNDw6uv/8mqMQub9eQ6y/Y0/g/fNd/1D3bON2n/55lW/b/crf5PtOj/9Lc4d7finuf/vjYUso60//dc09i2m03xNwz1NHIP1Pt8fcnZc+VSem07GBEj0def5sfWKWPk+j/X756XvXq9//f3Sv/v9w9f/ywtP/3ftOYvvf13bjtRqBXuN+7MtUsRj/a2ij+5tf+TNfq/pzZYxkvPvvPJWsvS+NN4s2l1/NEYnbQ9li9HPN5y/98e0ZasOz5xtH44jGYHRQtf/fTxwFrlN/f/0yktP/sssBPS/T+wfvxDSfN4zermy/jh8uC3ay27d/ytj/89yav1dNaPuFio1WbHIvYkL6+ef/T2tlk+Wz+Nf+Sx1uf/esd/+pnwzAbj77366xfvHtxq/NsrjX9iU/t/84krN6d61ip/Y/t/vJ4aaczZyPVvoxW8n/cOAAAAAAAAAAAAAAAAAAAAAAAAADYqFxEHIsnlb6VzuXx+5Te8H4qBXLlSrR0+W5mbmYj6b2UPRV8ue9TlYNPzUMcaz8PP8kfvyj8VEQ9GxEf9+5LsOYoTHY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL71/j9/9TP/Z2uHQCwbfZ2ugIAwI7T/gNA99H+A0D30f4DQPfR/gNA99H+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM1OnTyZTst/Li0W0/zEhfm5qcqFIxOl6lR+eq6YL1Zmz+cnK5XJcilfrEzf6/XKlcr58ZiZuzhaK1Vro9X5hdPTlbmZ2ulz04XJ0ulS345EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbU51fmCqUy6VZiS0klu9r82SXRNGGRE/jcNot9dnRRLI7qtHmRIcvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ef8GAAD//+GAI2c=") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r3, 0x0, 0x0, 0x1001f3) fallocate(r3, 0x8, 0x0, 0x10000) 2m12.752355914s ago: executing program 6 (id=2732): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x34, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m12.752182424s ago: executing program 35 (id=2732): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x34, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m12.656216122s ago: executing program 2 (id=2735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x20000077, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 2m12.572301109s ago: executing program 2 (id=2737): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socket(0x80000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m12.374828134s ago: executing program 2 (id=2738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m12.354489316s ago: executing program 2 (id=2739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x81c44f, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 2m11.860988486s ago: executing program 2 (id=2751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) 2m11.860748645s ago: executing program 36 (id=2751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) 2m9.019372224s ago: executing program 8 (id=2808): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 2m8.896327154s ago: executing program 8 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xd52e, 0x0, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m8.709669249s ago: executing program 8 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.619859626s ago: executing program 8 (id=2816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 2m8.564557191s ago: executing program 8 (id=2819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r1, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r1) 2m7.364421647s ago: executing program 8 (id=2870): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m7.362143267s ago: executing program 37 (id=2870): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m3.47514176s ago: executing program 9 (id=2969): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2m3.400045075s ago: executing program 9 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m3.370042208s ago: executing program 9 (id=2972): pipe(&(0x7f0000000080)) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) prlimit64(0x0, 0x0, &(0x7f00000039c0)={0xc, 0xb6}, 0x0) syz_clone3(&(0x7f0000003e40)={0x162000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfe59) 2m3.118219258s ago: executing program 9 (id=2986): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0x800, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 2m2.948031072s ago: executing program 9 (id=2993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 2m2.495615588s ago: executing program 9 (id=3001): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) close(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4c591, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 2m2.494404298s ago: executing program 38 (id=3001): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) close(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4c591, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 1m49.983791723s ago: executing program 5 (id=3279): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) unshare(0x62040200) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4080) 1m49.635461852s ago: executing program 5 (id=3294): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7f, 0x1) fadvise64(r2, 0x7, 0x7, 0x7) 1m49.574284786s ago: executing program 5 (id=3306): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 1m49.425713748s ago: executing program 5 (id=3308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 1m49.387534941s ago: executing program 5 (id=3301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m49.121252963s ago: executing program 5 (id=3313): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, 0x0, 0x0, 0xed, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) 1m49.120731503s ago: executing program 39 (id=3313): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, 0x0, 0x0, 0xed, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) 2.73910831s ago: executing program 3 (id=6590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 2.124071949s ago: executing program 7 (id=6614): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 1.880107059s ago: executing program 4 (id=6609): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.793558266s ago: executing program 4 (id=6611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.793331716s ago: executing program 3 (id=6612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 1.593751951s ago: executing program 4 (id=6616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 1.499198149s ago: executing program 3 (id=6631): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a00000004000000e27f00000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.427979025s ago: executing program 1 (id=6622): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100000000, 0xe0182) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000000}) 1.385027018s ago: executing program 1 (id=6623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000faffffffffffffff000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.355865641s ago: executing program 4 (id=6625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.286160176s ago: executing program 7 (id=6630): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5}, 0x10) 1.284983886s ago: executing program 4 (id=6641): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 1.193455854s ago: executing program 0 (id=6632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x6, 0x10001) 1.192481874s ago: executing program 7 (id=6643): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a00000004000000e27f00000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.190701114s ago: executing program 3 (id=6644): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.170686826s ago: executing program 0 (id=6633): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffef, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 822.945974ms ago: executing program 0 (id=6634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 822.703584ms ago: executing program 1 (id=6635): r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 822.049383ms ago: executing program 7 (id=6648): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081"], 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 712.770682ms ago: executing program 3 (id=6636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 712.105132ms ago: executing program 0 (id=6637): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) 453.764533ms ago: executing program 4 (id=6638): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0xd9f7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 452.324873ms ago: executing program 3 (id=6639): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10}, 0xc) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000580)={0x2, 0x1}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0x3, 0x8, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) 451.457023ms ago: executing program 7 (id=6640): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 450.648063ms ago: executing program 0 (id=6642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}}, 0x0) 2.419369ms ago: executing program 1 (id=6645): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.20198ms ago: executing program 7 (id=6646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="61030604030280727ce716"], 0xb) 0s ago: executing program 0 (id=6656): r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) kernel console output (not intermixed with test programs): ss `+}[@'. [ 202.245206][T15113] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.367069][T15122] loop7: detected capacity change from 0 to 512 [ 202.376678][T15122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 202.384953][T15122] EXT4-fs (loop7): orphan cleanup on readonly fs [ 202.402726][T15122] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 202.422446][T15122] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 202.437673][T15122] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.4547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 202.463003][T15122] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4547: couldn't read orphan inode 13 (err -117) [ 202.477815][T15122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.552022][T13367] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 202.803164][T15164] lo speed is unknown, defaulting to 1000 [ 203.170206][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.215194][T15178] bridge: RTM_NEWNEIGH with invalid ether address [ 203.633009][T15200] loop3: detected capacity change from 0 to 2048 [ 203.653044][ T3385] usb usb8-port1: attempt power cycle [ 203.824019][T15225] loop3: detected capacity change from 0 to 512 [ 203.830958][T15225] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.844111][T15225] EXT4-fs (loop3): 1 truncate cleaned up [ 203.850364][T15225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.886308][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.058742][T15245] netlink: 'syz.0.4598': attribute type 27 has an invalid length. [ 204.097616][T15245] $Hÿ: left promiscuous mode [ 204.103092][T15245] dummy0: left promiscuous mode [ 204.120703][T15245] wg2: left promiscuous mode [ 204.125380][T15245] wg2: left allmulticast mode [ 204.168554][T15249] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4599'. [ 204.198586][T15245] team1: left promiscuous mode [ 204.203649][T15245] team1: left allmulticast mode [ 204.209748][T15245] vxlan0: left promiscuous mode [ 204.227229][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 204.227243][ T29] audit: type=1326 audit(210.146:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.257596][T15245] ip6gre1: left allmulticast mode [ 204.260930][ T29] audit: type=1326 audit(210.156:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.263856][T15245] team2: left promiscuous mode [ 204.286057][ T29] audit: type=1326 audit(210.156:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.290635][T15245] team2: left allmulticast mode [ 204.318546][ T29] audit: type=1326 audit(210.156:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.341550][ T29] audit: type=1326 audit(210.156:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.364747][ T29] audit: type=1326 audit(210.156:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.387783][ T29] audit: type=1326 audit(210.156:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.411189][ T29] audit: type=1326 audit(210.156:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.434183][ T29] audit: type=1326 audit(210.156:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.457407][ T29] audit: type=1326 audit(210.240:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 204.500984][T15247] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 204.510458][T15247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.526171][T13372] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.534611][T13372] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.568614][T15261] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4605'. [ 204.582204][T15257] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.589596][T15257] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.601384][T15264] serio: Serial port ptm0 [ 204.646080][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.656301][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.681231][T15257] ipvlan0: left allmulticast mode [ 204.686548][T15257] veth0_vlan: left allmulticast mode [ 204.702727][ T10] lo speed is unknown, defaulting to 1000 [ 204.708507][ T10] syz2: Port: 1 Link ACTIVE [ 204.715493][T13372] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.724307][T13372] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.737534][T13372] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.746305][T13372] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.774443][T13372] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.782916][T13372] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.798723][T13372] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.808780][T13372] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.818302][T13372] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.833418][T13372] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.956426][T15295] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4621'. [ 204.962979][T15291] loop3: detected capacity change from 0 to 2048 [ 204.975853][T15295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.987230][T15295] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 204.998522][T15295] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 205.016077][T15291] loop3: p2 p3 p7 [ 205.027010][T15295] bond0 (unregistering): Released all slaves [ 205.036243][T15291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4620'. [ 205.179285][T15321] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 205.307576][T15333] netlink: 'syz.0.4639': attribute type 10 has an invalid length. [ 205.315538][T15333] ipvlan0: entered allmulticast mode [ 205.321163][T15333] veth0_vlan: entered allmulticast mode [ 205.400169][T15345] tipc: Enabling of bearer rejected, already enabled [ 205.422097][T15349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.422110][T15349] IPv6: NLM_F_CREATE should be set when creating new route [ 205.449591][ T3385] usb usb8-port1: unable to enumerate USB device [ 205.862334][T15371] netlink: 'syz.1.4655': attribute type 3 has an invalid length. [ 205.901661][T15373] loop1: detected capacity change from 0 to 164 [ 205.969106][T15378] loop7: detected capacity change from 0 to 512 [ 205.992739][T15378] EXT4-fs (loop7): too many log groups per flexible block group [ 205.992827][T15378] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 205.992860][T15378] EXT4-fs (loop7): mount failed [ 206.267502][T15395] pimreg: entered allmulticast mode [ 206.297277][T15395] pimreg: left allmulticast mode [ 206.397812][T15418] SELinux: policydb version -299076691 does not match my version range 15-35 [ 206.429039][T15418] SELinux: failed to load policy [ 206.437377][T15421] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4674'. [ 206.457429][T15421] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 206.473384][T15421] 0ªî{X¹¦: entered allmulticast mode [ 206.485385][T15421] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 206.527117][T15429] vlan3: entered allmulticast mode [ 206.557286][T15432] bridge0: entered promiscuous mode [ 206.563074][T15432] bridge0: port 3(macsec0) entered blocking state [ 206.569735][T15432] bridge0: port 3(macsec0) entered disabled state [ 206.576804][T15432] macsec0: entered allmulticast mode [ 206.582215][T15432] bridge0: entered allmulticast mode [ 206.593759][T15432] macsec0: left allmulticast mode [ 206.599006][T15432] bridge0: left allmulticast mode [ 206.622107][T15432] bridge0: left promiscuous mode [ 206.622367][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4681'. [ 206.651865][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4681'. [ 206.798581][T15458] loop3: detected capacity change from 0 to 512 [ 206.828116][T15458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.841528][T15459] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 206.869053][T15464] loop7: detected capacity change from 0 to 128 [ 206.885675][T15458] EXT4-fs: Ignoring removed orlov option [ 206.891492][T15458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.900745][T15458] EXT4-fs (loop3): can't enable nombcache during remount [ 206.930975][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.941723][T15467] syz.7.4693: attempt to access beyond end of device [ 206.941723][T15467] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 206.956134][T15467] syz.7.4693: attempt to access beyond end of device [ 206.956134][T15467] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 206.969894][T15467] syz.7.4693: attempt to access beyond end of device [ 206.969894][T15467] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 206.983658][T15467] syz.7.4693: attempt to access beyond end of device [ 206.983658][T15467] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 206.997839][T15467] syz.7.4693: attempt to access beyond end of device [ 206.997839][T15467] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 207.011848][T15467] syz.7.4693: attempt to access beyond end of device [ 207.011848][T15467] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 207.030051][T15467] syz.7.4693: attempt to access beyond end of device [ 207.030051][T15467] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 207.044566][T15467] syz.7.4693: attempt to access beyond end of device [ 207.044566][T15467] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 207.059160][T15467] syz.7.4693: attempt to access beyond end of device [ 207.059160][T15467] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 207.072849][T15467] syz.7.4693: attempt to access beyond end of device [ 207.072849][T15467] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 207.258278][T15496] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4707'. [ 207.322056][T15507] loop4: detected capacity change from 0 to 2048 [ 207.358299][T15507] loop4: p1 < > p4 [ 207.365952][T15507] loop4: p4 size 8388608 extends beyond EOD, truncated [ 207.402761][T15515] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.435486][T15515] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.483259][T15515] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.530713][T15515] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.585520][T13366] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.597622][T13366] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.620481][T13366] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.637818][T13366] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.752679][T15526] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 207.829584][T15536] loop1: detected capacity change from 0 to 512 [ 207.852083][T15536] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 207.860538][T15536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 207.869584][T15536] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4726: Failed to acquire dquot type 1 [ 207.882267][T15536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4726: bg 0: block 40: padding at end of block bitmap is not set [ 207.900790][T15536] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 207.924770][T15536] EXT4-fs (loop1): 1 truncate cleaned up [ 207.939938][ T3914] kernel write not supported for file bpf-prog (pid: 3914 comm: kworker/0:4) [ 207.942190][T15536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.001924][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.250677][T15569] loop4: detected capacity change from 0 to 8192 [ 209.010500][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4763'. [ 209.160274][T15627] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 209.177832][T15629] pim6reg1: entered promiscuous mode [ 209.183199][T15629] pim6reg1: entered allmulticast mode [ 209.270824][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 209.270838][ T29] audit: type=1326 audit(215.437:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.300212][ T29] audit: type=1326 audit(215.437:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.331872][ T29] audit: type=1326 audit(215.489:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.354923][ T29] audit: type=1326 audit(215.489:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.378123][ T29] audit: type=1326 audit(215.500:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.401165][ T29] audit: type=1326 audit(215.500:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.424125][ T29] audit: type=1326 audit(215.500:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.478161][T15640] loop7: detected capacity change from 0 to 128 [ 209.502701][T15642] blktrace: Concurrent blktraces are not allowed on loop7 [ 209.519110][T15640] /dev/loop7: Can't open blockdev [ 209.557785][ T29] audit: type=1326 audit(215.500:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.581003][ T29] audit: type=1326 audit(215.500:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.604408][ T29] audit: type=1326 audit(215.500:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15632 comm="syz.0.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 209.634703][T15651] netlink: 360 bytes leftover after parsing attributes in process `syz.7.4780'. [ 209.925742][T15687] loop3: detected capacity change from 0 to 128 [ 209.931541][T15683] lo speed is unknown, defaulting to 1000 [ 209.942090][T15687] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.037429][T11060] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.118897][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4798'. [ 210.134733][T15700] loop7: detected capacity change from 0 to 128 [ 210.165308][T15700] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 210.206388][T15700] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 210.255766][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4804'. [ 210.410161][T15723] openvswitch: netlink: Message has 6 unknown bytes. [ 210.623952][T15744] loop3: detected capacity change from 0 to 512 [ 210.632083][T15744] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.667805][T15744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.712016][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.926632][T15765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15765 comm=syz.1.4829 [ 210.939294][T15765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15765 comm=syz.1.4829 [ 210.990331][T15770] @0Ù: renamed from bond_slave_1 [ 211.168260][T15795] loop1: detected capacity change from 0 to 512 [ 211.191429][T15795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.284377][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.346324][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4852'. [ 211.457888][T15828] ref_ctr increment failed for inode: 0xdb8 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881096c9700 [ 211.502157][T15827] uprobe: syz.7.4866:15827 failed to unregister, leaking uprobe [ 211.538715][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4860'. [ 211.571686][T15843] netlink: 'syz.0.4862': attribute type 13 has an invalid length. [ 211.612359][T15843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.693943][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4869'. [ 211.799871][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4872'. [ 211.842051][T15869] loop7: detected capacity change from 0 to 512 [ 211.859265][T15868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.868971][T15869] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.885284][T15869] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 211.906621][T15869] EXT4-fs (loop7): 1 truncate cleaned up [ 211.913464][T15869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.057112][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4884'. [ 212.100718][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.249902][T15909] loop1: detected capacity change from 0 to 512 [ 212.283183][T15909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.345974][T15909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4892: corrupted inode contents [ 212.394004][T15909] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.4892: mark_inode_dirty error [ 212.454325][T15909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4892: corrupted inode contents [ 212.477253][T15925] netlink: 'syz.4.4899': attribute type 13 has an invalid length. [ 212.487690][T15909] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4892: mark_inode_dirty error [ 212.535264][T15925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.559214][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.082277][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4909'. [ 213.091423][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4909'. [ 213.100432][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4909'. [ 213.109846][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4909'. [ 213.118978][T15948] netlink: 'syz.3.4909': attribute type 6 has an invalid length. [ 213.242054][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4916'. [ 213.270062][T15972] netlink: 'syz.3.4918': attribute type 2 has an invalid length. [ 213.277879][T15972] netlink: 'syz.3.4918': attribute type 1 has an invalid length. [ 213.285648][T15972] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4918'. [ 213.297802][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4916'. [ 213.509091][T15999] loop4: detected capacity change from 0 to 512 [ 213.541945][T16005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4933'. [ 213.552325][T15999] EXT4-fs (loop4): orphan cleanup on readonly fs [ 213.569684][T15999] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4930: bg 0: block 248: padding at end of block bitmap is not set [ 213.608978][T15999] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4930: Failed to acquire dquot type 1 [ 213.635134][T15999] EXT4-fs (loop4): 1 truncate cleaned up [ 213.644682][T15999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.703249][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.744849][T16031] gtp0: entered promiscuous mode [ 213.883269][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4953'. [ 213.932945][T16062] rdma_op ffff8881126ee580 conn xmit_rdma 0000000000000000 [ 214.170851][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 214.170869][ T29] audit: type=1326 audit(220.581:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.220405][ T29] audit: type=1326 audit(220.612:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.243354][ T29] audit: type=1326 audit(220.612:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.266541][ T29] audit: type=1326 audit(220.612:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.289496][ T29] audit: type=1326 audit(220.612:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.312540][ T29] audit: type=1326 audit(220.612:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.335543][ T29] audit: type=1326 audit(220.612:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.358614][ T29] audit: type=1326 audit(220.612:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.381604][ T29] audit: type=1326 audit(220.612:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.404530][ T29] audit: type=1326 audit(220.612:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.7.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 214.468489][T16091] loop7: detected capacity change from 0 to 512 [ 214.475640][T16091] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 214.489565][T16091] EXT4-fs (loop7): 1 orphan inode deleted [ 214.495476][T16091] EXT4-fs (loop7): 1 truncate cleaned up [ 214.505070][T16091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.630997][T16091] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 214.647063][T16091] EXT4-fs (loop7): Remounting filesystem read-only [ 214.683948][T16111] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.702582][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.723373][T16111] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.742748][T16118] loop7: detected capacity change from 0 to 512 [ 214.761564][T16111] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.762065][T16118] EXT4-fs (loop7): too many log groups per flexible block group [ 214.779301][T16118] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 214.786928][T16118] EXT4-fs (loop7): mount failed [ 214.830341][T16111] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.872876][T13386] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.885117][T13386] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.900186][T13386] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.908992][T13386] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.943422][T16136] loop3: detected capacity change from 0 to 512 [ 214.961155][T16136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.040775][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.134767][T16155] lo speed is unknown, defaulting to 1000 [ 215.278481][T16168] loop1: detected capacity change from 0 to 164 [ 215.292911][T16168] Unable to read rock-ridge attributes [ 215.303539][T16168] Unable to read rock-ridge attributes [ 215.317408][T16168] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 215.688220][T16186] loop4: detected capacity change from 0 to 512 [ 215.695003][T16186] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.706644][T16186] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5011: invalid indirect mapped block 83886080 (level 1) [ 215.720755][T16186] EXT4-fs (loop4): Remounting filesystem read-only [ 215.727568][T16186] EXT4-fs (loop4): 1 orphan inode deleted [ 215.733410][T16186] EXT4-fs (loop4): 1 truncate cleaned up [ 215.739409][T16186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.815237][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.921057][T16205] loop7: detected capacity change from 0 to 1024 [ 215.928298][T16205] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 216.176522][ T3385] Process accounting resumed [ 216.679108][T16278] loop4: detected capacity change from 0 to 1024 [ 216.686986][T16278] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.698004][T16278] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.710097][T16278] JBD2: no valid journal superblock found [ 216.715888][T16278] EXT4-fs (loop4): Could not load journal inode [ 216.967784][T16304] serio: Serial port ptm0 [ 217.179318][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.188000][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.199812][T16329] netlink: 'syz.7.5069': attribute type 10 has an invalid length. [ 217.447007][T16342] pim6reg1: entered promiscuous mode [ 217.452447][T16342] pim6reg1: entered allmulticast mode [ 217.487769][T16345] loop3: detected capacity change from 0 to 1024 [ 217.495055][T16345] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 217.525303][T16345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.540379][T16345] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.5077: missing EA_INODE flag [ 217.552507][T16345] EXT4-fs (loop3): Remounting filesystem read-only [ 217.569452][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.716856][T16362] loop3: detected capacity change from 0 to 2048 [ 217.738058][T16362] EXT4-fs (loop3): failed to initialize system zone (-117) [ 217.747425][T16362] EXT4-fs (loop3): mount failed [ 217.897885][T16392] loop3: detected capacity change from 0 to 1024 [ 217.914475][T16392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.945236][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.076256][T16420] loop7: detected capacity change from 0 to 2048 [ 218.097449][T16420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.119724][T16420] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 218.132240][T16420] EXT4-fs (loop7): This should not happen!! Data will be lost [ 218.132240][T16420] [ 218.142047][T16420] EXT4-fs (loop7): Total free blocks count 0 [ 218.148055][T16420] EXT4-fs (loop7): Free/Dirty block details [ 218.154060][T16420] EXT4-fs (loop7): free_blocks=0 [ 218.159105][T16420] EXT4-fs (loop7): dirty_blocks=0 [ 218.164252][T16420] EXT4-fs (loop7): Block reservation details [ 218.170265][T16420] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 218.185053][T16427] futex_wake_op: syz.1.5112 tries to shift op by -1; fix this program [ 218.216908][T16429] loop3: detected capacity change from 0 to 2048 [ 218.248989][T16429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.353521][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.401754][T16442] 9pnet_fd: Insufficient options for proto=fd [ 218.423550][T16442] __nla_validate_parse: 9 callbacks suppressed [ 218.423565][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5117'. [ 218.580486][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.995388][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 218.995415][ T29] audit: type=1326 audit(225.641:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.082059][ T29] audit: type=1326 audit(225.672:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.105147][ T29] audit: type=1326 audit(225.672:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.128100][ T29] audit: type=1326 audit(225.672:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.151077][ T29] audit: type=1326 audit(225.693:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.174270][ T29] audit: type=1326 audit(225.693:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.197490][ T29] audit: type=1326 audit(225.693:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.220557][ T29] audit: type=1326 audit(225.704:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.243491][ T29] audit: type=1326 audit(225.704:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.266413][ T29] audit: type=1326 audit(225.704:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.3.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 219.414261][T16475] loop7: detected capacity change from 0 to 512 [ 219.439733][T16475] EXT4-fs: Ignoring removed nobh option [ 219.466969][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.5132: corrupted inode contents [ 219.489391][T16475] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.5132: mark_inode_dirty error [ 219.530897][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.5132: corrupted inode contents [ 219.557440][T16475] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.5132: mark_inode_dirty error [ 219.623767][ T11] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 219.645969][T16475] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.5132: Failed to acquire dquot type 0 [ 219.684508][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5132: corrupted inode contents [ 219.723168][T16475] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.5132: mark_inode_dirty error [ 219.741707][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5132: corrupted inode contents [ 219.777868][T16475] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.5132: mark_inode_dirty error [ 219.802262][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5132: corrupted inode contents [ 219.814760][T16475] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 219.823681][T16475] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5132: corrupted inode contents [ 219.836155][T16475] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.5132: mark_inode_dirty error [ 219.851311][T16475] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 219.861786][T16475] EXT4-fs (loop7): 1 truncate cleaned up [ 219.871667][T16475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.909113][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.988258][T16542] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.014454][T16548] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.064597][T16548] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.240697][T16561] vlan2: entered allmulticast mode [ 220.294985][T16548] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.372470][T16548] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.478049][T13376] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.513239][T13376] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.543940][T16576] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5169'. [ 220.563405][T13376] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.595525][T13376] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.832770][T16588] tipc: Enabled bearer , priority 0 [ 220.840579][T16588] tipc: Disabling bearer [ 220.914482][T16594] loop7: detected capacity change from 0 to 512 [ 220.944413][T16594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.970312][T16594] EXT4-fs error (device loop7): ext4_empty_dir:3080: inode #12: comm syz.7.5177: Directory hole found for htree leaf block 0 [ 221.055562][T16609] vlan2: entered allmulticast mode [ 221.061310][T16594] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 221.130833][T16611] cgroup: Unknown subsys name 'cpuset' [ 221.249828][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.298280][T16621] netlink: 'syz.0.5201': attribute type 1 has an invalid length. [ 221.317982][T16621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.348022][T16621] bond1: (slave veth17): Enslaving as an active interface with a down link [ 221.373808][T16621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.381427][T16621] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 221.400742][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5191'. [ 221.564868][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 221.573982][T16639] netlink: 'syz.0.5197': attribute type 11 has an invalid length. [ 221.584183][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 221.593314][T16639] netlink: 'syz.0.5197': attribute type 11 has an invalid length. [ 222.062745][T16661] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 222.069326][T16661] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.077277][T16661] vhci_hcd vhci_hcd.0: Device attached [ 222.313234][ T3914] usb usb8-port1: attempt power cycle [ 222.370542][ T1036] usb 4-1: SetAddress Request (2) to port 0 [ 222.376674][ T1036] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 222.968074][T16662] vhci_hcd: connection reset by peer [ 222.981661][T13379] vhci_hcd: stop threads [ 222.986032][T13379] vhci_hcd: release socket [ 222.990522][T13379] vhci_hcd: disconnect device [ 223.261547][T16836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5230'. [ 223.423580][T16848] syzkaller0: entered promiscuous mode [ 223.429199][T16848] syzkaller0: entered allmulticast mode [ 223.730430][T16881] loop3: detected capacity change from 0 to 512 [ 223.740896][T16881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.762306][T16881] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5250: corrupted inode contents [ 223.775748][T16881] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.5250: mark_inode_dirty error [ 223.787605][T16881] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5250: corrupted inode contents [ 223.814285][T16881] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.5250: mark_inode_dirty error [ 223.859951][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.927182][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 223.927274][ T29] audit: type=1326 audit(230.827:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20bddd5ba7 code=0x7ffc0000 [ 223.956523][ T29] audit: type=1326 audit(230.827:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20bdd7ade9 code=0x7ffc0000 [ 223.984193][ T29] audit: type=1326 audit(230.827:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20bddd5ba7 code=0x7ffc0000 [ 224.007099][ T29] audit: type=1326 audit(230.827:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20bdd7ade9 code=0x7ffc0000 [ 224.030018][ T29] audit: type=1326 audit(230.827:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 224.053044][ T29] audit: type=1326 audit(230.827:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 224.076080][ T29] audit: type=1326 audit(230.827:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 224.099078][ T29] audit: type=1326 audit(230.827:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bdddebe9 code=0x7ffc0000 [ 224.171033][ T3914] usb usb8-port1: unable to enumerate USB device [ 224.194225][T16902] bridge: RTM_NEWNEIGH with invalid ether address [ 224.264609][T16900] syzkaller0: entered promiscuous mode [ 224.270209][T16900] syzkaller0: entered allmulticast mode [ 224.431897][ T29] audit: type=1326 audit(231.352:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.7.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29fbd95ba7 code=0x7ffc0000 [ 224.454787][ T29] audit: type=1326 audit(231.352:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.7.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29fbd3ade9 code=0x7ffc0000 [ 224.622989][T16940] loop7: detected capacity change from 0 to 2048 [ 225.072433][T16960] syzkaller0: entered promiscuous mode [ 225.077992][T16960] syzkaller0: entered allmulticast mode [ 225.170278][T16971] netlink: 332 bytes leftover after parsing attributes in process `syz.7.5287'. [ 225.241874][T16981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5292'. [ 225.835526][T17013] loop3: detected capacity change from 0 to 164 [ 225.844151][T17016] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.861924][T17013] bio_check_eod: 54 callbacks suppressed [ 225.861941][T17013] syz.3.5307: attempt to access beyond end of device [ 225.861941][T17013] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 225.929071][T17013] syz.3.5307: attempt to access beyond end of device [ 225.929071][T17013] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.014220][T17024] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5312'. [ 226.056099][T17024] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 226.067511][T17024] $Hÿ (unregistering): Released all slaves [ 226.156633][T17034] netlink: 'syz.0.5318': attribute type 3 has an invalid length. [ 226.185614][T17035] pimreg: entered allmulticast mode [ 226.224296][T17035] pimreg: left allmulticast mode [ 226.495058][T17060] vlan2: entered allmulticast mode [ 226.584576][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5334'. [ 226.598005][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5334'. [ 226.720722][T17075] loop4: detected capacity change from 0 to 512 [ 226.740087][T17075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.755978][T17075] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.5337: corrupted inode contents [ 226.768068][T17075] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.5337: mark_inode_dirty error [ 226.779793][T17075] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.5337: corrupted inode contents [ 226.792963][T17075] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.5337: mark_inode_dirty error [ 226.820753][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.844270][T17085] loop4: detected capacity change from 0 to 512 [ 226.861778][T17085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.880512][T17085] EXT4-fs: Ignoring removed orlov option [ 226.886507][T17085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.895023][T17085] EXT4-fs (loop4): can't enable nombcache during remount [ 226.912541][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.171906][ T1036] usb 4-1: device descriptor read/8, error -110 [ 227.276561][ T1036] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 227.308924][T17106] loop1: detected capacity change from 0 to 128 [ 227.310468][ T1036] usb 4-1: enqueue for inactive port 0 [ 227.338866][ T1036] usb 4-1: enqueue for inactive port 0 [ 227.370957][ T1036] usb 4-1: enqueue for inactive port 0 [ 227.499540][T17106] syz.1.5344: attempt to access beyond end of device [ 227.499540][T17106] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 227.561286][T17106] syz.1.5344: attempt to access beyond end of device [ 227.561286][T17106] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 227.619205][T17106] syz.1.5344: attempt to access beyond end of device [ 227.619205][T17106] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 227.672044][T17106] syz.1.5344: attempt to access beyond end of device [ 227.672044][T17106] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 227.745459][T17106] syz.1.5344: attempt to access beyond end of device [ 227.745459][T17106] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 227.812635][T17106] syz.1.5344: attempt to access beyond end of device [ 227.812635][T17106] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 227.877945][T17106] syz.1.5344: attempt to access beyond end of device [ 227.877945][T17106] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 227.943968][T17106] syz.1.5344: attempt to access beyond end of device [ 227.943968][T17106] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 228.255979][T17167] loop1: detected capacity change from 0 to 8192 [ 228.307307][T17171] loop1: detected capacity change from 0 to 2048 [ 228.342999][ T1036] usb usb4-port1: attempt power cycle [ 228.352915][T17171] loop1: p1 < > p4 [ 228.357369][T17171] loop1: p4 size 8388608 extends beyond EOD, truncated [ 228.941264][T17181] loop7: detected capacity change from 0 to 512 [ 228.984173][T17181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.054093][T17181] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5381: corrupted inode contents [ 229.072223][T17181] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.5381: mark_inode_dirty error [ 229.118747][T17181] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5381: corrupted inode contents [ 229.179846][T17181] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.5381: mark_inode_dirty error [ 229.280304][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.594477][T17208] loop1: detected capacity change from 0 to 128 [ 229.635231][T17208] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 229.644338][T17208] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 229.783702][T17217] openvswitch: netlink: Message has 6 unknown bytes. [ 229.823020][T17221] loop4: detected capacity change from 0 to 512 [ 229.837622][T17221] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.870525][T17221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.919588][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.144338][ T1036] usb usb4-port1: unable to enumerate USB device [ 230.292713][T17271] ref_ctr increment failed for inode: 0x72e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881427f4500 [ 230.307469][T17269] uprobe: syz.4.5429:17269 failed to unregister, leaking uprobe [ 230.747539][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5428'. [ 230.815502][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 230.815517][ T29] audit: type=1326 audit(238.049:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbe23ebe9 code=0x7ffc0000 [ 230.864664][ T29] audit: type=1326 audit(238.081:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fabbe23ebe9 code=0x7ffc0000 [ 230.887576][ T29] audit: type=1326 audit(238.081:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbe23ebe9 code=0x7ffc0000 [ 230.910623][ T29] audit: type=1326 audit(238.081:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fabbe23ebe9 code=0x7ffc0000 [ 230.933770][ T29] audit: type=1326 audit(238.081:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbe23ebe9 code=0x7ffc0000 [ 231.001827][T17311] loop7: detected capacity change from 0 to 128 [ 231.020324][T17311] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.103474][ T8063] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.128543][T17315] loop1: detected capacity change from 0 to 128 [ 231.147797][T17315] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.198795][T17315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.246806][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5444'. [ 231.278828][ T29] audit: type=1326 audit(238.543:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 231.302162][ T29] audit: type=1326 audit(238.543:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 231.325225][ T29] audit: type=1326 audit(238.543:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 231.348265][ T29] audit: type=1326 audit(238.543:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 231.360475][T17322] @0Ù: renamed from bond_slave_1 (while UP) [ 231.371289][ T29] audit: type=1326 audit(238.543:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 231.566765][T17353] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5453'. [ 231.822902][T17382] loop1: detected capacity change from 0 to 1024 [ 231.861439][T17382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.893252][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'. [ 231.905495][ T3385] hid_parser_main: 18 callbacks suppressed [ 231.905516][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.919142][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.926638][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.934051][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.941505][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.948968][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.956426][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.963885][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.971284][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 231.978906][ T3385] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 232.012372][T17397] pim6reg: entered allmulticast mode [ 232.021443][T17397] bridge0: entered allmulticast mode [ 232.027386][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.054299][ T3385] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 232.102379][T17407] loop7: detected capacity change from 0 to 1024 [ 232.144259][T17407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.182353][T17418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5482'. [ 232.233404][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.446683][T17446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17446 comm=syz.4.5495 [ 232.572675][T17466] pim6reg1: entered promiscuous mode [ 232.578046][T17466] pim6reg1: entered allmulticast mode [ 232.709108][T17476] loop3: detected capacity change from 0 to 2048 [ 232.755364][T17476] loop3: p1 < > p4 [ 232.763317][T17480] loop4: detected capacity change from 0 to 512 [ 232.768316][T17476] loop3: p4 size 8388608 extends beyond EOD, truncated [ 232.784715][T17482] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5511'. [ 232.809814][T17480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.896814][T17499] netlink: 'syz.1.5518': attribute type 13 has an invalid length. [ 232.950788][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.961145][T17499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.008514][T17512] netlink: 'syz.4.5523': attribute type 39 has an invalid length. [ 233.062406][T17519] netlink: 'syz.3.5527': attribute type 10 has an invalid length. [ 233.079907][T17522] serio: Serial port ttyS3 [ 233.085505][T17519] bond0: (slave dummy0): Releasing backup interface [ 233.095266][T17519] team0: Port device dummy0 added [ 233.121494][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5532'. [ 233.182007][T17537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5536'. [ 233.191013][T17537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5536'. [ 233.200158][T17537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5536'. [ 233.213477][T17530] lo speed is unknown, defaulting to 1000 [ 233.526504][T17558] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.545277][T17558] FAT-fs (loop3): unable to read boot sector [ 233.932973][T17576] loop4: detected capacity change from 0 to 128 [ 234.005525][T17584] IPv6: Can't replace route, no match found [ 234.032410][T17581] lo speed is unknown, defaulting to 1000 [ 234.409590][T17625] macvlan2: entered promiscuous mode [ 234.419091][T17625] macvlan3: entered promiscuous mode [ 234.441924][T17631] loop7: detected capacity change from 0 to 512 [ 234.451465][T17631] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5576: casefold flag without casefold feature [ 234.494492][T17631] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5576: couldn't read orphan inode 15 (err -117) [ 234.511374][T17631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.694214][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.817940][T17681] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.827423][T17681] FAT-fs (loop15): unable to read boot sector [ 234.952847][T17699] loop1: detected capacity change from 0 to 512 [ 234.966500][T17699] journal_path: Non-blockdev passed as './bus' [ 234.972796][T17699] EXT4-fs: error: could not find journal device path [ 234.991317][T17703] netlink: 'syz.7.5609': attribute type 3 has an invalid length. [ 235.290491][T17731] hub 6-0:1.0: USB hub found [ 235.295428][T17731] hub 6-0:1.0: 8 ports detected [ 235.584097][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 235.584111][ T29] audit: type=1326 audit(243.067:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29fbd95ba7 code=0x7ffc0000 [ 235.616140][T17758] __nla_validate_parse: 9 callbacks suppressed [ 235.616159][T17758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5633'. [ 235.624118][ T29] audit: type=1326 audit(243.088:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29fbd3ade9 code=0x7ffc0000 [ 235.654620][ T29] audit: type=1326 audit(243.088:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29fbd95ba7 code=0x7ffc0000 [ 235.677500][ T29] audit: type=1326 audit(243.088:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29fbd3ade9 code=0x7ffc0000 [ 235.700883][ T29] audit: type=1326 audit(243.088:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 235.723799][ T29] audit: type=1326 audit(243.109:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29fbd95ba7 code=0x7ffc0000 [ 235.746612][ T29] audit: type=1326 audit(243.109:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29fbd3ade9 code=0x7ffc0000 [ 235.769463][ T29] audit: type=1326 audit(243.109:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 235.792682][ T29] audit: type=1326 audit(243.141:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29fbd95ba7 code=0x7ffc0000 [ 235.815518][ T29] audit: type=1326 audit(243.141:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.7.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29fbd3ade9 code=0x7ffc0000 [ 235.858776][T17763] gtp0: entered promiscuous mode [ 235.904011][T17770] gtp0: entered promiscuous mode [ 236.037407][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5647'. [ 236.066824][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5647'. [ 236.153572][T17804] loop1: detected capacity change from 0 to 512 [ 236.163100][T17799] loop3: detected capacity change from 0 to 164 [ 236.193651][T17799] Unable to read rock-ridge attributes [ 236.200768][T17804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.212345][T17799] Unable to read rock-ridge attributes [ 236.219394][T17799] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 236.229225][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 236.320803][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5662'. [ 236.356411][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.369028][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5662'. [ 236.567385][T17849] pim6reg1: entered promiscuous mode [ 236.572758][T17849] pim6reg1: entered allmulticast mode [ 236.630743][T17858] loop3: detected capacity change from 0 to 1024 [ 236.653088][T17858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.725180][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.977441][T17875] cgroup: Unknown subsys name 'cpuset' [ 237.023048][T17879] loop3: detected capacity change from 0 to 512 [ 237.042264][T17879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.135710][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.335176][T17896] loop4: detected capacity change from 0 to 164 [ 237.357535][T17896] Unable to read rock-ridge attributes [ 237.373636][T17896] Unable to read rock-ridge attributes [ 237.389244][T17907] loop1: detected capacity change from 0 to 1024 [ 237.401428][T17908] syzkaller0: entered allmulticast mode [ 237.407805][T17896] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 237.418139][T17908] syzkaller0 (unregistering): left allmulticast mode [ 237.433613][T17907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.561142][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.665089][T17922] netlink: 'syz.7.5705': attribute type 39 has an invalid length. [ 237.674192][T17924] loop4: detected capacity change from 0 to 1024 [ 237.701382][T17924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.838495][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.872942][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5713'. [ 237.882136][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5713'. [ 237.891321][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5713'. [ 237.902061][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5713'. [ 237.911155][T17943] netlink: 'syz.4.5713': attribute type 6 has an invalid length. [ 237.939455][T17941] tipc: Enabling of bearer rejected, failed to enable media [ 237.988058][T17949] lo speed is unknown, defaulting to 1000 [ 237.996997][T17954] loop4: detected capacity change from 0 to 164 [ 238.071184][T17954] bio_check_eod: 53 callbacks suppressed [ 238.071203][T17954] syz.4.5720: attempt to access beyond end of device [ 238.071203][T17954] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 238.100122][T17954] syz.4.5720: attempt to access beyond end of device [ 238.100122][T17954] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 238.119427][T17953] lo speed is unknown, defaulting to 1000 [ 238.192965][T17962] netlink: 'syz.1.5723': attribute type 39 has an invalid length. [ 238.492708][T17978] tipc: Enabled bearer , priority 0 [ 238.519998][T17978] tipc: Disabling bearer [ 238.799836][T17992] loop1: detected capacity change from 0 to 512 [ 238.833422][T17992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.864987][T17998] loop7: detected capacity change from 0 to 164 [ 238.881041][T17992] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz.1.5733: Directory hole found for htree leaf block 0 [ 238.919610][T17998] syz.7.5738: attempt to access beyond end of device [ 238.919610][T17998] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 238.957492][T17998] syz.7.5738: attempt to access beyond end of device [ 238.957492][T17998] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 238.987411][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.164551][T18019] loop7: detected capacity change from 0 to 128 [ 239.182325][T18021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.182919][T18019] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.235138][T18021] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.246231][T18019] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.276970][T18021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.443626][T18050] netlink: 'syz.3.5758': attribute type 39 has an invalid length. [ 239.492979][T18062] @0Ù: renamed from bond_slave_1 (while UP) [ 239.542076][T18065] loop4: detected capacity change from 0 to 128 [ 239.562658][T18065] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.581441][T18065] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.654725][T18080] loop4: detected capacity change from 0 to 512 [ 239.685086][T18086] loop3: detected capacity change from 0 to 512 [ 239.685671][T18086] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.713145][T18081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.719600][T18086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.742644][T18080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.759184][T18086] EXT4-fs (loop3): 1 truncate cleaned up [ 239.768737][T18086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.813556][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.945076][T18100] lo speed is unknown, defaulting to 1000 [ 240.435949][T18104] lo speed is unknown, defaulting to 1000 [ 240.748391][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.769235][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 240.769255][ T29] audit: type=1326 audit(248.505:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.798598][ T29] audit: type=1326 audit(248.505:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.821882][ T29] audit: type=1326 audit(248.505:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.845013][ T29] audit: type=1326 audit(248.505:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.867926][ T29] audit: type=1326 audit(248.505:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.890920][ T29] audit: type=1326 audit(248.505:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.913935][ T29] audit: type=1326 audit(248.505:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.936886][ T29] audit: type=1326 audit(248.505:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.959839][ T29] audit: type=1326 audit(248.505:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 240.982817][ T29] audit: type=1326 audit(248.505:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.7.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fbd9ebe9 code=0x7ffc0000 [ 241.064354][T18120] loop3: detected capacity change from 0 to 128 [ 241.079755][T18120] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.097328][T18120] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.187417][T18129] __nla_validate_parse: 3 callbacks suppressed [ 241.187436][T18129] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5786'. [ 241.219307][T18128] netlink: 'syz.0.5784': attribute type 39 has an invalid length. [ 241.375835][ T3385] kernel write not supported for file bpf-prog (pid: 3385 comm: kworker/1:3) [ 241.635632][T18175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5805'. [ 241.745026][T18183] loop4: detected capacity change from 0 to 512 [ 241.753280][T18183] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.765349][T18183] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.772242][T18183] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5810: Failed to acquire dquot type 1 [ 241.785844][T18183] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5810: bg 0: block 40: padding at end of block bitmap is not set [ 241.800642][T18183] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 241.811050][T18183] EXT4-fs (loop4): 1 truncate cleaned up [ 241.817290][T18183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.850488][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.221350][T18220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18220 comm=syz.7.5825 [ 242.234073][T18220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18220 comm=syz.7.5825 [ 242.293287][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5827'. [ 242.334188][T18234] loop4: detected capacity change from 0 to 164 [ 242.374988][T18241] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5833'. [ 242.389393][T18245] SELinux: policydb version -299076691 does not match my version range 15-35 [ 242.390680][T18241] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 242.402949][T18245] SELinux: failed to load policy [ 242.410983][T18241] 0ªî{X¹¦: entered allmulticast mode [ 242.417594][T18241] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 242.443704][T18243] pimreg: entered allmulticast mode [ 242.452483][T18243] pimreg: left allmulticast mode [ 242.696208][T18277] serio: Serial port ptm0 [ 242.729678][T18281] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 243.060089][T18289] loop7: detected capacity change from 0 to 2048 [ 243.071760][T18294] bridge: RTM_NEWNEIGH with invalid ether address [ 243.152082][T18289] loop7: p2 p3 p7 [ 243.168293][T18289] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5855'. [ 243.187041][T18305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5862'. [ 243.197082][T18303] 0ªî{X¹¦: left allmulticast mode [ 243.225848][T18307] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5863'. [ 243.242266][T18303] ipvlan0: left allmulticast mode [ 243.247366][T18303] veth0_vlan: left allmulticast mode [ 243.269097][T18303] gtp0: left promiscuous mode [ 243.282208][ T3385] lo speed is unknown, defaulting to 1000 [ 243.287985][ T3385] syz2: Port: 1 Link DOWN [ 243.544491][T18346] ip6gre1: entered allmulticast mode [ 244.297713][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5908'. [ 244.339855][T18411] netlink: 'syz.4.5909': attribute type 13 has an invalid length. [ 244.368386][T18411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.558610][T18431] loop7: detected capacity change from 0 to 512 [ 244.567742][T18431] EXT4-fs (loop7): orphan cleanup on readonly fs [ 244.575649][T18431] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5915: bad orphan inode 13 [ 244.587553][T18431] ext4_test_bit(bit=12, block=18) = 1 [ 244.593095][T18431] is_bad_inode(inode)=0 [ 244.597334][T18431] NEXT_ORPHAN(inode)=2130706432 [ 244.602211][T18431] max_ino=32 [ 244.604740][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5917'. [ 244.605660][T18431] i_nlink=1 [ 244.627790][T18431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.659269][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.676030][ T1036] IPVS: starting estimator thread 0... [ 244.728484][T18447] loop4: detected capacity change from 0 to 1024 [ 244.735595][T18447] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.748225][T18447] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.5921: lblock 1 mapped to illegal pblock 1 (length 1) [ 244.763692][T18447] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5921: Failed to acquire dquot type 0 [ 244.776928][T18444] IPVS: using max 2208 ests per chain, 110400 per kthread [ 244.785081][T18447] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5921: Freeing blocks not in datazone - block = 0, count = 4096 [ 244.800231][T18447] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5921: Invalid inode bitmap blk 0 in block_group 0 [ 244.815049][T13399] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 244.829927][T13399] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:55: Failed to release dquot type 0 [ 244.835550][T18447] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 244.850325][T18447] EXT4-fs (loop4): 1 orphan inode deleted [ 244.857312][T18447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.879546][T18447] program syz.4.5921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.902856][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.033114][T18458] lo speed is unknown, defaulting to 1000 [ 245.098756][T18472] loop7: detected capacity change from 0 to 1024 [ 245.107837][T18472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.132694][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.374709][T18493] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.381844][T18493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.397562][T18492] serio: Serial port ttyS3 [ 245.490490][T18505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5947'. [ 245.540106][T18502] loop7: detected capacity change from 0 to 8192 [ 245.753371][T18533] loop7: detected capacity change from 0 to 2048 [ 245.778755][T18533] EXT4-fs (loop7): failed to initialize system zone (-117) [ 245.789193][T18533] EXT4-fs (loop7): mount failed [ 245.832558][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 245.832572][ T29] audit: type=1326 audit(253.828:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.873902][ T29] audit: type=1326 audit(253.828:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.896934][ T29] audit: type=1326 audit(253.828:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.920021][ T29] audit: type=1326 audit(253.828:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.924703][T18554] serio: Serial port ptm0 [ 245.942973][ T29] audit: type=1326 audit(253.828:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.970474][ T29] audit: type=1326 audit(253.828:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 245.993431][ T29] audit: type=1326 audit(253.828:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 246.016421][ T29] audit: type=1326 audit(253.828:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 246.039340][ T29] audit: type=1326 audit(253.828:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 246.062472][ T29] audit: type=1326 audit(253.859:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 246.088707][T18559] netlink: 'syz.7.5969': attribute type 13 has an invalid length. [ 246.123831][T18559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.684990][T18618] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.748507][T18618] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.796264][T18618] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.846723][T18618] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.889647][T13399] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.902697][T13399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.923453][T13399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.932326][T13399] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.979943][T18654] pim6reg1: entered promiscuous mode [ 246.985477][T18654] pim6reg1: entered allmulticast mode [ 247.468582][T18693] __nla_validate_parse: 3 callbacks suppressed [ 247.468599][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6025'. [ 247.600668][T18707] loop1: detected capacity change from 0 to 512 [ 247.607831][T18707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.623032][T18707] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.6033: invalid indirect mapped block 83886080 (level 1) [ 247.638831][T18707] EXT4-fs (loop1): Remounting filesystem read-only [ 247.645676][T18707] EXT4-fs (loop1): 1 orphan inode deleted [ 247.651487][T18707] EXT4-fs (loop1): 1 truncate cleaned up [ 247.658815][T18707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.740095][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.960365][T18735] loop1: detected capacity change from 0 to 512 [ 247.967619][T18735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.983685][T18735] EXT4-fs (loop1): 1 orphan inode deleted [ 247.989615][T18735] EXT4-fs (loop1): 1 truncate cleaned up [ 247.995851][T18735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.019995][T18741] serio: Serial port ptm0 [ 248.024904][T18738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 248.039842][T18738] EXT4-fs (loop1): Remounting filesystem read-only [ 248.165003][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.333894][T18774] netlink: 'syz.1.6060': attribute type 2 has an invalid length. [ 248.341762][T18774] netlink: 'syz.1.6060': attribute type 1 has an invalid length. [ 248.349527][T18774] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6060'. [ 248.674709][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6075'. [ 248.712429][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6079'. [ 248.721508][T18808] netlink: 'syz.7.6079': attribute type 11 has an invalid length. [ 248.730028][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6079'. [ 248.739118][T18808] netlink: 'syz.7.6079': attribute type 11 has an invalid length. [ 248.773284][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6082'. [ 248.782819][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6082'. [ 248.826856][T18818] loop4: detected capacity change from 0 to 1024 [ 248.834405][T18818] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 248.852396][T18822] loop1: detected capacity change from 0 to 128 [ 248.861318][T18822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.879279][T18822] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.904291][T18818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.950597][T18818] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.6093: missing EA_INODE flag [ 248.969113][T18818] EXT4-fs (loop4): Remounting filesystem read-only [ 249.002048][T18830] lo speed is unknown, defaulting to 1000 [ 249.048658][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.132039][T18842] serio: Serial port ptm0 [ 249.209588][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'. [ 249.219289][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'. [ 249.344681][T18873] loop3: detected capacity change from 0 to 128 [ 249.384482][T18873] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.408853][T18873] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.559827][T18876] lo speed is unknown, defaulting to 1000 [ 250.696881][T18935] lo speed is unknown, defaulting to 1000 [ 250.789565][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 250.789579][ T29] audit: type=1400 audit(259.024:8631): avc: denied { setopt } for pid=18945 comm="syz.4.6134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.834331][ T29] audit: type=1400 audit(259.024:8632): avc: denied { write } for pid=18945 comm="syz.4.6134" path="socket:[60743]" dev="sockfs" ino=60743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.868728][ T29] audit: type=1400 audit(259.098:8633): avc: denied { module_request } for pid=18948 comm="syz.0.6135" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 250.895255][ T29] audit: type=1400 audit(259.098:8634): avc: denied { sys_module } for pid=18948 comm="syz.0.6135" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.943404][T18955] 9pnet_fd: Insufficient options for proto=fd [ 250.953530][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6137'. [ 251.001586][ T29] audit: type=1400 audit(259.245:8635): avc: denied { create } for pid=18961 comm="syz.1.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.022166][ T29] audit: type=1400 audit(259.245:8636): avc: denied { connect } for pid=18961 comm="syz.1.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.041607][ T29] audit: type=1400 audit(259.245:8637): avc: denied { write } for pid=18961 comm="syz.1.6140" path="socket:[61729]" dev="sockfs" ino=61729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.234405][ T29] audit: type=1326 audit(259.497:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18970 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 251.263562][T18971] loop1: detected capacity change from 0 to 128 [ 251.282218][ T29] audit: type=1326 audit(259.518:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18970 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 251.305458][ T29] audit: type=1326 audit(259.518:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18970 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 251.597352][T18986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.614006][T18986] vlan2: entered allmulticast mode [ 251.619216][T18986] bond2: entered allmulticast mode [ 251.714661][T18999] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.758860][T18999] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.809158][T18999] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.854924][T18999] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.945291][T13395] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.956079][T13395] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.967738][T13378] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.980416][T13395] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.097383][T19021] loop3: detected capacity change from 0 to 2048 [ 252.111114][T19021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.129084][T19017] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 252.141599][T19017] EXT4-fs (loop3): This should not happen!! Data will be lost [ 252.141599][T19017] [ 252.151430][T19017] EXT4-fs (loop3): Total free blocks count 0 [ 252.157553][T19017] EXT4-fs (loop3): Free/Dirty block details [ 252.163484][T19017] EXT4-fs (loop3): free_blocks=0 [ 252.168571][T19017] EXT4-fs (loop3): dirty_blocks=0 [ 252.173648][T19017] EXT4-fs (loop3): Block reservation details [ 252.179756][T19017] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 252.305660][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.314367][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.335490][T19032] netlink: 'syz.1.6165': attribute type 10 has an invalid length. [ 252.346785][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.978824][T19060] netlink: 'syz.4.6177': attribute type 1 has an invalid length. [ 253.018069][T19060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.070133][T19060] bond1: (slave veth11): Enslaving as an active interface with a down link [ 253.135146][T19060] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 253.144826][T19060] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 253.361154][T19083] loop4: detected capacity change from 0 to 1024 [ 253.444216][T19104] __nla_validate_parse: 1 callbacks suppressed [ 253.444236][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6198'. [ 253.461279][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6198'. [ 253.470428][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6198'. [ 253.480363][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6198'. [ 253.489395][T19104] netlink: 'syz.7.6198': attribute type 6 has an invalid length. [ 253.545846][T19120] netlink: 'syz.1.6201': attribute type 30 has an invalid length. [ 253.668564][T19137] loop7: detected capacity change from 0 to 128 [ 253.694866][T19137] FAT-fs (loop7): Directory bread(block 32) failed [ 253.703834][T19137] FAT-fs (loop7): Directory bread(block 33) failed [ 253.711471][T19137] FAT-fs (loop7): Directory bread(block 34) failed [ 253.729007][T19137] FAT-fs (loop7): Directory bread(block 35) failed [ 253.744129][T19137] FAT-fs (loop7): Directory bread(block 36) failed [ 253.759620][T19137] FAT-fs (loop7): Directory bread(block 37) failed [ 253.767395][T19143] loop3: detected capacity change from 0 to 1024 [ 253.774600][T19137] FAT-fs (loop7): Directory bread(block 38) failed [ 253.782695][T19143] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 253.792963][T19137] FAT-fs (loop7): Directory bread(block 39) failed [ 253.800983][T19137] FAT-fs (loop7): Directory bread(block 40) failed [ 253.808469][T19137] FAT-fs (loop7): Directory bread(block 41) failed [ 253.832662][T19143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.893689][T19137] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 253.902342][T19137] FAT-fs (loop7): Filesystem has been set read-only [ 254.024266][T19137] +}[@: attempt to access beyond end of device [ 254.024266][T19137] loop7: rw=2049, sector=4184, nr_sectors = 16 limit=128 [ 254.060887][T19156] loop1: detected capacity change from 0 to 1024 [ 254.067471][T19137] +}[@: attempt to access beyond end of device [ 254.067471][T19137] loop7: rw=2049, sector=4208, nr_sectors = 4 limit=128 [ 254.080654][T19137] Buffer I/O error on dev loop7, logical block 1052, lost async page write [ 254.093509][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.109281][T19156] EXT4-fs: Ignoring removed oldalloc option [ 254.115555][T19156] EXT4-fs: Ignoring removed bh option [ 254.121059][T19137] +}[@: attempt to access beyond end of device [ 254.121059][T19137] loop7: rw=2049, sector=4216, nr_sectors = 4 limit=128 [ 254.134116][T19137] Buffer I/O error on dev loop7, logical block 1054, lost async page write [ 254.143239][T19137] +}[@: attempt to access beyond end of device [ 254.143239][T19137] loop7: rw=2049, sector=4228, nr_sectors = 4 limit=128 [ 254.156451][T19137] Buffer I/O error on dev loop7, logical block 1057, lost async page write [ 254.165970][T19137] +}[@: attempt to access beyond end of device [ 254.165970][T19137] loop7: rw=2049, sector=4236, nr_sectors = 4 limit=128 [ 254.179041][T19137] Buffer I/O error on dev loop7, logical block 1059, lost async page write [ 254.188149][T19137] +}[@: attempt to access beyond end of device [ 254.188149][T19137] loop7: rw=2049, sector=4240, nr_sectors = 4 limit=128 [ 254.217114][T19156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.235141][T19159] loop3: detected capacity change from 0 to 512 [ 254.249953][T19156] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 254.268018][T19159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.305317][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.336162][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.368160][T19176] loop3: detected capacity change from 0 to 512 [ 254.395938][T19176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.431345][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.471538][T19188] serio: Serial port ptm0 [ 254.571323][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 254.587198][T19205] IPVS: Error joining to the multicast group [ 254.654586][T19215] netlink: 'syz.3.6239': attribute type 7 has an invalid length. [ 254.662409][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6239'. [ 254.769948][T19234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6247'. [ 254.826224][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6251'. [ 254.866710][T19244] netlink: 'syz.0.6251': attribute type 2 has an invalid length. [ 255.106574][T19280] netlink: 'syz.3.6266': attribute type 5 has an invalid length. [ 255.174382][T19292] team0 (unregistering): Port device team_slave_0 removed [ 255.184134][T19292] team0 (unregistering): Port device team_slave_1 removed [ 255.195018][T19292] team0 (unregistering): Port device dummy0 removed [ 255.293742][T19299] loop1: detected capacity change from 0 to 164 [ 255.306505][ T3914] kernel write not supported for file [eventfd] (pid: 3914 comm: kworker/0:4) [ 255.331261][T19299] iso9660: Unknown parameter '' [ 255.479727][T19297] netlink: 'syz.0.6273': attribute type 21 has an invalid length. [ 255.487742][T19297] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6273'. [ 255.587864][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6285'. [ 255.639235][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 255.639275][ T29] audit: type=1400 audit(264.116:8902): avc: denied { write } for pid=19326 comm="syz.3.6287" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 255.701885][ T29] audit: type=1400 audit(264.168:8903): avc: denied { bind } for pid=19338 comm="syz.3.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.784621][T19353] vlan3: entered allmulticast mode [ 255.848951][ T29] audit: type=1400 audit(264.336:8904): avc: denied { setopt } for pid=19364 comm="syz.4.6304" lport=40667 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.984134][T19378] bridge0: port 3(vlan2) entered blocking state [ 255.990753][T19378] bridge0: port 3(vlan2) entered disabled state [ 256.014454][T19378] vlan2: entered allmulticast mode [ 256.023667][T19378] vlan2: left allmulticast mode [ 256.044062][ T29] audit: type=1326 audit(264.525:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.067129][ T29] audit: type=1326 audit(264.525:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.090156][ T29] audit: type=1326 audit(264.536:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4cd16014a5 code=0x7ffc0000 [ 256.113207][ T29] audit: type=1326 audit(264.536:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.136407][ T29] audit: type=1326 audit(264.536:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.159340][ T29] audit: type=1326 audit(264.536:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.182383][ T29] audit: type=1326 audit(264.536:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.1.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd15cebe9 code=0x7ffc0000 [ 256.193273][T19387] loop2: detected capacity change from 0 to 7 [ 256.248831][T19391] netlink: 'syz.3.6315': attribute type 13 has an invalid length. [ 256.276107][T19391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.612872][T19440] loop1: detected capacity change from 0 to 512 [ 256.656888][T19440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.799681][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.098148][T19494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19494 comm=syz.7.6359 [ 257.482186][T19530] 9pnet: p9_errstr2errno: server reported unknown error [ 257.506840][T19535] loop3: detected capacity change from 0 to 512 [ 257.515309][T19535] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6378: casefold flag without casefold feature [ 257.529858][T19535] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6378: couldn't read orphan inode 15 (err -117) [ 257.543664][T19535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.676394][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.714197][T19552] loop4: detected capacity change from 0 to 512 [ 257.731867][T19552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.852165][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.023474][T19576] loop4: detected capacity change from 0 to 164 [ 258.043569][T19576] rock: directory entry would overflow storage [ 258.049919][T19576] rock: sig=0x66, size=4, remaining=3 [ 258.061456][T19576] rock: directory entry would overflow storage [ 258.067741][T19576] rock: sig=0x66, size=4, remaining=3 [ 258.163310][T19589] loop4: detected capacity change from 0 to 512 [ 258.193790][T19589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.250356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812cd07800: rx timeout, send abort [ 258.258742][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812cd07800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 258.273074][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881072eb400: rx timeout, send abort [ 258.281659][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881072eb400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 258.346605][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.385341][T19607] bridge0: entered promiscuous mode [ 258.392360][T19607] bridge0: port 3(macvtap0) entered blocking state [ 258.399011][T19607] bridge0: port 3(macvtap0) entered disabled state [ 258.408886][T19607] macvtap0: entered allmulticast mode [ 258.416193][T19607] macvtap0: left allmulticast mode [ 258.426953][T19607] bridge0: left promiscuous mode [ 259.280813][T19651] loop3: detected capacity change from 0 to 512 [ 259.304661][T19651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.366385][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.252751][T19678] loop3: detected capacity change from 0 to 164 [ 260.262685][T19678] syz.3.6431: attempt to access beyond end of device [ 260.262685][T19678] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.277122][T19678] syz.3.6431: attempt to access beyond end of device [ 260.277122][T19678] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.315919][T19685] __nla_validate_parse: 5 callbacks suppressed [ 260.315931][T19685] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.6434'. [ 260.331360][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6434'. [ 260.381846][T19687] netlink: 'syz.3.6437': attribute type 1 has an invalid length. [ 260.395109][T19687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.415057][T19687] bond1: (slave veth19): Enslaving as an active interface with a down link [ 260.432571][T19687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.440212][T19687] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 260.674241][ T3914] usb usb8-port1: attempt power cycle [ 261.075778][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 261.075795][ T29] audit: type=1400 audit(269.827:8984): avc: denied { bind } for pid=19690 comm="syz.4.6440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.084696][T19693] loop7: detected capacity change from 0 to 512 [ 261.105784][ T29] audit: type=1400 audit(269.827:8985): avc: denied { setopt } for pid=19690 comm="syz.4.6440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.129726][T19693] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.140255][T19692] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.167492][T19693] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 261.177727][T19693] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 261.187701][T19693] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6438: Failed to acquire dquot type 1 [ 261.207165][T19693] EXT4-fs (loop7): 1 truncate cleaned up [ 261.213374][T19693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.226931][T19692] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.262723][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.289539][T19692] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.309676][ T29] audit: type=1326 audit(270.058:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19701 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 261.332817][ T29] audit: type=1326 audit(270.058:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19701 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 261.355881][ T29] audit: type=1326 audit(270.058:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19701 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 261.378819][ T29] audit: type=1326 audit(270.058:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19701 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 261.401807][ T29] audit: type=1326 audit(270.068:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19701 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33854ebe9 code=0x7ffc0000 [ 261.411965][T19706] loop3: detected capacity change from 0 to 8192 [ 261.456344][T19692] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.501442][T13387] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.520375][T13387] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.541637][T13387] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.552449][T13387] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.568400][ T29] audit: type=1400 audit(270.341:8991): avc: denied { unmount } for pid=19711 comm="syz.3.6447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 262.475007][ T3914] usb usb8-port1: unable to enumerate USB device [ 262.497553][T19720] netlink: 'syz.1.6450': attribute type 1 has an invalid length. [ 262.515665][T19720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.532942][T19726] loop7: detected capacity change from 0 to 1024 [ 262.550316][T19720] bond3: (slave veth5): Enslaving as an active interface with a down link [ 262.558996][T19728] netem: incorrect ge model size [ 262.565675][T19726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.598927][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6456'. [ 262.610556][T19720] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 262.620503][T19720] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 262.844546][T19726] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 262.907472][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.329769][T19753] loop7: detected capacity change from 0 to 512 [ 263.353214][T19753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.647848][T19773] wg2: entered promiscuous mode [ 263.652800][T19773] wg2: entered allmulticast mode [ 263.656574][T19775] netlink: 'syz.0.6472': attribute type 1 has an invalid length. [ 263.698461][T19775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.747951][T19777] bond2: (slave veth21): Enslaving as an active interface with a down link [ 263.782450][T19775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.790498][T19775] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 263.923217][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6476'. [ 263.951405][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6476'. [ 264.182562][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.280371][T19802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19802 comm=syz.1.6483 [ 264.455952][T19817] netlink: 'syz.4.6498': attribute type 10 has an invalid length. [ 264.467572][T19817] bond0: (slave dummy0): Releasing backup interface [ 264.479292][T19817] netlink: 'syz.4.6498': attribute type 10 has an invalid length. [ 264.492361][T19817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.499890][T19819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6488'. [ 264.542372][T19823] loop4: detected capacity change from 0 to 512 [ 264.562741][T19823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.123821][T19876] loop7: detected capacity change from 0 to 8192 [ 265.150935][T19876] loop7: p1 p2 < > p3 p4 < p5 > [ 265.155919][T19876] loop7: partition table partially beyond EOD, truncated [ 265.169416][T19876] loop7: p1 size 100663296 extends beyond EOD, truncated [ 265.178397][T19876] loop7: p2 start 591104 is beyond EOD, truncated [ 265.184887][T19876] loop7: p3 start 33572980 is beyond EOD, truncated [ 265.206463][T19876] loop7: p5 size 100663296 extends beyond EOD, truncated [ 265.400978][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.648074][T19958] netlink: 'syz.3.6504': attribute type 10 has an invalid length. [ 265.680528][T19958] netlink: 'syz.3.6504': attribute type 10 has an invalid length. [ 265.689349][T19963] rdma_op ffff88811c8a8d80 conn xmit_rdma 0000000000000000 [ 265.714264][T19958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.750155][T19970] loop7: detected capacity change from 0 to 512 [ 265.765954][T19970] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.6509: error while reading EA inode 32 err=-116 [ 265.785310][T19970] EXT4-fs (loop7): Remounting filesystem read-only [ 265.791961][T19970] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 265.803789][T19970] EXT4-fs (loop7): 1 orphan inode deleted [ 265.810764][T19970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.835624][T19980] netlink: 'syz.4.6512': attribute type 30 has an invalid length. [ 265.857799][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.924754][T19995] loop7: detected capacity change from 0 to 512 [ 265.939754][T19995] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.6514: casefold flag without casefold feature [ 265.970775][T19995] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6514: couldn't read orphan inode 15 (err -117) [ 265.985281][T19995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.049857][T20010] netlink: 'syz.4.6517': attribute type 13 has an invalid length. [ 266.068896][T20010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.084705][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 266.084740][ T29] audit: type=1400 audit(275.065:9581): avc: denied { create } for pid=20007 comm="syz.1.6518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.109882][ T29] audit: type=1400 audit(275.076:9582): avc: denied { bind } for pid=20007 comm="syz.1.6518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.166246][T20012] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6519'. [ 266.189029][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.278753][T20024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20024 comm=syz.7.6525 [ 266.419736][T20028] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6527'. [ 266.531310][ T29] audit: type=1400 audit(275.548:9583): avc: denied { mac_admin } for pid=20045 comm="syz.7.6534" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.551987][ T29] audit: type=1400 audit(275.548:9584): avc: denied { relabelto } for pid=20045 comm="syz.7.6534" name="file0" dev="tmpfs" ino=5271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 266.578143][ T29] audit: type=1400 audit(275.548:9585): avc: denied { associate } for pid=20045 comm="syz.7.6534" name="file0" dev="tmpfs" ino=5271 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 266.621725][ T29] audit: type=1400 audit(275.642:9586): avc: denied { unlink } for pid=8063 comm="syz-executor" name="file0" dev="tmpfs" ino=5271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 266.703249][ T29] audit: type=1400 audit(275.726:9587): avc: denied { mounton } for pid=20049 comm="syz.4.6537" path="/589/file0" dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 266.764327][ T29] audit: type=1400 audit(275.789:9588): avc: denied { mounton } for pid=20065 comm="syz.3.6543" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 266.800765][ T29] audit: type=1400 audit(275.821:9589): avc: denied { setopt } for pid=20069 comm="syz.0.6545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.820040][ T29] audit: type=1400 audit(275.821:9590): avc: denied { unmount } for pid=11060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 267.071892][T20099] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 267.086883][T20100] pim6reg1: entered promiscuous mode [ 267.092263][T20100] pim6reg1: entered allmulticast mode [ 267.097917][T20099] loop3: detected capacity change from 0 to 2048 [ 267.113976][T20099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.127972][T20099] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 267.153863][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.228374][T20112] loop7: detected capacity change from 0 to 8192 [ 267.466316][T20130] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6572'. [ 267.493629][T20132] loop4: detected capacity change from 0 to 128 [ 267.555172][T20135] syz.4.6573: attempt to access beyond end of device [ 267.555172][T20135] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 267.570940][T20135] syz.4.6573: attempt to access beyond end of device [ 267.570940][T20135] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 267.584855][T20135] syz.4.6573: attempt to access beyond end of device [ 267.584855][T20135] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 267.599743][T20135] syz.4.6573: attempt to access beyond end of device [ 267.599743][T20135] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 267.617103][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6576'. [ 267.623331][T20135] syz.4.6573: attempt to access beyond end of device [ 267.623331][T20135] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 267.627073][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6576'. [ 267.659504][T20135] syz.4.6573: attempt to access beyond end of device [ 267.659504][T20135] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 267.690175][T20135] syz.4.6573: attempt to access beyond end of device [ 267.690175][T20135] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 267.708936][T20135] syz.4.6573: attempt to access beyond end of device [ 267.708936][T20135] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 267.713046][T20143] bridge0: port 1(macsec0) entered blocking state [ 267.722959][T20135] syz.4.6573: attempt to access beyond end of device [ 267.722959][T20135] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 267.728918][T20143] bridge0: port 1(macsec0) entered disabled state [ 267.742623][T20135] syz.4.6573: attempt to access beyond end of device [ 267.742623][T20135] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 267.751874][T20143] macsec0: entered allmulticast mode [ 267.767649][T20143] bridge0: entered allmulticast mode [ 267.773602][T20143] macsec0: left allmulticast mode [ 267.778703][T20143] bridge0: left allmulticast mode [ 267.809865][T20147] SELinux: policydb version -299076691 does not match my version range 15-35 [ 267.819329][T20147] SELinux: failed to load policy [ 267.855943][T20151] pimreg: entered allmulticast mode [ 267.863303][T20151] pimreg: left allmulticast mode [ 267.928852][T20162] loop4: detected capacity change from 0 to 512 [ 267.957296][T20162] EXT4-fs (loop4): too many log groups per flexible block group [ 267.965315][T20162] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 267.986455][T20162] EXT4-fs (loop4): mount failed [ 268.124585][T20170] loop7: detected capacity change from 0 to 164 [ 268.171537][T20181] loop7: detected capacity change from 0 to 512 [ 268.183623][T20181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.229504][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.277636][T20191] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6598'. [ 268.293567][T20193] netlink: 'syz.7.6596': attribute type 30 has an invalid length. [ 268.304322][T20191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.347621][T20191] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 268.358656][T20191] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 268.368905][T20191] bond0 (unregistering): Released all slaves [ 269.087861][T20227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6611'. [ 269.116579][T20227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.135368][T20227] vlan2: entered allmulticast mode [ 269.140587][T20227] bond0: entered allmulticast mode [ 269.323203][T20240] binfmt_misc: register: failed to install interpreter file ./file2 [ 269.399235][T20246] loop3: detected capacity change from 0 to 1024 [ 269.406124][T20246] EXT4-fs: Ignoring removed bh option [ 269.423540][T20246] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 269.457708][T20246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.540579][T20261] loop4: detected capacity change from 0 to 164 [ 269.611223][T20263] vlan3: entered allmulticast mode [ 269.633365][T11060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.692218][T20274] loop7: detected capacity change from 0 to 1024 [ 269.700932][T20274] EXT4-fs: Ignoring removed bh option [ 269.707222][T20274] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 269.710679][T20277] netlink: 'syz.0.6633': attribute type 10 has an invalid length. [ 269.724846][T20274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.738735][T20275] netlink: 'syz.3.6644': attribute type 27 has an invalid length. [ 269.747199][T20277] netlink: 'syz.0.6633': attribute type 10 has an invalid length. [ 269.855562][ T8063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.966026][T20275] wg2: left promiscuous mode [ 269.970802][T20275] wg2: left allmulticast mode [ 269.987856][T20275] gtp0: left promiscuous mode [ 270.034182][T20280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.071935][T20295] loop2: detected capacity change from 0 to 7 [ 270.101837][T20280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.169161][T20300] ref_ctr increment failed for inode: 0x1c94 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881096ca840 [ 270.181450][T20299] uprobe: syz.0.6637:20299 failed to unregister, leaking uprobe [ 270.426691][T20302] loop4: detected capacity change from 0 to 512 [ 270.434463][T20302] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.439400][T20307] pim6reg: entered allmulticast mode [ 270.442223][T20302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.465755][T20302] EXT4-fs (loop4): 1 truncate cleaned up [ 270.471954][T20307] bridge0: entered allmulticast mode [ 270.477937][T20302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.897806][T20319] vlan2: entered allmulticast mode [ 270.936177][T13411] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 270.949272][T20310] ================================================================== [ 270.957449][T20310] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 270.965916][T20310] [ 270.968264][T20310] write to 0xffff88810b2c4f94 of 4 bytes by task 20302 on cpu 0: [ 270.976003][T20310] __xa_set_mark+0x172/0x1a0 [ 270.980723][T20310] __folio_mark_dirty+0x3af/0x4d0 [ 270.985770][T20310] mark_buffer_dirty+0x11e/0x210 [ 270.990729][T20310] block_write_end+0x12d/0x210 [ 270.995526][T20310] ext4_write_end+0x134/0x730 [ 271.000222][T20310] generic_perform_write+0x312/0x490 [ 271.005637][T20310] ext4_buffered_write_iter+0x1ee/0x3c0 [ 271.011238][T20310] ext4_file_write_iter+0xdbf/0xf00 [ 271.016492][T20310] iter_file_splice_write+0x663/0xa60 [ 271.021902][T20310] direct_splice_actor+0x153/0x2a0 [ 271.027035][T20310] splice_direct_to_actor+0x30f/0x680 [ 271.032446][T20310] do_splice_direct+0xda/0x150 [ 271.037231][T20310] do_sendfile+0x380/0x650 [ 271.041789][T20310] __x64_sys_sendfile64+0x105/0x150 [ 271.047208][T20310] x64_sys_call+0x2bb0/0x2ff0 [ 271.052088][T20310] do_syscall_64+0xd2/0x200 [ 271.056633][T20310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.062555][T20310] [ 271.064900][T20310] read to 0xffff88810b2c4f94 of 4 bytes by task 20310 on cpu 1: [ 271.072567][T20310] filemap_write_and_wait_range+0xfc/0x340 [ 271.078416][T20310] ext4_file_write_iter+0xe04/0xf00 [ 271.083687][T20310] iter_file_splice_write+0x663/0xa60 [ 271.089110][T20310] direct_splice_actor+0x153/0x2a0 [ 271.094238][T20310] splice_direct_to_actor+0x30f/0x680 [ 271.099681][T20310] do_splice_direct+0xda/0x150 [ 271.104464][T20310] do_sendfile+0x380/0x650 [ 271.108911][T20310] __x64_sys_sendfile64+0x105/0x150 [ 271.114157][T20310] x64_sys_call+0x2bb0/0x2ff0 [ 271.118869][T20310] do_syscall_64+0xd2/0x200 [ 271.123488][T20310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.129412][T20310] [ 271.131758][T20310] value changed: 0x00000021 -> 0x0a000021 [ 271.137496][T20310] [ 271.139836][T20310] Reported by Kernel Concurrency Sanitizer on: [ 271.146024][T20310] CPU: 1 UID: 0 PID: 20310 Comm: syz.4.6638 Not tainted syzkaller #0 PREEMPT(voluntary) [ 271.155857][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.166043][T20310] ================================================================== [ 271.372676][T12001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.