last executing test programs: 1m24.862855681s ago: executing program 1 (id=2436): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m24.846812801s ago: executing program 1 (id=2428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m24.783441682s ago: executing program 1 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xad}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 1m24.35180142s ago: executing program 1 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 1m24.269679732s ago: executing program 1 (id=2453): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.018166057s ago: executing program 1 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1m24.017906187s ago: executing program 32 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1m23.296370681s ago: executing program 0 (id=2474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x40, 0x7, 0x10100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xe}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1m23.016338166s ago: executing program 0 (id=2478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 1m23.007889406s ago: executing program 0 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 1m22.771617861s ago: executing program 0 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m22.716373032s ago: executing program 0 (id=2492): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 1m22.32207296s ago: executing program 0 (id=2509): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x110800, 0x10000, 0x6, 0x4791637ad82888bf, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r0, 0x0) 1m22.32183628s ago: executing program 33 (id=2509): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x110800, 0x10000, 0x6, 0x4791637ad82888bf, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r0, 0x0) 1m12.820522793s ago: executing program 6 (id=2841): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.745937665s ago: executing program 6 (id=2842): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000070000000c00160000000000000000001400080000"], 0x3c}}, 0x0) 1m12.745573455s ago: executing program 6 (id=2843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1m12.715210055s ago: executing program 6 (id=2845): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 1m12.714627576s ago: executing program 6 (id=2846): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m8.641391104s ago: executing program 6 (id=2969): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 5.478287064s ago: executing program 8 (id=5416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r0, &(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x0) 5.453809845s ago: executing program 8 (id=5417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) 5.16703748s ago: executing program 8 (id=5419): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x1, 'f'}, 0x1, 0x56, 0x3, 0x8, 0x1, '/'}}, 0x13) 5.16681057s ago: executing program 36 (id=5419): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x1, 'f'}, 0x1, 0x56, 0x3, 0x8, 0x1, '/'}}, 0x13) 1.777580706s ago: executing program 7 (id=5488): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x4, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {0x0, 0x7fff}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x1, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x4, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0xfffffffc}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x646, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x4, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x8, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.599549879s ago: executing program 9 (id=5492): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 1.164082348s ago: executing program 2 (id=5494): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x20060400) setresuid(0xee00, 0xee01, 0x0) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.159390758s ago: executing program 7 (id=5505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.109545519s ago: executing program 9 (id=5495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 1.076187719s ago: executing program 7 (id=5497): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 1.070970279s ago: executing program 2 (id=5498): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xb3e2}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.05320858s ago: executing program 9 (id=5499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x20006}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0xe2002, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.0481215s ago: executing program 2 (id=5501): syz_usbip_server_init(0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 993.357841ms ago: executing program 7 (id=5503): open(0x0, 0x14927e, 0x30) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 978.585261ms ago: executing program 9 (id=5506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 922.432462ms ago: executing program 4 (id=5508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) close_range(r1, 0xffffffffffffffff, 0x0) 892.926963ms ago: executing program 4 (id=5509): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$int_in(r1, 0x5452, &(0x7f00000004c0)=0x1) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 391.294503ms ago: executing program 2 (id=5511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 385.907793ms ago: executing program 9 (id=5521): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 367.947523ms ago: executing program 9 (id=5513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000740)={r2, 0x1006}, 0x8) 367.744703ms ago: executing program 3 (id=5514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f2a7ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100000000000000ffff0a00000a14"], 0x28}}, 0x0) 358.305703ms ago: executing program 2 (id=5515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 316.764104ms ago: executing program 3 (id=5516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, 0x0, 0x0) 294.330364ms ago: executing program 3 (id=5517): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xb3e2}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 277.786705ms ago: executing program 3 (id=5518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',aname=a']) 259.883735ms ago: executing program 2 (id=5519): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 187.907737ms ago: executing program 7 (id=5520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 187.702977ms ago: executing program 3 (id=5522): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 159.566957ms ago: executing program 7 (id=5523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 75.364658ms ago: executing program 4 (id=5524): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x120805, 0x0, 0xa, 0x410001, 0x0, 0x800, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 57.403599ms ago: executing program 4 (id=5525): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 39.53502ms ago: executing program 4 (id=5526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x1, &(0x7f0000001080)) 429.12µs ago: executing program 3 (id=5527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x3}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) 0s ago: executing program 4 (id=5528): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) kernel console output (not intermixed with test programs): :5653: inode #11: comm syz.4.3795: corrupted inode contents [ 130.381144][T12348] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.3795: mark_inode_dirty error [ 130.392635][T12348] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 130.402844][T12348] EXT4-fs (loop4): 1 truncate cleaned up [ 130.409105][T12348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.515158][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.549951][T12370] loop4: detected capacity change from 0 to 1024 [ 130.563955][T12370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.628151][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.685134][T12386] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 130.812300][T12404] __nla_validate_parse: 18 callbacks suppressed [ 130.812319][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 130.997717][T12425] IPv6: Can't replace route, no match found [ 131.090782][T12433] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3834'. [ 131.184827][T12439] loop5: detected capacity change from 0 to 128 [ 131.321890][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.321890][ T9760] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 131.335853][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.335853][ T9760] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 131.349652][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.349652][ T9760] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 131.363400][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.363400][ T9760] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 131.377655][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.377655][ T9760] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 131.391270][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.391270][ T9760] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 131.405311][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.405311][ T9760] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 131.418976][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.418976][ T9760] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 131.432712][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.432712][ T9760] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 131.446219][ T9760] kworker/u8:30: attempt to access beyond end of device [ 131.446219][ T9760] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 131.478593][T12463] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3845'. [ 131.507845][T12467] binfmt_misc: register: failed to install interpreter file ./file2 [ 132.261538][T12529] loop7: detected capacity change from 0 to 512 [ 132.282448][T12529] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.315921][T12529] EXT4-fs (loop7): mount failed [ 132.405876][T12544] loop5: detected capacity change from 0 to 2048 [ 132.421159][T12544] loop5: p1 < > p4 [ 132.426495][T12544] loop5: p4 size 8388608 extends beyond EOD, truncated [ 132.444685][T12552] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 132.671498][T12581] loop2: detected capacity change from 0 to 512 [ 132.707924][T12581] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 132.722363][T12581] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.751381][T12581] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3899: Failed to acquire dquot type 1 [ 132.772602][T12581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3899: bg 0: block 40: padding at end of block bitmap is not set [ 132.832891][T12581] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 132.855806][T12581] EXT4-fs (loop2): 1 truncate cleaned up [ 132.871120][T12581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.924924][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.994732][T12603] pimreg: entered allmulticast mode [ 133.009304][T12603] pimreg: left allmulticast mode [ 133.115148][T12619] loop5: detected capacity change from 0 to 512 [ 133.127948][T12619] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 133.136472][T12619] EXT4-fs (loop5): orphan cleanup on readonly fs [ 133.153127][T12619] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3916: Failed to acquire dquot type 1 [ 133.166476][T12619] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3916: bg 0: block 40: padding at end of block bitmap is not set [ 133.189123][T12619] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 133.203024][T12619] EXT4-fs (loop5): 1 truncate cleaned up [ 133.216152][T12619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.246155][ T9142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.415662][T12667] loop7: detected capacity change from 0 to 764 [ 133.450503][T12671] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.835715][T12713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12713 comm=syz.5.3957 [ 133.848514][T12713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12713 comm=syz.5.3957 [ 133.953309][T12728] ALSA: seq fatal error: cannot create timer (-22) [ 134.655952][T12756] loop7: detected capacity change from 0 to 512 [ 134.682557][T12756] __quota_error: 331 callbacks suppressed [ 134.682646][T12756] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 134.699101][T12756] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.715138][T12756] EXT4-fs (loop7): mount failed [ 134.828867][T12765] loop2: detected capacity change from 0 to 2048 [ 134.901975][T12765] loop2: p1 < > p4 [ 134.913482][T12765] loop2: p4 size 8388608 extends beyond EOD, truncated [ 135.310454][ T29] audit: type=1326 audit(135.299:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12786 comm="syz.4.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 135.353205][ T29] audit: type=1326 audit(135.299:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12786 comm="syz.4.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 135.376439][ T29] audit: type=1326 audit(135.299:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12786 comm="syz.4.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 135.399732][ T29] audit: type=1326 audit(135.319:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12786 comm="syz.4.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 135.521372][ T9784] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 135.558289][T12760] syz.7.3977 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 135.569377][T12760] CPU: 1 UID: 0 PID: 12760 Comm: syz.7.3977 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.569423][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.569437][T12760] Call Trace: [ 135.569445][T12760] [ 135.569455][T12760] __dump_stack+0x1d/0x30 [ 135.569522][T12760] dump_stack_lvl+0xe8/0x140 [ 135.569544][T12760] dump_stack+0x15/0x1b [ 135.569564][T12760] dump_header+0x81/0x220 [ 135.569601][T12760] oom_kill_process+0x342/0x400 [ 135.569711][T12760] out_of_memory+0x979/0xb80 [ 135.569888][T12760] try_charge_memcg+0x5e6/0x9e0 [ 135.569916][T12760] charge_memcg+0x51/0xc0 [ 135.569940][T12760] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 135.569971][T12760] __read_swap_cache_async+0x1df/0x350 [ 135.570042][T12760] swap_cluster_readahead+0x277/0x3e0 [ 135.570147][T12760] swapin_readahead+0xde/0x6f0 [ 135.570253][T12760] ? __filemap_get_folio+0x4f7/0x6b0 [ 135.570274][T12760] ? __rcu_read_unlock+0x34/0x70 [ 135.570300][T12760] ? swap_cache_get_folio+0x77/0x200 [ 135.570406][T12760] do_swap_page+0x301/0x2430 [ 135.570429][T12760] ? css_rstat_updated+0xb7/0x240 [ 135.570505][T12760] ? __pfx_default_wake_function+0x10/0x10 [ 135.570534][T12760] handle_mm_fault+0x9a5/0x2c20 [ 135.570563][T12760] do_user_addr_fault+0x636/0x1090 [ 135.570595][T12760] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 135.570658][T12760] exc_page_fault+0x62/0xa0 [ 135.570699][T12760] asm_exc_page_fault+0x26/0x30 [ 135.570720][T12760] RIP: 0033:0x7f9a6e8a55d8 [ 135.570736][T12760] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d ea 27 37 00 00 0f 8e 09 fe ff ff e8 83 9e fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d b6 00 ea 00 e8 03 00 00 48 8d 1d b7 09 37 00 e8 12 95 12 00 [ 135.570790][T12760] RSP: 002b:00007ffe02006b20 EFLAGS: 00010202 [ 135.570812][T12760] RAX: 000000000002113a RBX: 00007f9a6ec17da0 RCX: 0000000000020f58 [ 135.570828][T12760] RDX: 00000000000001e2 RSI: 00007ffe02006b00 RDI: 0000000000000001 [ 135.570925][T12760] RBP: 00007f9a6ec17da0 R08: 000000001cbfce0f R09: 7fffffffffffffff [ 135.570940][T12760] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002117f [ 135.570955][T12760] R13: 00007ffe02006c10 R14: ffffffffffffffff R15: 00007ffe02006c30 [ 135.570974][T12760] [ 135.786289][T12760] memory: usage 307200kB, limit 307200kB, failcnt 195 [ 135.793352][T12760] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 135.801335][T12760] kmem: usage 307040kB, limit 9007199254740988kB, failcnt 0 [ 135.808738][T12760] Memory cgroup stats for /syz7: [ 135.809571][T12760] cache 147456 [ 135.818291][T12760] rss 4096 [ 135.821527][T12760] shmem 0 [ 135.824484][T12760] mapped_file 0 [ 135.827963][T12760] dirty 0 [ 135.831341][T12760] writeback 4096 [ 135.834947][T12760] workingset_refault_anon 22 [ 135.839647][T12760] workingset_refault_file 0 [ 135.844362][T12760] swap 176128 [ 135.847900][T12760] swapcached 12288 [ 135.851692][T12760] pgpgin 17363 [ 135.855066][T12760] pgpgout 17323 [ 135.858545][T12760] pgfault 33947 [ 135.862184][T12760] pgmajfault 30 [ 135.865663][T12760] inactive_anon 4096 [ 135.869573][T12760] active_anon 8192 [ 135.873421][T12760] inactive_file 0 [ 135.877331][T12760] active_file 151552 [ 135.881382][T12760] unevictable 0 [ 135.885094][T12760] hierarchical_memory_limit 314572800 [ 135.890523][T12760] hierarchical_memsw_limit 9223372036854771712 [ 135.896817][T12760] total_cache 147456 [ 135.900776][T12760] total_rss 4096 [ 135.904366][T12760] total_shmem 0 [ 135.907996][T12760] total_mapped_file 0 [ 135.911985][T12760] total_dirty 0 [ 135.915447][T12760] total_writeback 4096 [ 135.919594][T12760] total_workingset_refault_anon 22 [ 135.924783][T12760] total_workingset_refault_file 0 [ 135.929798][T12760] total_swap 176128 [ 135.933696][T12760] total_swapcached 12288 [ 135.937927][T12760] total_pgpgin 17363 [ 135.941864][T12760] total_pgpgout 17323 [ 135.945986][T12760] total_pgfault 33947 [ 135.950129][T12760] total_pgmajfault 30 [ 135.954135][T12760] total_inactive_anon 4096 [ 135.958538][T12760] total_active_anon 8192 [ 135.962949][T12760] total_inactive_file 0 [ 135.967114][T12760] total_active_file 151552 [ 135.971911][T12760] total_unevictable 0 [ 135.976155][T12760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3977,pid=12760,uid=0 [ 135.991328][T12760] Memory cgroup out of memory: Killed process 12760 (syz.7.3977) total-vm:93904kB, anon-rss:1200kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 136.098154][ T29] audit: type=1400 audit(136.079:5406): avc: denied { watch watch_reads } for pid=12819 comm="syz.3.4002" path="/proc/1761" dev="proc" ino=36211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.265059][ T29] audit: type=1400 audit(136.249:5407): avc: denied { ioctl } for pid=12827 comm="syz.2.4005" path="socket:[36231]" dev="sockfs" ino=36231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.312971][ T29] audit: type=1326 audit(136.299:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aa54eba9 code=0x7ffc0000 [ 136.336152][ T29] audit: type=1326 audit(136.299:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f94aa54eba9 code=0x7ffc0000 [ 136.360108][ T29] audit: type=1326 audit(136.299:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aa54eba9 code=0x7ffc0000 [ 136.384324][T12761] syz.7.3977 (12761) used greatest stack depth: 7528 bytes left [ 136.392749][T12832] loop2: detected capacity change from 0 to 512 [ 136.407653][T12840] loop3: detected capacity change from 0 to 512 [ 136.415910][T12832] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4007: corrupted in-inode xattr: invalid ea_ino [ 136.419084][T12842] netlink: 'syz.7.4010': attribute type 10 has an invalid length. [ 136.439720][T12842] team0: Device hsr_slave_0 failed to register rx_handler [ 136.455238][T12832] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4007: couldn't read orphan inode 15 (err -117) [ 136.475435][T12840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.479155][T12832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.543765][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4011: corrupted inode contents [ 136.563411][T12840] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4011: mark_inode_dirty error [ 136.575116][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4011: corrupted inode contents [ 136.575671][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.598086][T12840] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4011: mark_inode_dirty error [ 136.652215][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.742974][T12876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.805556][T12892] loop2: detected capacity change from 0 to 1024 [ 136.816430][T12892] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.827540][T12892] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 136.840303][T12892] JBD2: no valid journal superblock found [ 136.846058][T12892] EXT4-fs (loop2): Could not load journal inode [ 136.865443][T12892] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 137.246296][T12924] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.397910][T12938] loop3: detected capacity change from 0 to 1024 [ 137.412800][T12939] loop7: detected capacity change from 0 to 1764 [ 137.423362][T12939] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 137.434203][T12938] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.445388][T12938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.506967][T12938] JBD2: no valid journal superblock found [ 137.512825][T12938] EXT4-fs (loop3): Could not load journal inode [ 137.537115][T12938] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 137.632910][T12959] loop5: detected capacity change from 0 to 512 [ 137.644722][T12957] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.653145][T12959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.670120][T12959] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.678333][T12964] loop2: detected capacity change from 0 to 512 [ 137.699418][T12964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.710066][T12959] EXT4-fs (loop5): 1 truncate cleaned up [ 137.716514][T12959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.783786][T12964] EXT4-fs (loop2): 1 truncate cleaned up [ 137.789936][T12964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.872443][T12964] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.4063: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 137.898160][T12980] loop4: detected capacity change from 0 to 8192 [ 137.933166][ T9142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.954985][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.041547][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4081'. [ 138.096404][T13012] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 138.105202][ T9462] IPVS: starting estimator thread 0... [ 138.153271][T13017] loop4: detected capacity change from 0 to 512 [ 138.220117][T13015] IPVS: using max 2880 ests per chain, 144000 per kthread [ 138.228546][T13017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.239092][T13017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.264770][T13017] EXT4-fs (loop4): 1 truncate cleaned up [ 138.281748][T13017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.317240][T13031] macvtap1: entered allmulticast mode [ 138.323133][T13031] bridge0: entered allmulticast mode [ 138.333344][T13031] bridge0: port 3(macvtap1) entered blocking state [ 138.339934][T13031] bridge0: port 3(macvtap1) entered disabled state [ 138.369526][T13031] bridge0: left allmulticast mode [ 138.380766][T13037] loop2: detected capacity change from 0 to 512 [ 138.394226][T13037] EXT4-fs: old and new quota format mixing [ 138.415472][T13037] loop2: detected capacity change from 0 to 1024 [ 138.430064][T13037] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 138.461263][T13037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 138.469633][T13037] EXT4-fs (loop2): failed to initialize system zone (-117) [ 138.504694][T13037] EXT4-fs (loop2): mount failed [ 138.516348][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.570459][T13059] veth1_to_bond: entered allmulticast mode [ 138.587738][T13059] veth1_to_bond: entered promiscuous mode [ 138.596135][T13058] veth1_to_bond: left promiscuous mode [ 138.602433][T13058] veth1_to_bond: left allmulticast mode [ 138.655832][T13074] loop2: detected capacity change from 0 to 512 [ 138.672549][T13074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.699824][T13074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.710427][T13079] loop4: detected capacity change from 0 to 512 [ 138.716246][T13086] netlink: 'syz.3.4118': attribute type 22 has an invalid length. [ 138.724640][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4118'. [ 138.725450][T13074] EXT4-fs (loop2): 1 truncate cleaned up [ 138.738117][ T9797] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.747893][ T9797] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.748327][T13074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.756332][T13086] netlink: 'syz.3.4118': attribute type 22 has an invalid length. [ 138.769857][ T9797] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.776245][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4118'. [ 138.784716][ T9797] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.803006][T13079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.835369][T13079] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.876660][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.896228][T13092] loop3: detected capacity change from 0 to 512 [ 138.903407][T13092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.916303][T13092] EXT4-fs (loop3): 1 truncate cleaned up [ 138.932725][T13092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.953746][T13092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.981248][T13099] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.996124][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.038852][T13107] siw: device registration error -23 [ 139.105441][T13125] siw: device registration error -23 [ 139.109846][T13126] loop3: detected capacity change from 0 to 512 [ 139.117809][T13126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.125994][T13126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.139234][T13126] EXT4-fs (loop3): 1 truncate cleaned up [ 139.146160][T13126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.230527][T13135] Falling back ldisc for ttyS3. [ 139.286118][T13143] rdma_op ffff888119679d80 conn xmit_rdma 0000000000000000 [ 139.306464][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.470921][T13166] loop3: detected capacity change from 0 to 1024 [ 139.482819][T13166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.572839][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.624895][T13184] loop5: detected capacity change from 0 to 512 [ 139.649523][T13174] loop4: detected capacity change from 0 to 8192 [ 139.681392][T13184] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.697708][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 139.697725][ T29] audit: type=1326 audit(139.679:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f320904d510 code=0x7ffc0000 [ 139.743352][T13184] EXT4-fs (loop5): mount failed [ 139.743395][ T29] audit: type=1326 audit(139.679:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f320904d8f7 code=0x7ffc0000 [ 139.771485][ T29] audit: type=1326 audit(139.679:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f320904d510 code=0x7ffc0000 [ 139.795205][ T29] audit: type=1326 audit(139.679:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.818393][ T29] audit: type=1326 audit(139.679:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.841461][ T29] audit: type=1326 audit(139.679:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.865625][ T29] audit: type=1326 audit(139.679:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.888971][ T29] audit: type=1326 audit(139.679:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.911990][ T29] audit: type=1326 audit(139.679:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.935182][ T29] audit: type=1326 audit(139.689:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.4.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 139.981460][T13203] loop3: detected capacity change from 0 to 256 [ 140.052496][T13214] loop7: detected capacity change from 0 to 512 [ 140.063726][T13214] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.095153][T13214] EXT4-fs (loop7): 1 truncate cleaned up [ 140.104380][T13214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.121620][T13231] loop2: detected capacity change from 0 to 512 [ 140.129931][T13214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.147254][T13231] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.166224][T13226] syzkaller1: entered promiscuous mode [ 140.171955][T13226] syzkaller1: entered allmulticast mode [ 140.197819][T13231] EXT4-fs (loop2): mount failed [ 140.242666][T13245] $H: renamed from bond0 (while UP) [ 140.253751][T13245] $H: entered promiscuous mode [ 140.258863][T13245] bond_slave_0: entered promiscuous mode [ 140.264681][T13245] bond_slave_1: entered promiscuous mode [ 140.305334][T13258] netlink: 'syz.7.4187': attribute type 22 has an invalid length. [ 140.313435][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4187'. [ 140.332619][T13258] netlink: 'syz.7.4187': attribute type 22 has an invalid length. [ 140.332625][ T9797] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.332752][ T9797] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.340893][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4187'. [ 140.355051][T13257] openvswitch: netlink: Message has 6 unknown bytes. [ 140.381189][ T9797] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.392228][ T9797] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.490081][T13283] loop4: detected capacity change from 0 to 512 [ 140.502360][T13283] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.517882][T13283] EXT4-fs (loop4): mount failed [ 140.584705][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4195'. [ 140.673683][T13309] loop2: detected capacity change from 0 to 8192 [ 140.854567][T13349] loop5: detected capacity change from 0 to 128 [ 140.863003][T13349] vfat: Bad value for 'gid' [ 140.867750][T13349] vfat: Bad value for 'gid' [ 140.941167][T13364] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 140.970937][T13369] loop5: detected capacity change from 0 to 1024 [ 140.997924][T13376] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 141.007517][T13369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.027234][T13369] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 141.029741][T13376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.039846][T13369] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.039846][T13369] [ 141.056424][T13369] EXT4-fs (loop5): Total free blocks count 0 [ 141.062582][T13369] EXT4-fs (loop5): Free/Dirty block details [ 141.068504][T13369] EXT4-fs (loop5): free_blocks=0 [ 141.073664][T13369] EXT4-fs (loop5): dirty_blocks=0 [ 141.078834][T13369] EXT4-fs (loop5): Block reservation details [ 141.084880][T13369] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 141.105312][T13376] bond1: (slave geneve0): making interface the new active one [ 141.114253][T13369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.114425][T13376] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 141.132180][ T9797] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.141987][ T9797] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.151296][ T9797] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.159772][ T9797] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.441540][T13444] uprobe: syz.7.4227:13444 failed to unregister, leaking uprobe [ 141.629366][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4234'. [ 141.750967][T13484] vhci_hcd: invalid port number 224 [ 141.994828][T13506] loop7: detected capacity change from 0 to 128 [ 142.001801][T13506] vfat: Bad value for 'gid' [ 142.006363][T13506] vfat: Bad value for 'gid' [ 142.106300][T13519] infiniband syz!: set down [ 142.110971][T13519] infiniband syz!: added team_slave_0 [ 142.131974][T13519] RDS/IB: syz!: added [ 142.139508][T13519] smc: adding ib device syz! with port count 1 [ 142.151313][T13519] smc: ib device syz! port 1 has pnetid [ 142.288894][T13528] loop5: detected capacity change from 0 to 8192 [ 142.393298][T13531] loop5: detected capacity change from 0 to 512 [ 142.412662][T13531] EXT4-fs (loop5): too many log groups per flexible block group [ 142.420649][T13531] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 142.427958][T13531] EXT4-fs (loop5): mount failed [ 142.448721][T13537] vhci_hcd: invalid port number 66 [ 142.453928][T13537] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 142.503833][T13542] loop2: detected capacity change from 0 to 128 [ 142.511645][T13542] vfat: Bad value for 'gid' [ 142.516177][T13542] vfat: Bad value for 'gid' [ 142.704734][T13570] loop2: detected capacity change from 0 to 1024 [ 142.713364][T13570] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.724284][T13570] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 142.735607][T13570] JBD2: no valid journal superblock found [ 142.741451][T13570] EXT4-fs (loop2): Could not load journal inode [ 142.756793][T13570] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 142.798353][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4277'. [ 142.835310][T13579] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.861737][T13580] vhci_hcd: invalid port number 224 [ 142.890933][T13588] netlink: 'syz.2.4285': attribute type 16 has an invalid length. [ 142.921435][T13588] bridge0: port 3(dummy0) entered blocking state [ 142.927864][T13588] bridge0: port 3(dummy0) entered forwarding state [ 142.965934][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.976216][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.989042][T13588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.125948][ T3385] Process accounting resumed [ 143.130867][T13615] loop2: detected capacity change from 0 to 2048 [ 143.154427][T13615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.207916][T13626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.219258][T13626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.303030][T13635] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 143.303030][T13635] Q&|xXX HID v0.00 Device [sy] on syz0 [ 144.703824][T13729] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4344'. [ 144.748457][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 144.748476][ T29] audit: type=1326 audit(144.729:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.784817][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.805292][ T29] audit: type=1326 audit(144.729:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.828631][ T29] audit: type=1326 audit(144.769:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.851837][ T29] audit: type=1400 audit(144.769:5645): avc: denied { sqpoll } for pid=13732 comm="syz.5.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.870878][ T29] audit: type=1326 audit(144.769:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f399516ebe3 code=0x7ffc0000 [ 144.894003][ T29] audit: type=1326 audit(144.769:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f399516ebe3 code=0x7ffc0000 [ 144.917159][ T29] audit: type=1326 audit(144.769:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.940352][ T29] audit: type=1326 audit(144.769:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.963366][ T29] audit: type=1326 audit(144.769:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 144.986843][ T29] audit: type=1326 audit(144.769:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399516eba9 code=0x7ffc0000 [ 145.115343][ T9462] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 145.123173][ T9462] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 145.132208][ T9462] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 145.142285][ T9462] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.207789][T13754] random: crng reseeded on system resumption [ 145.301501][T13766] loop7: detected capacity change from 0 to 2048 [ 145.314928][T13766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.469892][T13781] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4367'. [ 145.480473][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.503849][T13783] loop7: detected capacity change from 0 to 512 [ 145.511314][T13783] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.523006][T13783] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4369: invalid indirect mapped block 4294967295 (level 0) [ 145.537332][T13783] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4369: invalid indirect mapped block 4294967295 (level 1) [ 145.560579][T13788] sd 0:0:1:0: device reset [ 145.561446][T13783] EXT4-fs (loop7): 1 orphan inode deleted [ 145.571053][T13783] EXT4-fs (loop7): 1 truncate cleaned up [ 145.577406][T13783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.643941][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.936824][ T3385] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 145.944636][ T3385] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 145.956963][ T3385] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 145.976707][ T3385] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 146.088599][T13855] netlink: 'syz.4.4401': attribute type 10 has an invalid length. [ 146.121756][T13855] ipvlan0: entered allmulticast mode [ 146.127169][T13855] veth0_vlan: entered allmulticast mode [ 146.272519][T13882] random: crng reseeded on system resumption [ 146.433912][T13897] loop7: detected capacity change from 0 to 1024 [ 146.453916][T13897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.472342][T13897] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4422: Allocating blocks 385-513 which overlap fs metadata [ 146.497625][T13897] EXT4-fs (loop7): pa ffff888100567a80: logic 16, phys. 129, len 24 [ 146.505838][T13897] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 146.538951][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.728760][T13915] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4427'. [ 146.812774][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4433'. [ 146.821868][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4433'. [ 146.831250][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4433'. [ 146.840707][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4433'. [ 146.849939][T13927] netlink: 'syz.7.4433': attribute type 6 has an invalid length. [ 146.924921][T13942] loop7: detected capacity change from 0 to 128 [ 146.936188][T13942] FAT-fs (loop7): Directory bread(block 32) failed [ 146.943742][T13942] FAT-fs (loop7): Directory bread(block 33) failed [ 146.957884][T13943] SELinux: ebitmap: truncated map [ 146.959399][T13942] FAT-fs (loop7): Directory bread(block 34) failed [ 146.964159][T13943] SELinux: failed to load policy [ 146.973362][T13942] FAT-fs (loop7): Directory bread(block 35) failed [ 146.982203][T13942] FAT-fs (loop7): Directory bread(block 36) failed [ 146.988963][T13942] FAT-fs (loop7): Directory bread(block 37) failed [ 146.997383][T13942] FAT-fs (loop7): Directory bread(block 38) failed [ 147.004117][T13942] FAT-fs (loop7): Directory bread(block 39) failed [ 147.011956][T13942] FAT-fs (loop7): Directory bread(block 40) failed [ 147.019083][T13942] FAT-fs (loop7): Directory bread(block 41) failed [ 147.127108][T13963] usb usb1: usbfs: process 13963 (syz.7.4452) did not claim interface 4 before use [ 147.212744][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 147.233194][T13981] loop7: detected capacity change from 0 to 512 [ 147.240343][T13981] journal_path: Non-blockdev passed as './bus' [ 147.246685][T13981] EXT4-fs: error: could not find journal device path [ 147.338947][ T9776] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 147.470150][T14019] SELinux: ebitmap: truncated map [ 147.477848][T14019] SELinux: failed to load policy [ 147.535619][T14027] loop5: detected capacity change from 0 to 512 [ 147.542834][T14027] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.560388][T14027] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4480: invalid indirect mapped block 4294967295 (level 0) [ 147.574907][T14027] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4480: invalid indirect mapped block 4294967295 (level 1) [ 147.594584][T14027] EXT4-fs (loop5): 1 orphan inode deleted [ 147.600535][T14027] EXT4-fs (loop5): 1 truncate cleaned up [ 147.606772][T14027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.642466][T14030] SELinux: failed to load policy [ 147.682179][ T9142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.723604][T14042] program syz.3.4487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.799637][T14046] SELinux: ebitmap: truncated map [ 147.806829][T14046] SELinux: failed to load policy [ 148.166175][ T3385] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.175445][ T3385] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 148.209229][T14075] hub 9-0:1.0: USB hub found [ 148.215867][T14075] hub 9-0:1.0: 8 ports detected [ 148.326947][T14099] SELinux: failed to load policy [ 148.336380][T14101] random: crng reseeded on system resumption [ 148.401594][T14114] loop2: detected capacity change from 0 to 512 [ 148.413704][T14114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.503927][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.505449][T14125] loop7: detected capacity change from 0 to 256 [ 148.573466][T14133] __nla_validate_parse: 3 callbacks suppressed [ 148.573484][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4529'. [ 148.773746][T14156] loop5: detected capacity change from 0 to 256 [ 148.776989][T14158] loop3: detected capacity change from 0 to 512 [ 148.787365][T14158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.800972][T14158] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4540: invalid indirect mapped block 4294967295 (level 0) [ 148.816464][T14158] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4540: invalid indirect mapped block 4294967295 (level 1) [ 148.833400][T14158] EXT4-fs (loop3): 1 orphan inode deleted [ 148.839239][T14158] EXT4-fs (loop3): 1 truncate cleaned up [ 148.845545][T14158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.909863][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.943272][T14162] SELinux: failed to load policy [ 148.989820][T14170] openvswitch: netlink: Message has 6 unknown bytes. [ 149.019064][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4545'. [ 149.051107][T14176] loop5: detected capacity change from 0 to 128 [ 149.382819][T14207] SELinux: failed to load policy [ 149.554367][T14249] loop4: detected capacity change from 0 to 2048 [ 149.577803][T14249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.608372][T14259] loop2: detected capacity change from 0 to 128 [ 149.645371][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.768908][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 149.768925][ T29] audit: type=1326 audit(405.743:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 149.811806][ T29] audit: type=1326 audit(405.783:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 149.834981][ T29] audit: type=1326 audit(405.783:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 149.858057][ T29] audit: type=1326 audit(405.783:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 149.881263][ T29] audit: type=1326 audit(405.783:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320904eba9 code=0x7ffc0000 [ 149.946362][ T29] audit: type=1400 audit(405.923:6078): avc: denied { write } for pid=14298 comm="syz.4.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.966163][ T9776] bio_check_eod: 101 callbacks suppressed [ 149.966181][ T9776] kworker/u8:45: attempt to access beyond end of device [ 149.966181][ T9776] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 149.986009][ T9776] kworker/u8:45: attempt to access beyond end of device [ 149.986009][ T9776] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 150.000841][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.000841][ T9776] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 150.014478][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.014478][ T9776] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 150.028889][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.028889][ T9776] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 150.049129][T14309] loop4: detected capacity change from 0 to 256 [ 150.059784][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.059784][ T9776] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 150.084896][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.084896][ T9776] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 150.098847][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.098847][ T9776] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 150.108154][T14317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14317 comm=syz.7.4577 [ 150.126490][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.126490][ T9776] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 150.152137][ T9776] kworker/u8:45: attempt to access beyond end of device [ 150.152137][ T9776] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 150.202441][T14328] loop2: detected capacity change from 0 to 128 [ 150.219439][T14328] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 150.227835][T14328] FAT-fs (loop2): Filesystem has been set read-only [ 150.266218][T14337] loop2: detected capacity change from 0 to 512 [ 150.273993][ T29] audit: type=1400 audit(406.253:6079): avc: denied { mounton } for pid=14336 comm="syz.2.4582" path="/921/bus" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.279188][T14337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.308682][T14337] EXT4-fs (loop2): 1 truncate cleaned up [ 150.315002][T14337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.328980][T14337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.377746][ T29] audit: type=1400 audit(406.353:6080): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 150.406271][ T29] audit: type=1400 audit(406.383:6081): avc: denied { read } for pid=14354 comm="syz.2.4583" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 150.431555][ T29] audit: type=1400 audit(406.383:6082): avc: denied { open } for pid=14354 comm="syz.2.4583" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 150.682098][T14396] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.818989][T14418] sctp: [Deprecated]: syz.7.4603 (pid 14418) Use of int in max_burst socket option deprecated. [ 150.818989][T14418] Use struct sctp_assoc_value instead [ 151.039929][T14447] loop4: detected capacity change from 0 to 512 [ 151.051768][T14447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.068940][T14447] EXT4-fs (loop4): 1 truncate cleaned up [ 151.079156][T14447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.126994][T14447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.179109][T14453] SELinux: failed to load policy [ 151.291161][T14466] bond4: entered promiscuous mode [ 151.296294][T14466] bond4: entered allmulticast mode [ 151.302591][T14466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.313464][T14466] bond4 (unregistering): Released all slaves [ 151.390432][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4628'. [ 151.658091][T14489] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.665610][T14489] vhci_hcd: invalid port number 253 [ 151.670855][T14489] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 151.679953][T14492] netlink: 'syz.7.4637': attribute type 27 has an invalid length. [ 151.736537][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.744623][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.760519][T14492] $H: left promiscuous mode [ 151.765596][T14492] bond_slave_0: left promiscuous mode [ 151.771201][T14492] bond_slave_1: left promiscuous mode [ 151.886703][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.909511][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.027515][T14499] 8021q: adding VLAN 0 to HW filter on device $H [ 152.055662][T14499] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.095614][T14499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.112534][ T9760] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.121049][ T9760] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.133955][ T9760] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.142381][ T9760] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.192213][ T9760] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.201034][ T9760] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.211368][ T9760] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.219970][ T9760] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.296616][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.314655][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.324405][T14538] netlink: 'syz.2.4654': attribute type 3 has an invalid length. [ 152.332153][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 152.384026][T14548] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4659'. [ 152.402937][T14550] netlink: 'syz.7.4660': attribute type 1 has an invalid length. [ 152.410737][T14550] netlink: 'syz.7.4660': attribute type 2 has an invalid length. [ 152.432933][T14552] 9pnet_fd: Insufficient options for proto=fd [ 152.851736][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4677'. [ 152.875824][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4677'. [ 152.895280][T14592] loop2: detected capacity change from 0 to 1024 [ 152.903614][T14592] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.920504][T14592] EXT4-fs: inline encryption not supported [ 152.928686][T14592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.940205][T14592] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4678: bad orphan inode 11 [ 152.950596][T14592] ext4_test_bit(bit=10, block=4) = 1 [ 152.956107][T14592] is_bad_inode(inode)=0 [ 152.960310][T14592] NEXT_ORPHAN(inode)=3254779904 [ 152.965240][T14592] max_ino=32 [ 152.968451][T14592] i_nlink=0 [ 152.973653][T14592] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4678: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.994614][T14595] rdma_op ffff88811afd7580 conn xmit_rdma 0000000000000000 [ 153.067552][T14592] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4678: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.068947][T14601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4681'. [ 153.104623][T14592] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4678: Failed to acquire dquot type 0 [ 153.118312][T14592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 153.131499][T14608] rdma_op ffff88811afd5580 conn xmit_rdma 0000000000000000 [ 153.148066][T14592] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4678: mark_inode_dirty error [ 153.160315][T14592] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 153.171477][T14592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.191915][T14592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.202426][T14592] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.4678: Invalid inode table block 1 in block_group 0 [ 153.215539][T14592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 153.242489][T14592] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.4678: mark_inode_dirty error [ 153.477492][ T3385] hid_parser_main: 27 callbacks suppressed [ 153.477510][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.490900][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.498513][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.516568][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.524208][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.531652][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.539120][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.546627][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.554148][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.561822][ T3385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.577743][ T3385] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 153.617612][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4709'. [ 153.698156][T14681] macvtap0: refused to change device tx_queue_len [ 153.738676][T14689] netlink: 'syz.2.4721': attribute type 3 has an invalid length. [ 153.787552][T14697] tipc: Started in network mode [ 153.792661][T14697] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 153.801573][T14697] tipc: Enabling of bearer rejected, failed to enable media [ 153.888650][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4731'. [ 153.935385][T14718] netlink: 'syz.7.4735': attribute type 10 has an invalid length. [ 153.948012][T14720] netlink: 'syz.2.4736': attribute type 1 has an invalid length. [ 153.956417][T14718] bridge_slave_1: left allmulticast mode [ 153.962145][T14718] bridge_slave_1: left promiscuous mode [ 153.968096][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.976839][T14718] $H: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.012478][T14726] dvmrp0: entered allmulticast mode [ 154.023194][T14728] loop3: detected capacity change from 0 to 128 [ 154.030200][T14728] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 154.053953][T14728] FAT-fs (loop3): FAT read failed (blocknr 128) [ 154.157624][T14743] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4747'. [ 154.247386][T14756] loop7: detected capacity change from 0 to 1024 [ 154.257099][T14756] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.264615][T14756] EXT4-fs: inline encryption not supported [ 154.272566][T14756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.292762][T14756] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4754: bad orphan inode 11 [ 154.304062][T14756] ext4_test_bit(bit=10, block=4) = 1 [ 154.309509][T14756] is_bad_inode(inode)=0 [ 154.313760][T14756] NEXT_ORPHAN(inode)=3254779904 [ 154.318758][T14756] max_ino=32 [ 154.321971][T14756] i_nlink=0 [ 154.327072][T14756] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.4754: lblock 2 mapped to illegal pblock 2 (length 1) [ 154.342181][T14756] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.4754: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.356632][T14756] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4754: Failed to acquire dquot type 0 [ 154.377979][T14756] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 154.389327][T14756] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.4754: mark_inode_dirty error [ 154.403620][T14756] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 154.420113][T14756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.434418][T14756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.449587][T14756] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.4754: Invalid inode table block 1 in block_group 0 [ 154.472585][T14756] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 154.482915][T14765] loop4: detected capacity change from 0 to 1024 [ 154.488436][T14756] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz.7.4754: mark_inode_dirty error [ 154.501544][T14765] EXT4-fs: Ignoring removed bh option [ 154.507031][T14765] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.516787][T14765] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.654885][T14788] SELinux: failed to load policy [ 154.706249][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 154.706263][ T29] audit: type=1326 audit(1178.895:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.2.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13a3eba9 code=0x7ffc0000 [ 154.736063][T14793] loop3: detected capacity change from 0 to 2048 [ 154.747688][T14799] loop7: detected capacity change from 0 to 2048 [ 154.755226][ T29] audit: type=1326 audit(1178.927:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.2.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13a3eba9 code=0x7ffc0000 [ 154.778442][ T29] audit: type=1326 audit(1178.927:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.2.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4d13a3eba9 code=0x7ffc0000 [ 154.789493][T14802] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 154.801588][ T29] audit: type=1326 audit(1178.927:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.2.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13a3eba9 code=0x7ffc0000 [ 154.833561][ T29] audit: type=1326 audit(1178.927:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.2.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13a3eba9 code=0x7ffc0000 [ 154.856898][ T29] audit: type=1400 audit(1179.053:6208): avc: denied { module_load } for pid=14796 comm="syz.5.4773" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 154.898216][T14793] loop3: p1 < > p4 [ 154.903527][T14793] loop3: p4 size 8388608 extends beyond EOD, truncated [ 154.928673][ T29] audit: type=1400 audit(1179.126:6209): avc: denied { cpu } for pid=14806 comm="syz.5.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.951491][ T29] audit: type=1400 audit(1179.126:6210): avc: denied { append } for pid=14792 comm="syz.3.4771" name="loop3p4" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.992454][ T29] audit: type=1400 audit(1179.189:6211): avc: denied { write } for pid=14798 comm="syz.7.4774" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 155.112030][T14832] loop5: detected capacity change from 0 to 512 [ 155.134897][T14832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 155.150474][T14832] EXT4-fs (loop5): 1 truncate cleaned up [ 155.155146][T14826] loop2: detected capacity change from 0 to 1024 [ 155.166696][T14826] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.177831][T14826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.212544][T14826] JBD2: no valid journal superblock found [ 155.213023][T14839] loop4: detected capacity change from 0 to 512 [ 155.218314][T14826] EXT4-fs (loop2): Could not load journal inode [ 155.227561][T14839] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4792: error while reading EA inode 32 err=-116 [ 155.244978][T14839] EXT4-fs (loop4): Remounting filesystem read-only [ 155.251782][T14839] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 155.251918][T14841] netlink: 'syz.5.4793': attribute type 10 has an invalid length. [ 155.262513][T14839] EXT4-fs (loop4): 1 orphan inode deleted [ 155.298989][T14841] team0: Port device dummy0 added [ 155.317171][T14845] netlink: 'syz.5.4793': attribute type 10 has an invalid length. [ 155.356658][T14845] team0: Port device dummy0 removed [ 155.374363][T14845] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.393679][T14826] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 155.428767][ T29] audit: type=1400 audit(1179.641:6212): avc: denied { write } for pid=14851 comm="syz.4.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.466621][T14854] loop7: detected capacity change from 0 to 2048 [ 155.479886][T14854] EXT4-fs: inline encryption not supported [ 155.516094][T14854] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.4796: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 155.621484][T14884] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4806'. [ 155.689336][T14903] atomic_op ffff88813d139928 conn xmit_atomic 0000000000000000 [ 155.771275][T14915] loop5: detected capacity change from 0 to 512 [ 155.827129][T14925] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4822'. [ 156.046737][T14957] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 156.076803][T14979] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4834'. [ 156.104330][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4836'. [ 156.216509][T14993] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 156.321559][T15020] loop2: detected capacity change from 0 to 2048 [ 156.363110][T15020] loop2: p1 < > p4 [ 156.367732][T15020] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.412674][T15040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4847'. [ 156.474468][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4852'. [ 156.483634][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4852'. [ 156.543930][T15063] loop2: detected capacity change from 0 to 1764 [ 156.650936][T15087] loop2: detected capacity change from 0 to 2048 [ 156.659205][T15087] EXT4-fs: inline encryption not supported [ 156.684768][T15087] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4860: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.885535][T15140] random: crng reseeded on system resumption [ 157.577806][T15215] netlink: 'syz.5.4900': attribute type 21 has an invalid length. [ 158.108249][T15294] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 158.665964][T15403] loop2: detected capacity change from 0 to 512 [ 158.675213][T15403] EXT4-fs: Ignoring removed oldalloc option [ 158.698429][T15403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.725492][T15403] EXT4-fs (loop2): 1 truncate cleaned up [ 158.863674][T15434] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 158.900449][T15436] loop2: detected capacity change from 0 to 256 [ 158.910422][T15439] netlink: 'syz.3.4933': attribute type 27 has an invalid length. [ 158.929558][T15439] dummy0: left promiscuous mode [ 158.948487][ T9784] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.957122][ T9784] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.989315][T15447] loop2: detected capacity change from 0 to 164 [ 158.997916][T15439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.008786][T15439] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.020042][T15439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.036865][ T9784] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.045579][ T9784] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.089483][ T9784] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.098039][ T9784] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.133367][T15453] syzkaller0: entered promiscuous mode [ 159.139338][T15453] syzkaller0: entered allmulticast mode [ 159.153194][ T9784] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.161810][ T9784] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.631653][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 159.631669][ T29] audit: type=1400 audit(1184.061:6297): avc: denied { module_request } for pid=15502 comm="+}[@" kmod="crypto-xcbc(aes)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.682527][ T29] audit: type=1400 audit(1184.092:6298): avc: denied { read write } for pid=9142 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.706801][ T29] audit: type=1400 audit(1184.092:6299): avc: denied { open } for pid=9142 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.730810][ T29] audit: type=1400 audit(1184.092:6300): avc: denied { ioctl } for pid=9142 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.756148][ T29] audit: type=1400 audit(1184.103:6301): avc: denied { allowed } for pid=15529 comm="syz.3.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.775085][ T29] audit: type=1400 audit(1184.103:6302): avc: denied { sqpoll } for pid=15529 comm="syz.3.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.794018][ T29] audit: type=1400 audit(1184.103:6303): avc: denied { create } for pid=15529 comm="syz.3.4971" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.815040][ T29] audit: type=1400 audit(1184.113:6304): avc: denied { create } for pid=15528 comm="syz.5.4969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.835604][ T29] audit: type=1400 audit(1184.113:6305): avc: denied { ioctl } for pid=15528 comm="syz.5.4969" path="socket:[42709]" dev="sockfs" ino=42709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.859975][ T29] audit: type=1400 audit(1184.113:6306): avc: denied { bind } for pid=15528 comm="syz.5.4969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.900356][T15533] loop7: detected capacity change from 0 to 512 [ 160.052845][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.062646][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.091412][T15560] netlink: 'syz.4.4980': attribute type 10 has an invalid length. [ 160.104636][T15560] netlink: 'syz.4.4980': attribute type 10 has an invalid length. [ 160.114897][T15560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.170377][T15571] loop3: detected capacity change from 0 to 512 [ 160.179285][T15571] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 160.206819][T15571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 160.215601][T15571] System zones: 1-12 [ 160.220903][T15571] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.4982: corrupted in-inode xattr: e_value size too large [ 160.237708][T15571] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4982: couldn't read orphan inode 15 (err -117) [ 160.251400][T15571] EXT4-fs mount: 16 callbacks suppressed [ 160.251420][T15571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.284005][T15571] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.4982: Unrecognised inode hash code 4 [ 160.295427][T15571] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4982: Corrupt directory, running e2fsck is recommended [ 160.310682][T15571] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.4982: Unrecognised inode hash code 4 [ 160.322099][T15571] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4982: Corrupt directory, running e2fsck is recommended [ 160.354344][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.376794][T15592] loop4: detected capacity change from 0 to 512 [ 160.385393][T15592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.398163][T15592] EXT4-fs (loop4): 1 truncate cleaned up [ 160.405887][T15592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.447013][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.457005][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 161.654721][T15745] loop3: detected capacity change from 0 to 256 [ 161.709750][T15749] netlink: 'syz.4.5017': attribute type 27 has an invalid length. [ 161.726373][T15753] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 161.732928][T15753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.740616][T15753] vhci_hcd vhci_hcd.0: Device attached [ 161.761738][T15753] loop3: detected capacity change from 0 to 512 [ 161.772218][T15749] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.779514][T15749] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.789663][T15753] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.808915][T15753] EXT4-fs (loop3): mount failed [ 161.821193][T15754] vhci_hcd: connection closed [ 161.821556][ T9797] vhci_hcd: stop threads [ 161.831022][ T9797] vhci_hcd: release socket [ 161.835566][ T9797] vhci_hcd: disconnect device [ 161.844431][T15749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.855593][T15749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.880686][T15749] ipvlan0: left allmulticast mode [ 161.885858][T15749] veth0_vlan: left allmulticast mode [ 161.893731][T15765] SELinux: failed to load policy [ 161.904555][T15749] vlan2: left promiscuous mode [ 161.909705][T15749] macvtap0: left promiscuous mode [ 161.916881][T15749] macvlan2: left allmulticast mode [ 161.935109][T15757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.959360][T15757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.975176][T15758] __nla_validate_parse: 1 callbacks suppressed [ 161.975196][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5020'. [ 161.993028][ T23] syz1: Port: 1 Link DOWN [ 161.997491][ T9775] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.007736][ T9775] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.045143][ T9775] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.067221][ T9775] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.143202][T15779] IPVS: Error connecting to the multicast addr [ 162.150309][T15716] chnl_net:caif_netlink_parms(): no params data found [ 162.282578][T15716] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.290313][T15716] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.298877][T15716] bridge_slave_0: entered allmulticast mode [ 162.324059][T15716] bridge_slave_0: entered promiscuous mode [ 162.340930][T15716] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.348256][T15716] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.369848][T15716] bridge_slave_1: entered allmulticast mode [ 162.376357][T15716] bridge_slave_1: entered promiscuous mode [ 162.430200][T15716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.442513][T15812] loop2: detected capacity change from 0 to 512 [ 162.454355][T15716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.486980][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5046'. [ 162.513332][T15822] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5047'. [ 162.541472][T15716] team0: Port device team_slave_0 added [ 162.551133][T15716] team0: Port device team_slave_1 added [ 162.560927][T15825] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 162.578915][T15825] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 162.590317][T15828] loop3: detected capacity change from 0 to 512 [ 162.613707][T15828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.630802][T15716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.637803][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.664480][T15716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.676494][T15716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.683764][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.709918][T15716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.738413][T15716] hsr_slave_0: entered promiscuous mode [ 162.761431][T15716] hsr_slave_1: entered promiscuous mode [ 162.773983][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.779161][T15716] debugfs: 'hsr0' already exists in 'hsr' [ 162.789586][T15716] Cannot create hsr debugfs directory [ 162.810028][T15841] macvtap0: refused to change device tx_queue_len [ 162.835250][T15849] random: crng reseeded on system resumption [ 162.877994][T15716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 162.891248][T15716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 162.901059][T15716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 162.916624][T15716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 162.956847][T15716] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.964152][T15716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.971566][T15716] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.978924][T15716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.016178][T15716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.027830][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.036126][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.049212][T15716] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.059844][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.066974][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.078237][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.085429][ T9763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.169039][T15716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.303017][T15716] veth0_vlan: entered promiscuous mode [ 163.311654][T15716] veth1_vlan: entered promiscuous mode [ 163.330482][T15716] veth0_macvtap: entered promiscuous mode [ 163.339753][T15716] veth1_macvtap: entered promiscuous mode [ 163.351588][T15716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.362321][T15716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.376884][ T9763] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.390453][ T9763] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.399686][ T9763] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.410980][ T9763] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.455687][T15904] loop7: detected capacity change from 0 to 128 [ 163.772034][T15931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15931 comm=syz.8.5081 [ 163.784767][T15931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15931 comm=syz.8.5081 [ 163.910733][T15954] program GPL is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.922719][T15954] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.194649][T15989] rdma_op ffff8881047b3d80 conn xmit_rdma 0000000000000000 [ 164.312021][T16003] loop2: detected capacity change from 0 to 512 [ 164.345757][T16003] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 164.379608][T16003] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.410388][T16003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5115: corrupted inode contents [ 164.463793][T16003] EXT4-fs (loop2): Remounting filesystem read-only [ 164.481256][T16003] EXT4-fs (loop2): 1 truncate cleaned up [ 164.488231][ T9784] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.498910][ T9784] __quota_error: 237 callbacks suppressed [ 164.498927][ T9784] Quota error (device loop2): write_blk: dquota write failed [ 164.512238][ T9784] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 164.522250][ T9784] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.532870][ T9784] Quota error (device loop2): write_blk: dquota write failed [ 164.540387][ T9784] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 164.575357][ T29] audit: type=1400 audit(1189.247:6543): avc: denied { wake_alarm } for pid=16009 comm="syz.4.5116" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.598043][ T9784] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.608206][ T9784] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 164.620677][ T9784] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.657299][T16003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.708301][ T29] audit: type=1400 audit(1189.394:6544): avc: denied { create } for pid=16015 comm="syz.3.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.728690][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.729728][ T29] audit: type=1400 audit(1189.415:6545): avc: denied { bind } for pid=16015 comm="syz.3.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.758040][T16022] netlink: 'syz.4.5122': attribute type 1 has an invalid length. [ 164.832047][ T29] audit: type=1400 audit(1189.489:6546): avc: denied { relabelfrom } for pid=16029 comm="syz.3.5126" name="NETLINK" dev="sockfs" ino=45244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 165.240599][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'. [ 165.249694][T16092] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5155'. [ 165.259006][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'. [ 165.269924][T16092] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5155'. [ 165.303380][T16099] sd 0:0:1:0: device reset [ 165.479122][T16129] loop7: detected capacity change from 0 to 128 [ 165.535983][T16133] SELinux: failed to load policy [ 165.615029][T16150] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 165.643432][T16156] syzkaller1: entered promiscuous mode [ 165.649068][T16156] syzkaller1: entered allmulticast mode [ 165.814880][T16165] loop9: detected capacity change from 0 to 7 [ 165.822926][T16165] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.833052][T16165] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.841040][T16165] loop9: unable to read partition table [ 165.848233][T16165] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.848233][T16165] ) failed (rc=-5) [ 165.896173][T16169] sd 0:0:1:0: device reset [ 165.955858][T16175] netlink: 'syz.2.5196': attribute type 27 has an invalid length. [ 165.993590][T16175] bridge0: port 3(dummy0) entered disabled state [ 166.004262][T16179] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 166.022790][T16181] 9pnet: Could not find request transport: fd$rf [ 166.048821][T16183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.056750][T16183] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.066088][T16183] bridge0: port 3(dummy0) entered blocking state [ 166.072505][T16183] bridge0: port 3(dummy0) entered forwarding state [ 166.081782][T16183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.097514][ T9775] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.106205][ T9775] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.114670][ T9775] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.123142][ T9775] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.134211][ T9775] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.142683][ T9775] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.152667][ T9775] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.161288][ T9775] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.185154][T16192] atomic_op ffff888109bf1128 conn xmit_atomic 0000000000000000 [ 166.214229][T16196] loop7: detected capacity change from 0 to 512 [ 166.223434][T16196] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.240860][T16196] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 166.268406][T16196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 166.286177][T16196] System zones: 1-12 [ 166.288326][T16202] loop3: detected capacity change from 0 to 512 [ 166.298225][T16196] EXT4-fs (loop7): 1 truncate cleaned up [ 166.304262][T16196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.313761][T16202] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.328419][T16202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.351572][T16202] EXT4-fs (loop3): 1 truncate cleaned up [ 166.357850][T16202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.395234][T16208] netlink: 'syz.2.5207': attribute type 1 has an invalid length. [ 166.442452][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.671023][T16220] loop2: detected capacity change from 0 to 512 [ 166.703515][T16220] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.5214: error while reading EA inode 32 err=-116 [ 166.725096][T16220] EXT4-fs (loop2): Remounting filesystem read-only [ 166.731796][T16220] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 166.754358][T16220] EXT4-fs (loop2): 1 orphan inode deleted [ 166.760618][T16220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.802027][T16220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.928538][T16233] loop2: detected capacity change from 0 to 512 [ 166.947847][T16233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.992515][T16233] EXT4-fs (loop2): 1 truncate cleaned up [ 167.008488][T16233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.075306][T16241] loop8: detected capacity change from 0 to 512 [ 167.083571][T16241] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.170361][T16241] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 167.209281][T16241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 167.226156][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.255276][T16241] System zones: 1-12 [ 167.273539][T16241] EXT4-fs (loop8): 1 truncate cleaned up [ 167.282165][T16241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.359169][T16249] loop7: detected capacity change from 0 to 512 [ 167.387379][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.406624][T16249] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 167.416195][T16249] EXT4-fs (loop7): orphan cleanup on readonly fs [ 167.425635][T16249] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5226: corrupted inode contents [ 167.438601][T16249] EXT4-fs (loop7): Remounting filesystem read-only [ 167.445728][T16249] EXT4-fs (loop7): 1 truncate cleaned up [ 167.451785][ T9763] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.462674][ T9763] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.473488][ T9763] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.486423][T16249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.488012][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.525990][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.658201][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5241'. [ 167.667400][T16282] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5241'. [ 167.677132][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5241'. [ 167.686379][T16282] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5241'. [ 167.821029][T16299] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 167.956237][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5263'. [ 167.983887][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5263'. [ 167.993660][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5263'. [ 168.010795][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5263'. [ 168.086392][T16347] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 168.265857][T16385] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 168.295889][T16390] loop7: detected capacity change from 0 to 512 [ 168.303577][T16389] loop8: detected capacity change from 0 to 1024 [ 168.311577][T16391] loop3: detected capacity change from 0 to 512 [ 168.312192][T16390] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 168.319516][T16389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.329078][T16391] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.343169][T16390] EXT4-fs (loop7): 1 truncate cleaned up [ 168.343690][T16391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.350980][T16390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.361756][T16389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 168.382096][T16391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 168.389095][T16389] System zones: 0-1, 3-36 [ 168.396286][T16391] System zones: 1-12 [ 168.397740][T16389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.414769][T16391] EXT4-fs (loop3): 1 truncate cleaned up [ 168.421625][T16391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.457606][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.523477][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.560123][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.667364][T16430] loop7: detected capacity change from 0 to 128 [ 168.675651][T16430] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.702198][T10436] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.737588][T16437] loop4: detected capacity change from 0 to 512 [ 168.748876][T16437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.770814][T16437] EXT4-fs (loop4): 1 truncate cleaned up [ 168.781369][T16437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.916732][T16446] loop8: detected capacity change from 0 to 2048 [ 168.958035][T16446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.004910][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.076392][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.095068][T16461] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 169.171684][T16463] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 169.203554][T16483] loop8: detected capacity change from 0 to 512 [ 169.217982][T16483] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 169.319189][T16483] EXT4-fs (loop8): 1 truncate cleaned up [ 169.326888][T16483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.366224][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 169.366243][ T29] audit: type=1400 audit(1450.284:6783): avc: denied { bind } for pid=16489 comm="syz.2.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.403748][ T29] audit: type=1400 audit(1450.284:6784): avc: denied { write } for pid=16489 comm="syz.2.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.515224][ T29] audit: type=1400 audit(1450.431:6785): avc: denied { read } for pid=16500 comm="syz.7.5322" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.515810][T16501] sd 0:0:1:0: device reset [ 169.549795][ T29] audit: type=1400 audit(1450.431:6786): avc: denied { open } for pid=16500 comm="syz.7.5322" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.573600][ T29] audit: type=1400 audit(1450.431:6787): avc: denied { ioctl } for pid=16500 comm="syz.7.5322" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.624114][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.635950][ T29] audit: type=1400 audit(1450.536:6788): avc: denied { create } for pid=16502 comm="syz.2.5323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.655145][ T29] audit: type=1400 audit(1450.536:6789): avc: denied { connect } for pid=16502 comm="syz.2.5323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.674487][ T29] audit: type=1400 audit(1450.536:6790): avc: denied { setopt } for pid=16502 comm="syz.2.5323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.694147][ T29] audit: type=1400 audit(1450.588:6791): avc: denied { read write } for pid=16506 comm="syz.3.5324" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.719207][ T29] audit: type=1400 audit(1450.588:6792): avc: denied { open } for pid=16506 comm="syz.3.5324" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.768433][T16511] syzkaller0: entered promiscuous mode [ 169.774092][T16511] syzkaller0: entered allmulticast mode [ 169.823438][T16519] loop8: detected capacity change from 0 to 256 [ 169.932122][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5339'. [ 170.254021][T16557] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 170.303086][T16578] loop4: detected capacity change from 0 to 512 [ 170.345601][T16578] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.382003][T16578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.396347][T16578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 170.413898][T16578] System zones: 1-12 [ 170.429444][T16578] EXT4-fs (loop4): 1 truncate cleaned up [ 170.441200][T16578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.611481][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.640048][T16609] loop7: detected capacity change from 0 to 512 [ 170.649984][T16613] loop8: detected capacity change from 0 to 512 [ 170.665548][T16609] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.675824][T16613] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 170.691764][T16615] loop4: detected capacity change from 0 to 1024 [ 170.701008][T16615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.710240][T16613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 170.720094][T16613] System zones: 1-12 [ 170.725491][T16609] EXT4-fs (loop7): 1 truncate cleaned up [ 170.732378][T16613] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.5382: corrupted in-inode xattr: e_value size too large [ 170.735097][T16609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.756345][T16615] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 170.777983][T16613] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5382: couldn't read orphan inode 15 (err -117) [ 170.790179][T16615] System zones: 0-1, 3-36 [ 170.795696][T16615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.822015][T16613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.857782][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.880226][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.881694][T16613] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.5382: Unrecognised inode hash code 4 [ 170.900930][T16613] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5382: Corrupt directory, running e2fsck is recommended [ 170.914250][T16613] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.5382: Unrecognised inode hash code 4 [ 170.925647][T16613] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5382: Corrupt directory, running e2fsck is recommended [ 170.980847][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.981211][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5374'. [ 171.091017][T16638] loop8: detected capacity change from 0 to 2048 [ 171.121892][T16638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.138653][T16638] EXT4-fs (loop8): shut down requested (0) [ 171.156106][T15716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.318589][T16650] loop4: detected capacity change from 0 to 512 [ 171.327347][T16650] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 171.337707][T16650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 171.346015][T16650] System zones: 1-12 [ 171.353810][T16650] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5390: corrupted in-inode xattr: e_value size too large [ 171.375197][T16650] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5390: couldn't read orphan inode 15 (err -117) [ 171.388161][T16650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.419038][T16650] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.5390: Unrecognised inode hash code 4 [ 171.430623][T16650] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5390: Corrupt directory, running e2fsck is recommended [ 171.446263][T16650] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.5390: Unrecognised inode hash code 4 [ 171.457733][T16650] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5390: Corrupt directory, running e2fsck is recommended [ 171.491039][ T9784] bridge_slave_1: left allmulticast mode [ 171.491597][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.496801][ T9784] bridge_slave_1: left promiscuous mode [ 171.511503][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.520035][ T9784] bridge_slave_0: left promiscuous mode [ 171.525726][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.569443][ T9784] bond1 (unregistering): (slave geneve2): Releasing active interface [ 171.619884][ T9784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.636601][T16673] loop2: detected capacity change from 0 to 1024 [ 171.649473][ T9784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.658998][T16673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.667647][ T9784] bond0 (unregistering): Released all slaves [ 171.674454][T16673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 171.688246][ T9784] bond1 (unregistering): Released all slaves [ 171.693054][T16673] System zones: 0-1, 3-36 [ 171.701727][T16673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.729534][ T9784] tipc: Disabling bearer [ 171.734594][ T9784] tipc: Left network mode [ 171.765707][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.794265][T16681] loop4: detected capacity change from 0 to 512 [ 171.855003][ T9784] hsr_slave_0: left promiscuous mode [ 171.861399][ T9784] hsr_slave_1: left promiscuous mode [ 171.866919][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.874935][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.896110][T16691] loop2: detected capacity change from 0 to 512 [ 171.913256][T16691] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 171.931257][T16691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 171.948502][T16691] System zones: 1-12 [ 171.953286][T16691] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5402: corrupted in-inode xattr: e_value size too large [ 171.970049][T16691] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5402: couldn't read orphan inode 15 (err -117) [ 171.984772][T16691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.999910][ T9784] team0 (unregistering): Port device team_slave_1 removed [ 172.011881][ T9784] team0 (unregistering): Port device team_slave_0 removed [ 172.057669][T16691] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.5402: Unrecognised inode hash code 4 [ 172.069345][T16691] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5402: Corrupt directory, running e2fsck is recommended [ 172.083035][T16691] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.5402: Unrecognised inode hash code 4 [ 172.094529][T16691] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5402: Corrupt directory, running e2fsck is recommended [ 172.132996][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.147164][T16653] chnl_net:caif_netlink_parms(): no params data found [ 172.196638][T16713] loop7: detected capacity change from 0 to 1024 [ 172.204032][T16713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.236468][T16713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 172.246746][T16713] System zones: 0-1, 3-36 [ 172.252429][T16713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.252500][T16653] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.272311][T16653] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.279775][T16653] bridge_slave_0: entered allmulticast mode [ 172.286318][T16653] bridge_slave_0: entered promiscuous mode [ 172.296646][T16721] loop2: detected capacity change from 0 to 2048 [ 172.316914][T16653] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.324118][T16653] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.331440][T16653] bridge_slave_1: entered allmulticast mode [ 172.331817][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.337957][T16653] bridge_slave_1: entered promiscuous mode [ 172.356937][T16721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.390662][T16653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.402072][T16653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.443882][T16653] team0: Port device team_slave_0 added [ 172.476315][T16653] team0: Port device team_slave_1 added [ 172.519026][T16653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.526038][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.552073][T16653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.564120][T16653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.571230][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.597297][T16653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.633977][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.674692][T16734] netlink: 'syz.2.5418': attribute type 4 has an invalid length. [ 172.685472][T16653] hsr_slave_0: entered promiscuous mode [ 172.692891][T16653] hsr_slave_1: entered promiscuous mode [ 172.709268][T16734] netlink: 'syz.2.5418': attribute type 4 has an invalid length. [ 172.817553][ T9784] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.883443][ T9784] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.983328][ T9784] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.004320][T16741] chnl_net:caif_netlink_parms(): no params data found [ 173.037783][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.044941][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.052136][T16741] bridge_slave_0: entered allmulticast mode [ 173.058449][T16741] bridge_slave_0: entered promiscuous mode [ 173.065641][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.072769][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.080020][T16741] bridge_slave_1: entered allmulticast mode [ 173.086369][T16741] bridge_slave_1: entered promiscuous mode [ 173.094963][ T9784] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.117473][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.128336][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.150387][T16741] team0: Port device team_slave_0 added [ 173.161648][T16741] team0: Port device team_slave_1 added [ 173.186149][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.193098][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.219211][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.234243][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.241188][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.267681][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.280999][T16653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.292076][T16653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.302672][T16653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.311286][T16653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.336889][T16741] hsr_slave_0: entered promiscuous mode [ 173.342955][T16741] hsr_slave_1: entered promiscuous mode [ 173.348705][T16741] debugfs: 'hsr0' already exists in 'hsr' [ 173.354435][T16741] Cannot create hsr debugfs directory [ 173.367426][ T9784] bridge_slave_1: left allmulticast mode [ 173.373181][ T9784] bridge_slave_1: left promiscuous mode [ 173.379014][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.387254][ T9784] bridge_slave_0: left allmulticast mode [ 173.392926][ T9784] bridge_slave_0: left promiscuous mode [ 173.398587][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.463307][ T9784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.473180][ T9784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.483388][ T9784] bond0 (unregistering): Released all slaves [ 173.571231][ T9784] hsr_slave_0: left promiscuous mode [ 173.577727][ T9784] hsr_slave_1: left promiscuous mode [ 173.583219][ T9784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.590650][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.598259][ T9784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.605818][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.616224][ T9784] veth1_macvtap: left promiscuous mode [ 173.621737][ T9784] veth0_macvtap: left promiscuous mode [ 173.627320][ T9784] veth1_vlan: left promiscuous mode [ 173.632797][ T9784] veth0_vlan: left promiscuous mode [ 173.690875][ T9784] team0 (unregistering): Port device team_slave_1 removed [ 173.702054][ T9784] team0 (unregistering): Port device team_slave_0 removed [ 173.736667][T16741] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 173.746712][T16741] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 173.758373][T16653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.765348][T16741] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 173.775550][T16741] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 173.794256][T16653] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.805547][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.812655][ T9776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.825114][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.832191][ T9776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.863986][T16653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.892658][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.905689][T16741] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.916031][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.923185][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.935914][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.943089][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.963889][T16741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.974367][T16741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.995821][T16653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.055569][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.091795][T16653] veth0_vlan: entered promiscuous mode [ 174.102433][T16653] veth1_vlan: entered promiscuous mode [ 174.121435][T16653] veth0_macvtap: entered promiscuous mode [ 174.130429][T16653] veth1_macvtap: entered promiscuous mode [ 174.146799][T16653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.157334][T16653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.169824][ T9784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.179028][ T9784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.189886][ T9784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.208137][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 174.208153][ T29] audit: type=1400 audit(1455.365:7036): avc: denied { mounton } for pid=16653 comm="syz-executor" path="/root/syzkaller.rOVXwg/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 174.215430][ T9784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.244049][ T29] audit: type=1400 audit(1455.365:7037): avc: denied { mount } for pid=16653 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.269375][ T29] audit: type=1400 audit(1455.365:7038): avc: denied { mount } for pid=16653 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 174.272409][T16741] veth0_vlan: entered promiscuous mode [ 174.290989][ T29] audit: type=1400 audit(1455.365:7039): avc: denied { mounton } for pid=16653 comm="syz-executor" path="/root/syzkaller.rOVXwg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 174.304177][T16741] veth1_vlan: entered promiscuous mode [ 174.322682][ T29] audit: type=1400 audit(1455.365:7040): avc: denied { mounton } for pid=16653 comm="syz-executor" path="/root/syzkaller.rOVXwg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 174.323518][ T29] audit: type=1400 audit(1455.407:7041): avc: denied { mounton } for pid=16653 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 174.377999][ T29] audit: type=1400 audit(1455.407:7042): avc: denied { mount } for pid=16653 comm="syz-executor" name="/" dev="gadgetfs" ino=3777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 174.414841][T16741] veth0_macvtap: entered promiscuous mode [ 174.422560][T16741] veth1_macvtap: entered promiscuous mode [ 174.445791][T16741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.459487][T16741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.467264][ T29] audit: type=1400 audit(1455.585:7043): avc: denied { create } for pid=16801 comm="syz.3.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.486291][ T29] audit: type=1400 audit(1455.596:7044): avc: denied { ioctl } for pid=16801 comm="syz.3.5388" path="socket:[48460]" dev="sockfs" ino=48460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.510631][ T29] audit: type=1400 audit(1455.596:7045): avc: denied { bind } for pid=16801 comm="syz.3.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.536591][ T9784] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.548777][ T9784] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.557984][ T9784] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.577160][ T9784] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.617626][T16809] loop2: detected capacity change from 0 to 1024 [ 174.643439][T16811] __nla_validate_parse: 1 callbacks suppressed [ 174.643459][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5420'. [ 174.650456][T16809] EXT4-fs: Ignoring removed bh option [ 174.670198][T16809] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 174.720686][T16819] netlink: 'syz.3.5440': attribute type 4 has an invalid length. [ 174.731517][T16809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.744027][T16819] netlink: 'syz.3.5440': attribute type 4 has an invalid length. [ 174.772267][T16821] loop4: detected capacity change from 0 to 256 [ 174.789963][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.084727][T16852] IPVS: Error connecting to the multicast addr [ 175.162014][T16858] loop4: detected capacity change from 0 to 512 [ 175.275824][T16874] loop7: detected capacity change from 0 to 512 [ 175.295099][T16877] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 175.295567][T16876] IPVS: stopping master sync thread 16877 ... [ 175.336499][T16874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.457088][T10436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.616292][T16897] loop4: detected capacity change from 0 to 1024 [ 175.630049][T16897] EXT4-fs: Ignoring removed bh option [ 175.652712][T16897] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 175.701232][T16897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.837028][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.874072][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5475'. [ 175.883784][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5475'. [ 175.893641][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5475'. [ 175.912883][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5475'. [ 175.950951][T16919] loop4: detected capacity change from 0 to 512 [ 175.973950][T16919] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.976207][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5478'. [ 176.017402][T16919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.030483][T16919] EXT4-fs (loop4): 1 truncate cleaned up [ 176.053967][T16919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.898028][T16974] program GPL is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.913129][T16974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.929689][T16982] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 176.936246][T16982] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.944189][T16982] vhci_hcd vhci_hcd.0: Device attached [ 176.970095][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.982581][T16982] loop2: detected capacity change from 0 to 512 [ 176.995868][T16982] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.999629][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5506'. [ 177.011955][T16982] EXT4-fs (loop2): mount failed [ 177.065287][T16983] vhci_hcd: connection closed [ 177.065516][ T9784] vhci_hcd: stop threads [ 177.074557][ T9784] vhci_hcd: release socket [ 177.079114][ T9784] vhci_hcd: disconnect device [ 177.118039][ T23] vhci_hcd: vhci_device speed not set [ 177.589973][T17013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17013 comm=syz.3.5514 [ 177.602774][T17013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17013 comm=syz.3.5514 [ 177.687572][T17024] loop2: detected capacity change from 0 to 512 [ 177.694313][T17024] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.701170][T17024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.712203][T17024] EXT4-fs (loop2): 1 truncate cleaned up [ 177.718344][T17024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.965575][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 178.028467][T17043] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 178.041857][T17043] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 178.093738][T17024] ================================================================== [ 178.101959][T17024] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 178.110338][T17024] [ 178.112682][T17024] write to 0xffff8881198b29a4 of 4 bytes by task 17032 on cpu 1: [ 178.120422][T17024] __xa_set_mark+0x172/0x1a0 [ 178.125042][T17024] __folio_mark_dirty+0x3af/0x4d0 [ 178.130103][T17024] mark_buffer_dirty+0x11e/0x210 [ 178.135068][T17024] block_write_end+0x12d/0x210 [ 178.139850][T17024] ext4_write_end+0x134/0x730 [ 178.144537][T17024] generic_perform_write+0x30f/0x490 [ 178.149845][T17024] ext4_buffered_write_iter+0x1ee/0x3c0 [ 178.155428][T17024] ext4_file_write_iter+0xdbf/0xf00 [ 178.160670][T17024] iter_file_splice_write+0x663/0xa60 [ 178.166164][T17024] direct_splice_actor+0x153/0x2a0 [ 178.171289][T17024] splice_direct_to_actor+0x30f/0x680 [ 178.176673][T17024] do_splice_direct+0xda/0x150 [ 178.181469][T17024] do_sendfile+0x380/0x650 [ 178.185936][T17024] __x64_sys_sendfile64+0x105/0x150 [ 178.191183][T17024] x64_sys_call+0x2bb0/0x2ff0 [ 178.195899][T17024] do_syscall_64+0xd2/0x200 [ 178.200435][T17024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.206352][T17024] [ 178.208771][T17024] read to 0xffff8881198b29a4 of 4 bytes by task 17024 on cpu 0: [ 178.216850][T17024] filemap_write_and_wait_range+0xfc/0x340 [ 178.222685][T17024] ext4_file_write_iter+0xe04/0xf00 [ 178.227920][T17024] iter_file_splice_write+0x663/0xa60 [ 178.233321][T17024] direct_splice_actor+0x153/0x2a0 [ 178.238458][T17024] splice_direct_to_actor+0x30f/0x680 [ 178.243857][T17024] do_splice_direct+0xda/0x150 [ 178.248638][T17024] do_sendfile+0x380/0x650 [ 178.253181][T17024] __x64_sys_sendfile64+0x105/0x150 [ 178.258429][T17024] x64_sys_call+0x2bb0/0x2ff0 [ 178.263136][T17024] do_syscall_64+0xd2/0x200 [ 178.268200][T17024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.274325][T17024] [ 178.276676][T17024] value changed: 0x00000021 -> 0x0a000021 [ 178.283278][T17024] [ 178.285616][T17024] Reported by Kernel Concurrency Sanitizer on: [ 178.291869][T17024] CPU: 0 UID: 0 PID: 17024 Comm: syz.2.5519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.302060][T17024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.312128][T17024] ================================================================== [ 178.583209][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.