last executing test programs: 5.141756101s ago: executing program 3 (id=206): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x20) ioctl$SG_IO(r1, 0x2285, &(0x7f00000026c0)={0x53, 0xfffffffffffffffb, 0x2a, 0x7f, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000440)="b049f42474f267c790f4add2c0e9ef6af8d13cdf4ea8127a7bd35a47d2421817f27445a9ac35cb86d38e", 0x0, 0xe, 0x12, 0x1, 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) fremovexattr(r0, &(0x7f0000002900)=@random={'btrfs.', '\'\'/{#+\'-^&\x00'}) syz_open_procfs$pagemap(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.128156351s ago: executing program 4 (id=207): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.917946014s ago: executing program 3 (id=208): setreuid(0xee01, 0xee01) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x0, 0x10, 0x3, 0x10000007}, &(0x7f0000000080)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000de"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r7, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 4.376172432s ago: executing program 1 (id=213): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x7cb7562f2d67) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 4.020447688s ago: executing program 4 (id=214): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00'}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3.936056069s ago: executing program 0 (id=216): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000002980)) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3.930383409s ago: executing program 3 (id=217): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3.809230121s ago: executing program 0 (id=218): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.541717375s ago: executing program 2 (id=219): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000002980)) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3.435433177s ago: executing program 1 (id=220): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.396267797s ago: executing program 2 (id=221): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.053076503s ago: executing program 4 (id=222): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.935336525s ago: executing program 3 (id=223): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00'}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.932444705s ago: executing program 0 (id=224): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_free_blocks\x00', r5, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000010000000000000000000084000a"], 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) 2.440503032s ago: executing program 1 (id=225): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) 2.402264453s ago: executing program 2 (id=226): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x20) ioctl$SG_IO(r1, 0x2285, &(0x7f00000026c0)={0x53, 0xfffffffffffffffb, 0x2a, 0x7f, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000440)="b049f42474f267c790f4add2c0e9ef6af8d13cdf4ea8127a7bd35a47d2421817f27445a9ac35cb86d38e", 0x0, 0xe, 0x12, 0x1, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) getpeername$packet(r1, 0x0, &(0x7f0000002980)) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.296828435s ago: executing program 2 (id=227): setreuid(0xee01, 0xee01) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x0, 0x10, 0x3, 0x10000007}, &(0x7f0000000080)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000de"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xffffffffffffffc4, 0x24, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r5, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 1.993395969s ago: executing program 0 (id=228): setreuid(0xee01, 0xee01) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x0, 0x10, 0x3, 0x10000007}, &(0x7f0000000080)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000de"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xffffffffffffffc4, 0x24, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r7, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 1.879172861s ago: executing program 4 (id=229): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x800006dc, 0x5, 0xfffffff9, 0xffff, 0xb, "10f720db7cd997451fa550e401630d00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xb3, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1.744035983s ago: executing program 4 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01a663350018000000000000003400000034000000050000400b00000000000011020000000100000003000000000000090400"], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020100f8ffffffb70300000801000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES64=r6], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = timerfd_create(0x0, 0x0) readv(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) 1.660118804s ago: executing program 3 (id=231): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.533196476s ago: executing program 1 (id=232): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x800006dc, 0x5, 0xfffffff9, 0xffff, 0xb, "10f720db7cd997451fa550e401630d00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) r3 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xb3, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000080)='R\x01rusq\xe3cs\xa8rVid8\xc4\x1e\f\x00\x00\xfe\xa8e', 0x0) 1.255564941s ago: executing program 2 (id=233): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.003334934s ago: executing program 1 (id=234): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x800006dc, 0x5, 0xfffffff9, 0xffff, 0xb, "10f720db7cd997451fa550e401630d00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xb3, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000080)='R\x01rusq\xe3cs\xa8rVid8\xc4\x1e\f\x00\x00\xfe\xa8e', 0x0) 991.968594ms ago: executing program 0 (id=235): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 861.298537ms ago: executing program 1 (id=236): setreuid(0xee01, 0xee01) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000de"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xffffffffffffffc4, 0x24, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r5, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 594.793031ms ago: executing program 4 (id=237): setreuid(0xee01, 0xee01) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x0, 0x10, 0x3, 0x10000007}, &(0x7f0000000080)=0x18) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xffffffffffffffc4, 0x24, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r6, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 481.365012ms ago: executing program 3 (id=238): setreuid(0xee01, 0xee01) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000de"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xffffffffffffffc4, 0x24, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1006, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r5, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 388.329354ms ago: executing program 2 (id=239): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=240): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x10001}, 0xc104}, 0x0, 0x7, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.371997][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.378089][ T3299] cgroup: Unknown subsys name 'rlimit' [ 26.488033][ T29] audit: type=1400 audit(1750820118.297:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.518077][ T29] audit: type=1400 audit(1750820118.297:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.538589][ T29] audit: type=1400 audit(1750820118.297:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.544107][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.559026][ T29] audit: type=1400 audit(1750820118.297:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.587796][ T29] audit: type=1400 audit(1750820118.327:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.610005][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.612590][ T29] audit: type=1400 audit(1750820118.327:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.644616][ T29] audit: type=1400 audit(1750820118.387:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.755501][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.795915][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.824173][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.855675][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.914742][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.922077][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.929240][ T3308] bridge_slave_0: entered allmulticast mode [ 27.935792][ T3308] bridge_slave_0: entered promiscuous mode [ 27.952272][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.959326][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.966512][ T3308] bridge_slave_1: entered allmulticast mode [ 27.972918][ T3308] bridge_slave_1: entered promiscuous mode [ 27.982877][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.989908][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.997129][ T3318] bridge_slave_0: entered allmulticast mode [ 28.003457][ T3318] bridge_slave_0: entered promiscuous mode [ 28.009805][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.016896][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.024096][ T3318] bridge_slave_1: entered allmulticast mode [ 28.030427][ T3318] bridge_slave_1: entered promiscuous mode [ 28.053496][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.069143][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.078307][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.085409][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.092760][ T3312] bridge_slave_0: entered allmulticast mode [ 28.099074][ T3312] bridge_slave_0: entered promiscuous mode [ 28.117069][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.130567][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.137700][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.144921][ T3312] bridge_slave_1: entered allmulticast mode [ 28.151451][ T3312] bridge_slave_1: entered promiscuous mode [ 28.158448][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.168817][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.189823][ T3308] team0: Port device team_slave_0 added [ 28.209224][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.216314][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.224084][ T3314] bridge_slave_0: entered allmulticast mode [ 28.230314][ T3314] bridge_slave_0: entered promiscuous mode [ 28.236860][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.244021][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.251154][ T3314] bridge_slave_1: entered allmulticast mode [ 28.257654][ T3314] bridge_slave_1: entered promiscuous mode [ 28.264337][ T3308] team0: Port device team_slave_1 added [ 28.295007][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.305154][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.317432][ T3318] team0: Port device team_slave_0 added [ 28.328608][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.338716][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.350285][ T3318] team0: Port device team_slave_1 added [ 28.356383][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.363441][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.389379][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.417103][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.424099][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.450095][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.480917][ T3312] team0: Port device team_slave_0 added [ 28.487969][ T3314] team0: Port device team_slave_0 added [ 28.493701][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.500761][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.508705][ T3309] bridge_slave_0: entered allmulticast mode [ 28.514953][ T3309] bridge_slave_0: entered promiscuous mode [ 28.521925][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.528867][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.554917][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.566762][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.573817][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.599722][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.611009][ T3312] team0: Port device team_slave_1 added [ 28.622055][ T3314] team0: Port device team_slave_1 added [ 28.627872][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.634963][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.642355][ T3309] bridge_slave_1: entered allmulticast mode [ 28.648730][ T3309] bridge_slave_1: entered promiscuous mode [ 28.684990][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.691981][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.717955][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.733496][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.740459][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.766428][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.778980][ T3308] hsr_slave_0: entered promiscuous mode [ 28.785334][ T3308] hsr_slave_1: entered promiscuous mode [ 28.792164][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.811508][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.818472][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.844416][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.855452][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.862468][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.888431][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.902607][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.921172][ T3318] hsr_slave_0: entered promiscuous mode [ 28.927497][ T3318] hsr_slave_1: entered promiscuous mode [ 28.933244][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.940785][ T3318] Cannot create hsr debugfs directory [ 28.968059][ T3314] hsr_slave_0: entered promiscuous mode [ 28.974142][ T3314] hsr_slave_1: entered promiscuous mode [ 28.979973][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.987709][ T3314] Cannot create hsr debugfs directory [ 29.007421][ T3309] team0: Port device team_slave_0 added [ 29.013993][ T3309] team0: Port device team_slave_1 added [ 29.049982][ T3312] hsr_slave_0: entered promiscuous mode [ 29.055932][ T3312] hsr_slave_1: entered promiscuous mode [ 29.061707][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.069307][ T3312] Cannot create hsr debugfs directory [ 29.086986][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.093962][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.119928][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.145181][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.152226][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.178284][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.267658][ T3309] hsr_slave_0: entered promiscuous mode [ 29.273777][ T3309] hsr_slave_1: entered promiscuous mode [ 29.279710][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.287309][ T3309] Cannot create hsr debugfs directory [ 29.372977][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.381961][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.400318][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.408728][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.429284][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.441809][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.450493][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.471143][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.480970][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.491729][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.501746][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.510618][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.552801][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.563358][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.578075][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.586549][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.599884][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.617453][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.633131][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.640277][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.652657][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.663462][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.673062][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.680102][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.692035][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.707363][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.735205][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.757424][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.771165][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.780394][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.806492][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.813657][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.834591][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.841778][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.851908][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.861166][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.871972][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.883205][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.890312][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.913818][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.920958][ T1958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.929978][ T1958] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.937146][ T1958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.946181][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.953312][ T1958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.984905][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.029644][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.071001][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.091011][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.098140][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.123268][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.132887][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.139952][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.160085][ T3308] veth0_vlan: entered promiscuous mode [ 30.171327][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.189710][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.209415][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.228390][ T3308] veth1_vlan: entered promiscuous mode [ 30.268649][ T3308] veth0_macvtap: entered promiscuous mode [ 30.286892][ T3308] veth1_macvtap: entered promiscuous mode [ 30.297129][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.313973][ T3318] veth0_vlan: entered promiscuous mode [ 30.335263][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.345162][ T3318] veth1_vlan: entered promiscuous mode [ 30.359724][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.370713][ T3312] veth0_vlan: entered promiscuous mode [ 30.382681][ T3312] veth1_vlan: entered promiscuous mode [ 30.390269][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.399060][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.407980][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.416717][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.446606][ T3318] veth0_macvtap: entered promiscuous mode [ 30.464096][ T3318] veth1_macvtap: entered promiscuous mode [ 30.480538][ T3312] veth0_macvtap: entered promiscuous mode [ 30.488887][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.498791][ T3312] veth1_macvtap: entered promiscuous mode [ 30.514595][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.533902][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.542854][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.551835][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.560601][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572971][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.590120][ T3314] veth0_vlan: entered promiscuous mode [ 30.596754][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.610085][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.625911][ T3314] veth1_vlan: entered promiscuous mode [ 30.642854][ T3309] veth0_vlan: entered promiscuous mode [ 30.651027][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.659895][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.668666][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.677502][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.700451][ T3314] veth0_macvtap: entered promiscuous mode [ 30.716579][ T3309] veth1_vlan: entered promiscuous mode [ 30.726042][ T3314] veth1_macvtap: entered promiscuous mode [ 30.750841][ T3309] veth0_macvtap: entered promiscuous mode [ 30.760072][ T3481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.762277][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.775462][ T3478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.792557][ T3309] veth1_macvtap: entered promiscuous mode [ 30.810036][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.817356][ T3478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.825439][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.846636][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.855529][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.864308][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.873042][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.887115][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.899522][ T3491] loop3: detected capacity change from 0 to 512 [ 30.903028][ T3478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.906665][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.923342][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.932096][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.940884][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.952063][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.963805][ T3491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.018535][ T3491] EXT4-fs (loop3): 1 orphan inode deleted [ 31.024705][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.045804][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.049036][ T1876] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 31.061636][ T3491] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.086148][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.107147][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.151418][ T3484] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.165810][ T3505] loop2: detected capacity change from 0 to 512 [ 31.179830][ T3508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.192579][ T3505] EXT4-fs (loop2): 1 orphan inode deleted [ 31.213007][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.237766][ T12] __quota_error: 40 callbacks suppressed [ 31.237782][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 31.237967][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.243537][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 31.254972][ T3505] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.312657][ T3505] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.548966][ T3525] loop0: detected capacity change from 0 to 512 [ 31.569158][ T3525] EXT4-fs (loop0): 1 orphan inode deleted [ 31.581492][ T2111] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 31.591312][ T2111] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 31.622689][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.670244][ T3525] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.718392][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.757940][ T3524] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.929554][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.049506][ T3545] loop2: detected capacity change from 0 to 512 [ 32.065395][ T3545] EXT4-fs (loop2): 1 orphan inode deleted [ 32.082651][ T50] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 32.092507][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 32.094203][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.117446][ T3545] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.148402][ T3542] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.206173][ T29] audit: type=1400 audit(1750820124.017:111): avc: denied { map_read map_write } for pid=3558 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.229312][ T3556] loop4: detected capacity change from 0 to 512 [ 32.251997][ T29] audit: type=1400 audit(1750820124.067:112): avc: denied { create } for pid=3558 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.271772][ T29] audit: type=1326 audit(1750820124.077:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 32.294967][ T29] audit: type=1326 audit(1750820124.077:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 32.318162][ T29] audit: type=1326 audit(1750820124.077:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 32.341495][ T29] audit: type=1326 audit(1750820124.077:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 32.343658][ T3560] loop3: detected capacity change from 0 to 2048 [ 32.364606][ T29] audit: type=1326 audit(1750820124.077:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 32.409602][ T3556] EXT4-fs (loop4): 1 orphan inode deleted [ 32.421328][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.434457][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 32.467621][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.500008][ T3556] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.543588][ T3556] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.580834][ T3576] loop3: detected capacity change from 0 to 2048 [ 32.635105][ T3577] loop1: detected capacity change from 0 to 512 [ 32.656160][ T3577] EXT4-fs (loop1): 1 orphan inode deleted [ 32.678252][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.692889][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 32.705755][ T3577] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.720915][ T3577] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.896593][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.258031][ T3601] loop3: detected capacity change from 0 to 512 [ 33.265082][ T3601] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.271554][ T3601] EXT4-fs: Ignoring removed bh option [ 33.344882][ T3601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.357776][ T3601] EXT4-fs (loop3): 1 truncate cleaned up [ 33.363936][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.392061][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.468407][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.503965][ T3610] loop4: detected capacity change from 0 to 2048 [ 33.510511][ T3611] loop2: detected capacity change from 0 to 2048 [ 33.544135][ T3609] loop1: detected capacity change from 0 to 512 [ 33.576990][ T3609] EXT4-fs (loop1): 1 orphan inode deleted [ 33.602182][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 33.618789][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.649556][ T3609] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.664592][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.674409][ T3609] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.723578][ T3621] loop2: detected capacity change from 0 to 512 [ 33.759459][ T3621] EXT4-fs (loop2): 1 orphan inode deleted [ 33.769079][ T3627] loop3: detected capacity change from 0 to 512 [ 33.775480][ T3628] loop4: detected capacity change from 0 to 2048 [ 33.775844][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 33.805819][ T3629] loop0: detected capacity change from 0 to 512 [ 33.815252][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.828461][ T3621] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.838428][ T3629] EXT4-fs (loop0): 1 orphan inode deleted [ 33.844982][ T2111] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 33.847726][ T3627] EXT4-fs (loop3): 1 orphan inode deleted [ 33.857847][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.863000][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.890125][ T3627] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.892596][ T2111] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 33.930988][ T3629] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.950612][ T3617] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.973309][ T3620] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.992963][ T3623] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 34.134374][ T3643] loop4: detected capacity change from 0 to 512 [ 34.163486][ T3643] EXT4-fs (loop4): 1 orphan inode deleted [ 34.169689][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.182355][ T1876] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 34.182667][ T3643] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.218839][ T3642] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 34.332549][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.412257][ T3648] loop1: detected capacity change from 0 to 2048 [ 34.508344][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.547922][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.609212][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.995871][ T3657] loop2: detected capacity change from 0 to 512 [ 35.002649][ T3657] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.009123][ T3657] EXT4-fs: Ignoring removed bh option [ 35.122958][ T3657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.159184][ T3670] loop1: detected capacity change from 0 to 512 [ 35.165993][ T3670] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.172482][ T3670] EXT4-fs: Ignoring removed bh option [ 35.201638][ T3670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.213866][ T3657] EXT4-fs (loop2): 1 truncate cleaned up [ 35.220341][ T3657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.251559][ T3670] EXT4-fs (loop1): 1 truncate cleaned up [ 35.258139][ T3670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.296140][ T3665] loop3: detected capacity change from 0 to 512 [ 35.343644][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.407988][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.420759][ T3665] EXT4-fs (loop3): 1 orphan inode deleted [ 35.434317][ T1876] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 35.459081][ T3686] loop4: detected capacity change from 0 to 512 [ 35.462086][ T3665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.478318][ T3665] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.512476][ T3661] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.533083][ T3686] EXT4-fs (loop4): 1 orphan inode deleted [ 35.545740][ T3686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.558538][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 35.573884][ T3686] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.579705][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.619781][ T3678] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.663105][ T3700] loop0: detected capacity change from 0 to 2048 [ 35.688277][ T3701] loop2: detected capacity change from 0 to 512 [ 35.698750][ T3702] loop1: detected capacity change from 0 to 512 [ 35.717312][ T3701] EXT4-fs (loop2): 1 orphan inode deleted [ 35.723957][ T3701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.737876][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 35.739934][ T3702] EXT4-fs (loop1): 1 orphan inode deleted [ 35.756955][ T3701] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.761807][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.774091][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 35.791365][ T3702] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.802057][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.814685][ T3697] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.837627][ T3699] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.867851][ T3710] __nla_validate_parse: 51 callbacks suppressed [ 35.867867][ T3710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.45'. [ 35.896909][ T3708] loop3: detected capacity change from 0 to 512 [ 35.913373][ T3708] EXT4-fs (loop3): 1 orphan inode deleted [ 35.919518][ T3708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.933463][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 35.945039][ T3714] loop0: detected capacity change from 0 to 512 [ 35.945083][ T3708] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.975845][ T3714] EXT4-fs (loop0): 1 orphan inode deleted [ 35.986767][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 35.998789][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.012864][ T3708] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.021472][ T3714] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.036875][ T3710] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.224398][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.276067][ T3719] loop4: detected capacity change from 0 to 512 [ 36.294688][ T3719] EXT4-fs (loop4): 1 orphan inode deleted [ 36.301060][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.314480][ T1876] __quota_error: 571 callbacks suppressed [ 36.314493][ T1876] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 36.314559][ T3719] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.320338][ T1876] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 36.353210][ T3719] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.462293][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.472500][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.545917][ T3725] loop2: detected capacity change from 0 to 512 [ 36.564094][ T3725] EXT4-fs (loop2): 1 orphan inode deleted [ 36.573607][ T3730] loop1: detected capacity change from 0 to 512 [ 36.580199][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.593548][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 36.603282][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 36.616066][ T3725] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.631300][ T3725] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.644952][ T3730] EXT4-fs (loop1): 1 orphan inode deleted [ 36.650953][ T3730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.664406][ T50] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 36.674264][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 36.681577][ T3730] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.710319][ T3727] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.719084][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.728557][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.820979][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 36.833856][ T3737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 36.869124][ T3737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 36.892667][ T3737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 36.997578][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 37.340806][ T3749] loop0: detected capacity change from 0 to 512 [ 37.347750][ T3749] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.354253][ T3749] EXT4-fs: Ignoring removed bh option [ 37.360566][ T3749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.372539][ T3749] EXT4-fs (loop0): 1 truncate cleaned up [ 37.378882][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.489895][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.504946][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.599608][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.653922][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 37.665165][ T3758] loop4: detected capacity change from 0 to 512 [ 37.666392][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 37.689848][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 37.715870][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 37.734024][ T3758] EXT4-fs (loop4): 1 orphan inode deleted [ 37.744424][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.852078][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 37.861940][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 37.880800][ T3758] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.891492][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.664562][ T3772] loop3: detected capacity change from 0 to 512 [ 38.671255][ T3772] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.677763][ T3772] EXT4-fs: Ignoring removed bh option [ 38.686429][ T3772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.698667][ T3772] EXT4-fs (loop3): 1 truncate cleaned up [ 38.705016][ T3772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.977341][ T29] audit: type=1326 audit(1750820130.787:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.005278][ T29] audit: type=1326 audit(1750820130.817:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.024481][ T3758] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.028494][ T29] audit: type=1326 audit(1750820130.817:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.060346][ T29] audit: type=1326 audit(1750820130.817:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.080004][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.083845][ T29] audit: type=1326 audit(1750820130.817:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.115836][ T29] audit: type=1326 audit(1750820130.817:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffb90a4e929 code=0x7ffc0000 [ 39.159814][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.176992][ T3787] loop2: detected capacity change from 0 to 2048 [ 39.195503][ T3786] loop0: detected capacity change from 0 to 512 [ 39.218510][ T3793] loop3: detected capacity change from 0 to 2048 [ 39.360731][ T3798] loop1: detected capacity change from 0 to 512 [ 39.367548][ T3798] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.374044][ T3798] EXT4-fs: Ignoring removed bh option [ 39.382236][ T3798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.467756][ T3796] loop4: detected capacity change from 0 to 2048 [ 39.766163][ T3798] EXT4-fs (loop1): 1 truncate cleaned up [ 39.768525][ T3786] EXT4-fs (loop0): 1 orphan inode deleted [ 39.772222][ T3798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.664962][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 40.678674][ T3786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.763036][ T3786] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.944096][ T3785] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.952550][ T3814] loop4: detected capacity change from 0 to 2048 [ 40.959625][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.022450][ T3813] loop3: detected capacity change from 0 to 512 [ 41.066663][ T3821] __nla_validate_parse: 3 callbacks suppressed [ 41.066679][ T3821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.252115][ T3820] loop2: detected capacity change from 0 to 512 [ 41.259342][ T3820] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.265894][ T3820] EXT4-fs: Ignoring removed bh option [ 41.274842][ T3820] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.291604][ T3820] EXT4-fs (loop2): 1 truncate cleaned up [ 41.298339][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.333923][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 41.334020][ T29] audit: type=1326 audit(1750820133.147:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc9ca858e7 code=0x7ffc0000 [ 41.370646][ T3816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.391544][ T29] audit: type=1326 audit(1750820133.187:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc9ca2ab19 code=0x7ffc0000 [ 41.414641][ T29] audit: type=1326 audit(1750820133.187:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc9ca858e7 code=0x7ffc0000 [ 41.416315][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.437712][ T29] audit: type=1326 audit(1750820133.187:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc9ca2ab19 code=0x7ffc0000 [ 41.437738][ T29] audit: type=1326 audit(1750820133.187:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 41.451827][ T3813] EXT4-fs (loop3): 1 orphan inode deleted [ 41.469699][ T29] audit: type=1326 audit(1750820133.197:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc9ca858e7 code=0x7ffc0000 [ 41.469790][ T29] audit: type=1326 audit(1750820133.197:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc9ca2ab19 code=0x7ffc0000 [ 41.495817][ T1876] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.498604][ T29] audit: type=1326 audit(1750820133.197:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 41.521682][ T1876] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 41.545135][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.613019][ T29] audit: type=1326 audit(1750820133.427:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3827 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32001e929 code=0x7ffc0000 [ 41.629858][ T3816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.639802][ T3813] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.676533][ T3816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.704736][ T3833] loop4: detected capacity change from 0 to 512 [ 41.735520][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.745265][ T3831] loop0: detected capacity change from 0 to 2048 [ 41.746040][ T3833] EXT4-fs (loop4): 1 orphan inode deleted [ 41.758875][ T1958] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 41.779873][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.808050][ T3813] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.817679][ T3833] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.856932][ T3826] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.932756][ T3838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 41.945263][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 41.951936][ T3847] loop0: detected capacity change from 0 to 512 [ 41.969477][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 42.007064][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 42.062615][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.185730][ T3852] loop2: detected capacity change from 0 to 512 [ 42.192527][ T3852] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.198986][ T3852] EXT4-fs: Ignoring removed bh option [ 42.207263][ T3852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.219113][ T3852] EXT4-fs (loop2): 1 truncate cleaned up [ 42.225583][ T3852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.264222][ T3847] EXT4-fs (loop0): 1 orphan inode deleted [ 42.275197][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.288644][ T3847] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.326913][ T1958] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 42.372414][ T3845] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.420011][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.446790][ T3863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 42.458586][ T3863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 43.519771][ T3877] loop1: detected capacity change from 0 to 2048 [ 43.536224][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.551825][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.657873][ T3870] loop4: detected capacity change from 0 to 512 [ 43.664521][ T3870] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.671046][ T3870] EXT4-fs: Ignoring removed bh option [ 43.676974][ T3870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.688207][ T3870] EXT4-fs (loop4): 1 truncate cleaned up [ 43.689788][ T3878] loop3: detected capacity change from 0 to 512 [ 43.694467][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.700514][ T3878] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.719129][ T3878] EXT4-fs: Ignoring removed bh option [ 43.726721][ T3878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.747014][ T3878] EXT4-fs (loop3): 1 truncate cleaned up [ 43.754412][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.825537][ T3892] loop0: detected capacity change from 0 to 512 [ 43.846746][ T3892] EXT4-fs (loop0): 1 orphan inode deleted [ 43.855347][ T3892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.876107][ T3886] loop2: detected capacity change from 0 to 512 [ 43.920236][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 43.949888][ T3892] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.961553][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.971778][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.984044][ T3886] EXT4-fs (loop2): 1 orphan inode deleted [ 43.999327][ T1876] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 44.014131][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.030720][ T3886] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.046599][ T3892] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.065110][ T3886] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.121655][ T3907] loop4: detected capacity change from 0 to 512 [ 44.166467][ T3907] EXT4-fs (loop4): 1 orphan inode deleted [ 44.174105][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.186770][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 44.187905][ T3907] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.219439][ T3913] loop1: detected capacity change from 0 to 512 [ 44.406464][ T3915] loop3: detected capacity change from 0 to 512 [ 44.413290][ T3915] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.419718][ T3915] EXT4-fs: Ignoring removed bh option [ 44.425711][ T3915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.466142][ T3915] EXT4-fs (loop3): 1 truncate cleaned up [ 44.473133][ T3915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.508081][ T3913] EXT4-fs (loop1): 1 orphan inode deleted [ 44.560878][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.569402][ T1958] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 44.584629][ T3913] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.614139][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.618674][ T3900] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.632426][ T3909] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.661978][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.706239][ T3921] loop2: detected capacity change from 0 to 512 [ 44.724147][ T3921] EXT4-fs (loop2): 1 orphan inode deleted [ 44.730142][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.742751][ T1958] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 44.744776][ T3921] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.781224][ T3921] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.871640][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.944673][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.980210][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.030375][ T3947] loop4: detected capacity change from 0 to 2048 [ 45.294877][ T3967] loop1: detected capacity change from 0 to 2048 [ 45.887950][ T3974] loop3: detected capacity change from 0 to 512 [ 45.894650][ T3974] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.901111][ T3974] EXT4-fs: Ignoring removed bh option [ 45.989068][ T3974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.001020][ T3974] EXT4-fs (loop3): 1 truncate cleaned up [ 46.007499][ T3974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.058813][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.123801][ T3978] loop4: detected capacity change from 0 to 2048 [ 46.315958][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.347852][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 46.347865][ T29] audit: type=1326 audit(1750820138.157:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc9ca858e7 code=0x7ffc0000 [ 46.383432][ T3976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3976 comm=syz.4.95 [ 46.398895][ T3984] loop0: detected capacity change from 0 to 512 [ 46.409542][ T29] audit: type=1326 audit(1750820138.197:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc9ca2ab19 code=0x7ffc0000 [ 46.432757][ T29] audit: type=1326 audit(1750820138.197:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc9ca858e7 code=0x7ffc0000 [ 46.455905][ T29] audit: type=1326 audit(1750820138.197:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc9ca2ab19 code=0x7ffc0000 [ 46.479079][ T29] audit: type=1326 audit(1750820138.197:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.502394][ T29] audit: type=1326 audit(1750820138.197:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.525680][ T29] audit: type=1326 audit(1750820138.197:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.529012][ T3992] loop3: detected capacity change from 0 to 512 [ 46.548935][ T29] audit: type=1326 audit(1750820138.197:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.548963][ T29] audit: type=1326 audit(1750820138.197:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.548985][ T29] audit: type=1326 audit(1750820138.197:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9ca8e929 code=0x7ffc0000 [ 46.628042][ T3991] loop2: detected capacity change from 0 to 512 [ 46.672299][ T3991] EXT4-fs (loop2): 1 orphan inode deleted [ 46.690392][ T3992] EXT4-fs (loop3): 1 orphan inode deleted [ 46.699730][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.712878][ T3991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.738927][ T3984] EXT4-fs (loop0): 1 orphan inode deleted [ 46.745999][ T3992] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.789181][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 46.801334][ T3991] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.811970][ T3984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.825142][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 46.825398][ T3984] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.002988][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 47.044534][ T3983] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.059751][ T4005] loop4: detected capacity change from 0 to 512 [ 47.066683][ T4005] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.073204][ T4005] EXT4-fs: Ignoring removed bh option [ 47.078915][ T4005] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.119608][ T4005] EXT4-fs (loop4): 1 truncate cleaned up [ 47.151546][ T3985] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.252194][ T3980] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.355048][ T3987] __nla_validate_parse: 31 callbacks suppressed [ 47.355085][ T3987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 47.443819][ T4013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 47.773847][ T4014] loop2: detected capacity change from 0 to 512 [ 47.780485][ T4014] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.787207][ T4014] EXT4-fs: Ignoring removed bh option [ 47.802690][ T4014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.831881][ T4014] EXT4-fs (loop2): 1 truncate cleaned up [ 47.934046][ T4023] loop4: detected capacity change from 0 to 512 [ 47.976853][ T4018] loop3: detected capacity change from 0 to 512 [ 47.994938][ T4026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 48.005746][ T4023] EXT4-fs (loop4): 1 orphan inode deleted [ 48.032827][ T2181] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 48.047894][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 48.059644][ T4018] EXT4-fs (loop3): 1 orphan inode deleted [ 48.064032][ T4023] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.066272][ T4018] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.076016][ T2181] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 48.111493][ T4018] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.135133][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 48.145430][ T4023] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.168812][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 48.411769][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 48.916883][ T4045] loop0: detected capacity change from 0 to 512 [ 48.923630][ T4045] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.930079][ T4045] EXT4-fs: Ignoring removed bh option [ 48.952411][ T4045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.971962][ T4045] EXT4-fs (loop0): 1 truncate cleaned up [ 49.003442][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 49.344979][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 49.374997][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 49.395914][ T4053] loop1: detected capacity change from 0 to 512 [ 49.409082][ T4051] loop3: detected capacity change from 0 to 512 [ 49.427423][ T4053] EXT4-fs (loop1): 1 orphan inode deleted [ 49.443577][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.478103][ T4051] EXT4-fs (loop3): 1 orphan inode deleted [ 49.484722][ T4053] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.529721][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.565669][ T4051] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.671287][ T4053] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.770946][ T4051] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.792409][ T4073] loop2: detected capacity change from 0 to 512 [ 49.819893][ T4073] EXT4-fs (loop2): 1 orphan inode deleted [ 49.826727][ T4073] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.838087][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.855294][ T4073] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.094264][ T4081] loop0: detected capacity change from 0 to 512 [ 50.101048][ T4081] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.107661][ T4081] EXT4-fs: Ignoring removed bh option [ 50.119405][ T4081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.132294][ T4081] EXT4-fs (loop0): 1 truncate cleaned up [ 51.176534][ T4096] loop1: detected capacity change from 0 to 512 [ 51.183542][ T4096] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.190050][ T4096] EXT4-fs: Ignoring removed bh option [ 51.200356][ T4096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.212658][ T4096] EXT4-fs (loop1): 1 truncate cleaned up [ 51.487429][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 51.487443][ T29] audit: type=1326 audit(1750820143.227:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.547500][ T29] audit: type=1326 audit(1750820143.327:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.570959][ T29] audit: type=1326 audit(1750820143.327:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.594522][ T29] audit: type=1326 audit(1750820143.327:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.617836][ T29] audit: type=1326 audit(1750820143.327:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.643047][ T29] audit: type=1326 audit(1750820143.327:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.645958][ T4109] loop3: detected capacity change from 0 to 2048 [ 51.666426][ T29] audit: type=1326 audit(1750820143.327:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.696319][ T29] audit: type=1326 audit(1750820143.327:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f19951ce929 code=0x7ffc0000 [ 51.719664][ T29] audit: type=1326 audit(1750820143.327:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19951c58e7 code=0x7ffc0000 [ 51.742939][ T29] audit: type=1326 audit(1750820143.327:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f199516ab19 code=0x7ffc0000 [ 51.910037][ T4122] loop1: detected capacity change from 0 to 512 [ 52.100919][ T4122] EXT4-fs (loop1): 1 orphan inode deleted [ 52.112004][ T2111] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 52.164562][ T4122] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.384102][ T4130] __nla_validate_parse: 22 callbacks suppressed [ 52.384120][ T4130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 52.405148][ T4116] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.454176][ T4130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 52.631226][ T4141] loop0: detected capacity change from 0 to 2048 [ 52.748563][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 53.150038][ T4145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 53.210571][ T4145] loop1: detected capacity change from 0 to 512 [ 53.233388][ T4145] EXT4-fs (loop1): 1 orphan inode deleted [ 53.240108][ T4145] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.253582][ T2111] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 53.265878][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 53.267517][ T4145] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.291984][ T4149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 53.301023][ T4154] loop0: detected capacity change from 0 to 2048 [ 53.432486][ T4149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 53.500092][ T4149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 53.599546][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 54.414476][ T4171] loop3: detected capacity change from 0 to 512 [ 54.421128][ T4171] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.427595][ T4171] EXT4-fs: Ignoring removed bh option [ 54.661694][ T4171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.687756][ T4176] loop2: detected capacity change from 0 to 2048 [ 55.418209][ T4178] loop0: detected capacity change from 0 to 512 [ 55.425243][ T4178] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.431725][ T4178] EXT4-fs: Ignoring removed bh option [ 55.463269][ T4178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.490795][ T4171] EXT4-fs (loop3): 1 truncate cleaned up [ 55.497645][ T4178] EXT4-fs (loop0): 1 truncate cleaned up [ 56.929932][ T4202] loop4: detected capacity change from 0 to 512 [ 56.936909][ T4202] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.943370][ T4202] EXT4-fs: Ignoring removed bh option [ 56.952532][ T4202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.964302][ T4187] loop1: detected capacity change from 0 to 512 [ 56.970949][ T4187] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.977425][ T4187] EXT4-fs: Ignoring removed bh option [ 57.015156][ T4199] loop2: detected capacity change from 0 to 512 [ 57.027817][ T4187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.045079][ T4207] loop0: detected capacity change from 0 to 512 [ 57.051946][ T4207] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.058429][ T4207] EXT4-fs: Ignoring removed bh option [ 57.076488][ T4207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.087706][ T4202] EXT4-fs (loop4): 1 truncate cleaned up [ 57.113117][ T4187] EXT4-fs (loop1): 1 truncate cleaned up [ 57.144232][ T4207] EXT4-fs (loop0): 1 truncate cleaned up [ 57.324098][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 57.345047][ T4206] loop3: detected capacity change from 0 to 512 [ 57.351603][ T4206] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.358052][ T4206] EXT4-fs: Ignoring removed bh option [ 57.375679][ T4206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.397089][ T4199] EXT4-fs (loop2): 1 orphan inode deleted [ 57.403524][ T4206] EXT4-fs (loop3): 1 truncate cleaned up [ 57.411877][ T50] __quota_error: 363 callbacks suppressed [ 57.411891][ T50] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.427458][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 57.450658][ T4199] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.566023][ T4192] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.581540][ T4225] loop1: detected capacity change from 0 to 512 [ 57.623593][ T4225] EXT4-fs (loop1): 1 orphan inode deleted [ 57.641623][ T41] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.651540][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 57.664994][ T4225] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.704859][ T4226] loop4: detected capacity change from 0 to 512 [ 57.714892][ T4220] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.763362][ T4226] EXT4-fs (loop4): 1 orphan inode deleted [ 58.119536][ T4226] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.136382][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.146297][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 58.162775][ T4234] __nla_validate_parse: 1 callbacks suppressed [ 58.162788][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 58.213047][ T4221] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.282742][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 58.291714][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 58.303715][ T4241] loop3: detected capacity change from 0 to 512 [ 58.310606][ T4241] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.317108][ T4241] EXT4-fs: Ignoring removed bh option [ 58.324296][ T4241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.340131][ T4241] EXT4-fs (loop3): 1 truncate cleaned up [ 58.441283][ T4240] loop2: detected capacity change from 0 to 512 [ 58.485334][ T4240] EXT4-fs (loop2): 1 orphan inode deleted [ 58.514605][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.518552][ T4240] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.524413][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 58.595820][ T4250] loop1: detected capacity change from 0 to 512 [ 58.602665][ T4250] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.609147][ T4250] EXT4-fs: Ignoring removed bh option [ 58.723361][ T4250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.758769][ T4245] loop4: detected capacity change from 0 to 512 [ 58.792478][ T4250] EXT4-fs (loop1): 1 truncate cleaned up [ 58.907508][ T4245] EXT4-fs (loop4): 1 orphan inode deleted [ 58.914699][ T1764] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.924659][ T1764] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 58.937889][ T4245] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.951133][ T4240] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.969261][ T4245] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.989609][ T4253] loop0: detected capacity change from 0 to 512 [ 59.023784][ T4253] EXT4-fs (loop0): 1 orphan inode deleted [ 59.072884][ T1764] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.082799][ T1764] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 59.106360][ T4253] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.132482][ T4253] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.307181][ T29] audit: type=1400 audit(1750820151.117:1773): avc: denied { create } for pid=4266 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.328596][ T4267] loop0: detected capacity change from 0 to 164 [ 59.341611][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 59.360412][ T4267] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.369657][ T4271] loop1: detected capacity change from 0 to 512 [ 59.371652][ T29] audit: type=1400 audit(1750820151.147:1774): avc: denied { ioctl } for pid=4266 comm="syz.0.150" path="socket:[6941]" dev="sockfs" ino=6941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.434684][ T29] audit: type=1400 audit(1750820151.227:1775): avc: denied { mount } for pid=4266 comm="syz.0.150" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 59.436649][ T4271] EXT4-fs (loop1): 1 orphan inode deleted [ 59.463296][ T4274] loop4: detected capacity change from 0 to 512 [ 59.476029][ T4271] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.478217][ T1764] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.496370][ T1764] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 59.593101][ T4264] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.616028][ T4274] EXT4-fs (loop4): 1 orphan inode deleted [ 59.626521][ T4274] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.639405][ T2111] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 59.652542][ T4270] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.678086][ T4281] tipc: Started in network mode [ 59.683131][ T4281] tipc: Node identity ac14140f, cluster identity 4711 [ 59.690177][ T4281] tipc: New replicast peer: 255.255.255.255 [ 59.696293][ T4281] tipc: Enabled bearer , priority 10 [ 59.809326][ T4282] loop0: detected capacity change from 0 to 512 [ 59.816105][ T4282] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.822575][ T4282] EXT4-fs: Ignoring removed bh option [ 59.851610][ T4282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.866711][ T4282] EXT4-fs (loop0): 1 truncate cleaned up [ 60.520983][ T4287] loop4: detected capacity change from 0 to 512 [ 60.527908][ T4287] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.534423][ T4287] EXT4-fs: Ignoring removed bh option [ 60.583025][ T4287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.619355][ T4287] EXT4-fs (loop4): 1 truncate cleaned up [ 60.692326][ T4299] tipc: Started in network mode [ 60.697224][ T4299] tipc: Node identity ac14140f, cluster identity 4711 [ 60.706147][ T4298] loop3: detected capacity change from 0 to 164 [ 60.712809][ T4299] tipc: New replicast peer: 255.255.255.255 [ 60.718879][ T4299] tipc: Enabled bearer , priority 10 [ 60.735348][ T4298] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.745802][ T4295] loop1: detected capacity change from 0 to 164 [ 60.813873][ T9] tipc: Node number set to 2886997007 [ 60.834410][ T4295] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.916290][ T4316] netlink: 'syz.1.162': attribute type 39 has an invalid length. [ 60.947533][ T4308] loop4: detected capacity change from 0 to 164 [ 60.978639][ T4327] loop0: detected capacity change from 0 to 512 [ 60.979307][ T4317] loop3: detected capacity change from 0 to 164 [ 60.994237][ T4317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.007868][ T4308] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.030827][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.164: corrupted inode contents [ 61.138917][ T4327] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.164: mark_inode_dirty error [ 61.186117][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.164: corrupted inode contents [ 61.259512][ T4340] random: crng reseeded on system resumption [ 61.268935][ T4339] loop1: detected capacity change from 0 to 512 [ 61.391080][ T4342] loop3: detected capacity change from 0 to 512 [ 61.397801][ T4342] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.404264][ T4342] EXT4-fs: Ignoring removed bh option [ 61.416053][ T4342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.428474][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 61.457836][ T4327] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.164: mark_inode_dirty error [ 61.494980][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.167: corrupted inode contents [ 61.531349][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.164: corrupted inode contents [ 61.555572][ T4339] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.167: mark_inode_dirty error [ 61.581544][ T4327] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 61.605457][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.167: corrupted inode contents [ 61.611660][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.164: corrupted inode contents [ 61.630858][ T4339] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.167: mark_inode_dirty error [ 61.643469][ T4327] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.164: mark_inode_dirty error [ 61.655733][ T4327] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 61.657141][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.167: corrupted inode contents [ 61.670412][ C0] hrtimer: interrupt took 47400 ns [ 61.676926][ T4339] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 61.684746][ T4327] EXT4-fs (loop0): 1 truncate cleaned up [ 61.695926][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.167: corrupted inode contents [ 61.696363][ T4327] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.708136][ T4339] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.167: mark_inode_dirty error [ 61.729165][ T23] tipc: Node number set to 2886997007 [ 61.734730][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 61.746931][ T4339] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 61.756915][ T4339] EXT4-fs (loop1): 1 truncate cleaned up [ 61.763826][ T4339] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.774477][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 61.805462][ T4351] netlink: 'syz.0.164': attribute type 39 has an invalid length. [ 61.853584][ T4352] netlink: 'syz.1.167': attribute type 39 has an invalid length. [ 61.934731][ T4354] loop3: detected capacity change from 0 to 512 [ 61.964639][ T4354] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.169: corrupted inode contents [ 61.976751][ T4354] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.169: mark_inode_dirty error [ 61.989301][ T4354] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.169: corrupted inode contents [ 62.003725][ T4354] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.169: mark_inode_dirty error [ 62.025653][ T4358] loop0: detected capacity change from 0 to 512 [ 62.025674][ T4354] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.169: corrupted inode contents [ 62.045151][ T4354] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 62.054697][ T4354] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.169: corrupted inode contents [ 62.069203][ T4354] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.169: mark_inode_dirty error [ 62.080812][ T4358] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.170: corrupted inode contents [ 62.093365][ T4354] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 62.103664][ T4354] EXT4-fs (loop3): 1 truncate cleaned up [ 62.109419][ T4358] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.170: mark_inode_dirty error [ 62.121818][ T4354] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.121977][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 62.134893][ T4358] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.170: corrupted inode contents [ 62.165416][ T4363] random: crng reseeded on system resumption [ 62.175765][ T4363] Restarting kernel threads ... [ 62.177536][ T4358] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.170: mark_inode_dirty error [ 62.182596][ T4363] Done restarting kernel threads. [ 62.196927][ T4365] loop1: detected capacity change from 0 to 512 [ 62.205584][ T4358] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.170: corrupted inode contents [ 62.229034][ T4358] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 62.239598][ T4365] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.172: corrupted inode contents [ 62.258149][ T4358] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.170: corrupted inode contents [ 62.258160][ T4365] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.172: mark_inode_dirty error [ 62.258346][ T4365] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.172: corrupted inode contents [ 62.270597][ T4358] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.170: mark_inode_dirty error [ 62.281868][ T4365] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.172: mark_inode_dirty error [ 62.296027][ T4358] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 62.304525][ T4365] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.172: corrupted inode contents [ 62.317811][ T4358] EXT4-fs (loop0): 1 truncate cleaned up [ 62.326328][ T4365] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.336917][ T4358] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.342751][ T4365] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.172: corrupted inode contents [ 62.350533][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 62.360727][ T4365] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.172: mark_inode_dirty error [ 62.402030][ T4365] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 62.412962][ T4365] EXT4-fs (loop1): 1 truncate cleaned up [ 62.431697][ T4365] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.447285][ T1876] __quota_error: 20 callbacks suppressed [ 62.447318][ T1876] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.462871][ T1876] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 62.507366][ T4370] loop2: detected capacity change from 0 to 164 [ 62.516551][ T4370] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.556575][ T4373] netlink: 'syz.1.172': attribute type 39 has an invalid length. [ 62.584555][ T4375] loop2: detected capacity change from 0 to 164 [ 62.594354][ T4375] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.622178][ T4378] loop2: detected capacity change from 0 to 512 [ 62.636627][ T4378] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.175: corrupted inode contents [ 62.648723][ T4378] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.175: mark_inode_dirty error [ 62.660258][ T4378] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.175: corrupted inode contents [ 62.672587][ T4378] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.175: mark_inode_dirty error [ 62.684629][ T4378] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.175: corrupted inode contents [ 62.696822][ T4378] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 62.705623][ T4378] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.175: corrupted inode contents [ 62.717545][ T4378] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.175: mark_inode_dirty error [ 62.728718][ T4378] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 62.737965][ T4378] EXT4-fs (loop2): 1 truncate cleaned up [ 62.743907][ T4378] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.754553][ T1764] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.764397][ T1764] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 62.794530][ T4382] loop3: detected capacity change from 0 to 512 [ 62.819513][ T4382] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.176: corrupted inode contents [ 62.833299][ T4383] netlink: 'syz.2.175': attribute type 39 has an invalid length. [ 62.841217][ T4382] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.176: mark_inode_dirty error [ 62.856124][ T4382] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.176: corrupted inode contents [ 62.868801][ T4382] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.176: mark_inode_dirty error [ 62.880695][ T4382] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.176: corrupted inode contents [ 62.898343][ T4382] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 62.912382][ T4382] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.176: corrupted inode contents [ 62.928963][ T4382] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.176: mark_inode_dirty error [ 62.943860][ T4382] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 62.958955][ T4382] EXT4-fs (loop3): 1 truncate cleaned up [ 62.966199][ T4382] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.977041][ T1876] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.986887][ T1876] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 63.001507][ T4387] loop0: detected capacity change from 0 to 164 [ 63.032337][ T4387] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.099133][ T4406] loop0: detected capacity change from 0 to 512 [ 63.131031][ T4402] loop1: detected capacity change from 0 to 164 [ 63.143987][ T4406] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.180: corrupted inode contents [ 63.156575][ T4402] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.181467][ T4406] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.180: mark_inode_dirty error [ 63.207380][ T4406] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.180: corrupted inode contents [ 63.231611][ T4406] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.180: mark_inode_dirty error [ 63.244091][ T4406] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.180: corrupted inode contents [ 63.256365][ T4406] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 63.265129][ T4406] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.180: corrupted inode contents [ 63.277844][ T4406] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.180: mark_inode_dirty error [ 63.289294][ T4411] random: crng reseeded on system resumption [ 63.291784][ T4406] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 63.300130][ T4411] Restarting kernel threads ... [ 63.309304][ T4411] Done restarting kernel threads. [ 63.309554][ T4406] EXT4-fs (loop0): 1 truncate cleaned up [ 63.320602][ T4406] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.342336][ T41] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.352184][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 63.445590][ T4421] netlink: 'syz.0.180': attribute type 39 has an invalid length. [ 63.612917][ T4424] loop2: detected capacity change from 0 to 512 [ 63.646848][ T4424] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.182: corrupted inode contents [ 63.779253][ T4424] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.182: mark_inode_dirty error [ 63.791595][ T4424] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.182: corrupted inode contents [ 63.841558][ T4424] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.182: mark_inode_dirty error [ 63.897184][ T4428] loop3: detected capacity change from 0 to 512 [ 63.903723][ T4424] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.182: corrupted inode contents [ 63.939891][ T4424] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 63.961811][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.183: corrupted inode contents [ 63.975569][ T4424] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.182: corrupted inode contents [ 64.002702][ T4424] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.182: mark_inode_dirty error [ 64.013829][ T4428] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.183: mark_inode_dirty error [ 64.025170][ T29] audit: type=1326 audit(1750820155.837:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd32001e929 code=0x0 [ 64.050598][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.183: corrupted inode contents [ 64.130673][ T4424] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 64.130892][ T4428] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.183: mark_inode_dirty error [ 64.140949][ T4424] EXT4-fs (loop2): 1 truncate cleaned up [ 64.181930][ T2111] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.191855][ T2111] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 64.203881][ T4424] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.218384][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.183: corrupted inode contents [ 64.353380][ T4442] tipc: Started in network mode [ 64.358295][ T4442] tipc: Node identity ac14140f, cluster identity 4711 [ 64.459040][ T4440] loop4: detected capacity change from 0 to 512 [ 64.465913][ T4440] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.472354][ T4440] EXT4-fs: Ignoring removed bh option [ 64.489057][ T4442] tipc: New replicast peer: 255.255.255.255 [ 64.495211][ T4442] tipc: Enabled bearer , priority 10 [ 64.596856][ T4440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.612161][ T4428] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 64.623158][ T4440] EXT4-fs (loop4): 1 truncate cleaned up [ 64.656625][ T4446] netlink: 'syz.2.182': attribute type 39 has an invalid length. [ 64.675266][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.183: corrupted inode contents [ 64.702299][ T4428] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.183: mark_inode_dirty error [ 64.744415][ T4428] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 64.747991][ T4449] random: crng reseeded on system resumption [ 64.801684][ T4449] Restarting kernel threads ... [ 64.810946][ T4449] Done restarting kernel threads. [ 64.816961][ T4428] EXT4-fs (loop3): 1 truncate cleaned up [ 64.828205][ T4428] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.839911][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.849714][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 64.954731][ T4459] tipc: Enabling of bearer rejected, already enabled [ 65.014838][ T4451] loop2: detected capacity change from 0 to 164 [ 65.023184][ T4451] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.136416][ T4468] loop4: detected capacity change from 0 to 164 [ 65.155338][ T4468] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.247525][ T4486] loop4: detected capacity change from 0 to 512 [ 65.278809][ T4487] loop3: detected capacity change from 0 to 164 [ 65.305216][ T4487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.434835][ T4486] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.194: corrupted inode contents [ 65.485377][ T4486] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.194: mark_inode_dirty error [ 65.512471][ T4486] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.194: corrupted inode contents [ 65.581463][ T4486] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.194: mark_inode_dirty error [ 65.611905][ T4492] loop3: detected capacity change from 0 to 164 [ 65.612401][ T3405] tipc: Node number set to 2886997007 [ 65.625523][ T4486] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.194: corrupted inode contents [ 65.642571][ T4492] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.691137][ T4497] tipc: Enabling of bearer rejected, already enabled [ 65.701149][ T4486] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 65.711269][ T29] audit: type=1326 audit(1750820157.527:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.1.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e4d8e929 code=0x0 [ 65.744790][ T4486] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.194: corrupted inode contents [ 65.766508][ T29] audit: type=1326 audit(1750820157.557:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19951ce929 code=0x0 [ 65.792655][ T4486] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.194: mark_inode_dirty error [ 65.837116][ T4486] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 65.883719][ T4486] EXT4-fs (loop4): 1 truncate cleaned up [ 65.895056][ T4486] EXT4-fs mount: 87 callbacks suppressed [ 65.895072][ T4486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.921824][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.922434][ T4486] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.931622][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 66.038659][ T4511] random: crng reseeded on system resumption [ 66.048483][ T4509] loop2: detected capacity change from 0 to 164 [ 66.057162][ T4509] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.082592][ T4511] Restarting kernel threads ... [ 66.088053][ T4511] Done restarting kernel threads. [ 66.169748][ T4523] loop2: detected capacity change from 0 to 164 [ 66.184307][ T4523] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.272184][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.329844][ T4531] loop4: detected capacity change from 0 to 512 [ 66.375309][ T4531] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.203: corrupted inode contents [ 66.410213][ T4531] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.203: mark_inode_dirty error [ 66.422170][ T4531] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.203: corrupted inode contents [ 66.435526][ T4531] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.203: mark_inode_dirty error [ 66.449992][ T4531] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.203: corrupted inode contents [ 66.463701][ T4531] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 66.472594][ T4531] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.203: corrupted inode contents [ 66.484667][ T4531] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.203: mark_inode_dirty error [ 66.502334][ T4531] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 66.520385][ T4538] loop1: detected capacity change from 0 to 512 [ 66.533883][ T4531] EXT4-fs (loop4): 1 truncate cleaned up [ 66.547779][ T4531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.561033][ T2181] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 66.574105][ T4531] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.627065][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.644767][ T4538] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.205: corrupted inode contents [ 66.658995][ T4538] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.205: mark_inode_dirty error [ 66.671553][ T4538] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.205: corrupted inode contents [ 66.684872][ T4538] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.205: mark_inode_dirty error [ 66.696467][ T4538] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.205: corrupted inode contents [ 66.709262][ T4538] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 66.718128][ T4538] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.205: corrupted inode contents [ 66.731179][ T4538] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.205: mark_inode_dirty error [ 66.743480][ T4538] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 66.752949][ T4538] EXT4-fs (loop1): 1 truncate cleaned up [ 66.759235][ T4538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.773950][ T1764] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 66.810953][ T4542] tipc: Enabling of bearer rejected, already enabled [ 66.830632][ T4538] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.900778][ T4550] random: crng reseeded on system resumption [ 66.916373][ T4550] Restarting kernel threads ... [ 66.931573][ T4550] Done restarting kernel threads. [ 66.955486][ T4557] loop0: detected capacity change from 0 to 512 [ 66.986364][ T4557] EXT4-fs (loop0): 1 orphan inode deleted [ 66.994391][ T4557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.007136][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 67.012694][ T4557] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.061687][ T4549] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.225697][ T4568] loop2: detected capacity change from 0 to 164 [ 67.241919][ T4568] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.375708][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.437988][ T4580] loop1: detected capacity change from 0 to 512 [ 67.468080][ T4580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.213: corrupted inode contents [ 67.483118][ T4580] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.213: mark_inode_dirty error [ 67.507663][ T4580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.213: corrupted inode contents [ 67.520726][ T4580] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.213: mark_inode_dirty error [ 67.533374][ T4580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.213: corrupted inode contents [ 67.567828][ T4580] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 67.577215][ T4580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.213: corrupted inode contents [ 67.590661][ T4580] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.213: mark_inode_dirty error [ 67.603001][ T4580] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 67.612594][ T4580] EXT4-fs (loop1): 1 truncate cleaned up [ 67.618994][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.632407][ T4580] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.643006][ T50] __quota_error: 6 callbacks suppressed [ 67.643019][ T50] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.658367][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 67.755861][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.766272][ T4584] loop4: detected capacity change from 0 to 512 [ 67.781583][ T4586] tipc: Enabling of bearer rejected, already enabled [ 67.826037][ T4587] netlink: 'syz.1.213': attribute type 39 has an invalid length. [ 67.851304][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.214: corrupted inode contents [ 67.864422][ T4592] tipc: Enabling of bearer rejected, already enabled [ 67.868919][ T4593] loop3: detected capacity change from 0 to 512 [ 67.880947][ T4584] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.214: mark_inode_dirty error [ 67.903236][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.214: corrupted inode contents [ 67.927694][ T4584] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.214: mark_inode_dirty error [ 67.937780][ T4593] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 67.950742][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.214: corrupted inode contents [ 67.955128][ T29] audit: type=1326 audit(1750820159.767:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd32001e929 code=0x0 [ 67.967682][ T4584] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 67.994620][ T4593] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.217: mark_inode_dirty error [ 68.024172][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.214: corrupted inode contents [ 68.037350][ T4584] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.214: mark_inode_dirty error [ 68.081546][ T4593] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 68.081756][ T4584] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 68.103737][ T4584] EXT4-fs (loop4): 1 truncate cleaned up [ 68.109771][ T4584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.122609][ T4584] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.162617][ T4593] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.217: mark_inode_dirty error [ 68.179704][ T2111] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 68.189526][ T2111] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 68.210204][ T4593] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 68.225353][ T4603] tipc: Started in network mode [ 68.230256][ T4603] tipc: Node identity ac14140f, cluster identity 4711 [ 68.247144][ T4593] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.264496][ T4603] tipc: New replicast peer: 255.255.255.255 [ 68.270581][ T4603] tipc: Enabled bearer , priority 10 [ 68.287195][ T4593] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 68.320483][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.320645][ T4604] netlink: 'syz.4.214': attribute type 39 has an invalid length. [ 68.339959][ T4593] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.217: mark_inode_dirty error [ 68.354963][ T4593] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 68.370180][ T29] audit: type=1326 audit(1750820160.177:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.2.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb90a4e929 code=0x0 [ 68.394760][ T4593] EXT4-fs (loop3): 1 truncate cleaned up [ 68.400810][ T4593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.415494][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 68.419192][ T4593] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.425304][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 68.441776][ T29] audit: type=1326 audit(1750820160.227:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e4d8e929 code=0x0 [ 68.579015][ T4615] netlink: 'syz.3.217': attribute type 39 has an invalid length. [ 68.701160][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.751770][ T4617] loop4: detected capacity change from 0 to 512 [ 68.785593][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.222: corrupted inode contents [ 68.823559][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.835067][ T4617] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.222: mark_inode_dirty error [ 68.938945][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.222: corrupted inode contents [ 68.942729][ T4624] loop3: detected capacity change from 0 to 512 [ 68.963158][ T4617] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.222: mark_inode_dirty error [ 68.975611][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.222: corrupted inode contents [ 69.144033][ T4627] loop0: detected capacity change from 0 to 512 [ 69.150800][ T4627] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.157290][ T4627] EXT4-fs: Ignoring removed bh option [ 69.197652][ T4627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.211022][ T4624] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.223: corrupted inode contents [ 69.225424][ T4617] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 69.235052][ T4627] EXT4-fs (loop0): 1 truncate cleaned up [ 69.241513][ T4627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.316884][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.222: corrupted inode contents [ 69.350761][ T4624] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.223: mark_inode_dirty error [ 69.366595][ T4617] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.222: mark_inode_dirty error [ 69.368110][ T4632] loop1: detected capacity change from 0 to 512 [ 69.380109][ T4633] tipc: Enabling of bearer rejected, already enabled [ 69.383982][ T3882] tipc: Node number set to 2886997007 [ 69.397284][ T4624] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.223: corrupted inode contents [ 69.410181][ T4617] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 69.424232][ T4617] EXT4-fs (loop4): 1 truncate cleaned up [ 69.429936][ T4632] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.225: corrupted inode contents [ 69.429969][ T4624] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.223: mark_inode_dirty error [ 69.453499][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.453636][ T4617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.463322][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 69.475862][ T4632] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.225: mark_inode_dirty error [ 69.491719][ T4624] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.223: corrupted inode contents [ 69.514210][ T4632] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.225: corrupted inode contents [ 69.516485][ T4617] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.526299][ T4624] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.546450][ T4632] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.225: mark_inode_dirty error [ 69.558168][ T4624] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.223: corrupted inode contents [ 69.571191][ T4638] random: crng reseeded on system resumption [ 69.577290][ T4632] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.225: corrupted inode contents [ 69.578101][ T4624] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.223: mark_inode_dirty error [ 69.589462][ T4632] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 69.604710][ T4638] Restarting kernel threads ... [ 69.609876][ T4632] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.225: corrupted inode contents [ 69.613426][ T4624] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.626807][ T4632] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.225: mark_inode_dirty error [ 69.634200][ T4638] Done restarting kernel threads. [ 69.646114][ T4632] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 69.664552][ T4632] EXT4-fs (loop1): 1 truncate cleaned up [ 69.668283][ T4639] netlink: 'syz.4.222': attribute type 39 has an invalid length. [ 69.670478][ T4632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.694278][ T4632] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.705729][ T41] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.715531][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 69.755275][ T4624] EXT4-fs (loop3): 1 truncate cleaned up [ 69.761760][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.771625][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 69.783249][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.802447][ T4624] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.810315][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.868880][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.925743][ T4653] loop4: detected capacity change from 0 to 164 [ 69.955119][ T4653] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.964286][ T4657] netlink: 'syz.3.223': attribute type 39 has an invalid length. [ 70.316597][ T4660] loop4: detected capacity change from 0 to 512 [ 70.335218][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.353863][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.363910][ T4660] EXT4-fs (loop4): 1 orphan inode deleted [ 70.370133][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.382916][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.392797][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 70.458663][ T4660] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.512443][ T4667] loop2: detected capacity change from 0 to 512 [ 70.541567][ T4659] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.554739][ T4667] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.233: corrupted inode contents [ 70.580843][ T4667] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.233: mark_inode_dirty error [ 70.616159][ T4667] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.233: corrupted inode contents [ 70.645191][ T4668] loop1: detected capacity change from 0 to 164 [ 70.668127][ T4668] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.699749][ T4667] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.233: mark_inode_dirty error [ 70.773240][ T4667] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.233: corrupted inode contents [ 70.812379][ T4667] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 70.813585][ T4678] loop1: detected capacity change from 0 to 164 [ 70.839786][ T4667] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.233: corrupted inode contents [ 70.853646][ T4678] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.873217][ T4667] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.233: mark_inode_dirty error [ 70.903713][ T4667] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 70.914241][ T4667] EXT4-fs (loop2): 1 truncate cleaned up [ 70.920169][ T4667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.932980][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 70.945568][ T4667] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.957442][ T4686] random: crng reseeded on system resumption [ 70.976412][ T4686] Restarting kernel threads ... [ 70.996848][ T4686] Done restarting kernel threads. [ 71.086315][ T4697] netlink: 'syz.2.233': attribute type 39 has an invalid length. [ 71.147837][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.359145][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.756551][ T4728] loop0: detected capacity change from 0 to 512 [ 71.824153][ T2999] ================================================================== [ 71.832275][ T2999] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 71.839530][ T2999] [ 71.841852][ T2999] write to 0xffff888108d74b70 of 8 bytes by task 4216 on cpu 0: [ 71.849476][ T2999] dentry_unlink_inode+0x65/0x260 [ 71.854508][ T2999] d_delete+0x164/0x180 [ 71.858751][ T2999] d_delete_notify+0x32/0x100 [ 71.863434][ T2999] vfs_unlink+0x30b/0x420 [ 71.867781][ T2999] do_unlinkat+0x28e/0x4c0 [ 71.872204][ T2999] __x64_sys_unlink+0x2e/0x40 [ 71.876894][ T2999] x64_sys_call+0x22a6/0x2fb0 [ 71.881570][ T2999] do_syscall_64+0xd2/0x200 [ 71.886068][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.891961][ T2999] [ 71.894283][ T2999] read to 0xffff888108d74b70 of 8 bytes by task 2999 on cpu 1: [ 71.901823][ T2999] step_into+0x122/0x820 [ 71.906069][ T2999] walk_component+0x162/0x220 [ 71.911010][ T2999] path_lookupat+0xfe/0x2a0 [ 71.915514][ T2999] filename_lookup+0x147/0x340 [ 71.920287][ T2999] do_readlinkat+0x7d/0x320 [ 71.924793][ T2999] __x64_sys_readlink+0x47/0x60 [ 71.929650][ T2999] x64_sys_call+0x2cf3/0x2fb0 [ 71.934328][ T2999] do_syscall_64+0xd2/0x200 [ 71.938832][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.944722][ T2999] [ 71.947037][ T2999] value changed: 0xffff88811b1b1d90 -> 0x0000000000000000 [ 71.954142][ T2999] [ 71.956456][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 71.962627][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 71.974617][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.984679][ T2999] ================================================================== [ 72.036437][ T4728] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.240: corrupted inode contents [ 72.169770][ T4728] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.240: mark_inode_dirty error [ 72.183959][ T4728] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.240: corrupted inode contents [ 72.241446][ T4728] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.240: mark_inode_dirty error [ 72.262832][ T4728] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.240: corrupted inode contents [ 72.316756][ T4728] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 72.325709][ T4728] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.240: corrupted inode contents [ 72.353808][ T4728] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.240: mark_inode_dirty error [ 72.382922][ T4728] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 72.393265][ T4728] EXT4-fs (loop0): 1 truncate cleaned up [ 72.399484][ T4728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.413241][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 72.424791][ T4728] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.503427][ T4732] netlink: 'syz.0.240': attribute type 39 has an invalid length. [ 72.621351][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.