last executing test programs: 8.885331261s ago: executing program 1 (id=3112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xb) 8.808689437s ago: executing program 1 (id=3118): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x5, 0xe6}) 8.726554294s ago: executing program 1 (id=3124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x63) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) 8.671053549s ago: executing program 1 (id=3128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@resuid}, {@delalloc}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) 8.4368833s ago: executing program 1 (id=3139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) 7.834525915s ago: executing program 1 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @private=0xa010100}, 'team_slave_0\x00'}) 7.834419135s ago: executing program 32 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @private=0xa010100}, 'team_slave_0\x00'}) 5.012034169s ago: executing program 5 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 4.949650935s ago: executing program 5 (id=3196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 4.928359947s ago: executing program 5 (id=3197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) clock_getres(0xc6db75abd9de7fb3, 0x0) 4.727289715s ago: executing program 5 (id=3198): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@resuid}, {@delalloc}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) 4.390303135s ago: executing program 5 (id=3203): socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280000500030004"], 0x48}}, 0x40000) 3.870910302s ago: executing program 4 (id=3221): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000070000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x4, &(0x7f0000001300)=[{&(0x7f0000000a00)="89891e388b9eab00be256aecf12c287826cd598251ce769af17bc1cfd2137f56001e19a2763bffebaa8a422f01090e571fad6cc22db0f1c5a77466cfdd9335c05fb640c2687ac2aa1c9a4e392cfad45cf8500427b99636c70c7313945c8ae63962c859fba70be417fa61970031965c95d8f33fe0a3736e6a96135dff85f87b51a79c97ab1404e5ad447c99f830c06d432e0e289b7fe7a34d5d38571c63b109176b9e02405df7128d9548dc384088a5e47251be87a925ce0366207cbbdecde1913dabdf468fb17eba88e8baf2c8a38254eef4c64dc865c48e1be8e9261cf0", 0xde}, {&(0x7f0000000240)="74bf3a98923e5ec107bbbeb9d31fdbd712a0b99df702e8ebdd5d242f7afa99d61ad4d1d1ada0935578b9731691277d203c456ec06c3182aa7cf3e5efc11ecdc3b4f0920602d4b8ff74fa9dd8dd57e56f985ae241ab3ca39227af7756f718848223d584b4fbb7fde6a0c79f2adc44c393f29bcfb981c4f3352b06baca6bb72fb78c6f2eb82504ea61d23196c216ec73e82d42fa7b4cb7ea2198fac8c1be7deacdb478eda28103e84f3a732e0ad54a34f6cd44ca4e8b68a9e959cfcedc313108cc46aa545f6de611e42e56813aa9b0605a90043f5f60aa2e6308fe3ced1898e4718cae11424c927fceb53797265e1d3460473cc974d3fb2eebdc04ebcc000b76138ee2127522e8993605830f3e702cb3afbf9b0df7d859ba29762e45169963b5fa748af3c9c238401544d3590f75765febfd5ddafc9f7d7ba25d252c653a53eb1fa6d887cd51723b83ee5e4c940baa1d41eaf3189608e61140c1f2f8b0448999d51043d620797fd21f20ff9099c8ba565502418d8560f92a340033e59824f64455df1dfa608103e9ca07fe9044e8a343ce628d2e532211f6168a4b58631c983d425ec834763c1c89fda0eefae7db61f325cda02278e4b004f25d9293dc779878e4e793ec3eb45a453d1e192f841df399838ef0c7efada7120cb88b4ed13fd169f7915811b373f406b94a416004471440f056a4a973da4cc3162a4a108b663ec1a7cfb2d3dcd1d28126672eab8763ab207af83c268e0f1a185aa448b11e670cac9a520cf8454ff5bd6c338d9ae319d9d506b8fc331898c69e6192ffb226f106b30acb44ed8c7b5905635c50eecfe78e42e0e6f3a0ed91e08d436d147b3c0107fc9101248baad567a818fc7fabccd01f61ab75c9e1cd22616aaf7c442e0a9361917129d3123a25f44ea2ee734a77bfa116819a4ddd669104ad66beedee5162b667f7bef5943028db106a11272335ba0208d69c4109dfb2e0afb1ad1844f1ff60e416fb51541d2fe197a5b9fcbc70203a2c6a80b74c6d03a8907144d8e49a3c4cab26f2bca9ecf39709e53e4f4d64beb2b9963a8bd35e6a5e169eb312031f8132e2f56844462a76c29cfe8a5954e5d59a348fec99005f457bbbdaf6350bddb86c7866254c9b947520fe46b025825bcec8673c9f926c58f07d58c56a6f7bb37bfe4b62b4ca3f7faa17945398292610442566fb4794b8c087a945e268481cefdb5ea1d1c3f869c2d62b1692c67d53eb69b5b6bb2d0e1b64048f911f474196452f851ad5356993a4066377ae83d654a381f34c8ecf04d0b1b8a196abc81ad984caaac1bd59221b2fd9cd889cc40a81f9fc7ff851ebd78c9c17391cd25d0ad867bf54d719197361835e84ffcfb03eb20cac56b5e65889d6b516591698d89f95e066658f0b877a17ce71ec72986fd41dcc3e7f1a0db42010ccfde9ae933096b26afdfbf4185f6e01107af45bb78daef9de807558af958abc2ada7bb4f9901e35cc7e4e7f1c22d8d8b5ba8ab8d9f425ba28d052ef0657ec3c493b882cb7d2fff7c12c38bff895b046df4df737a207ca74c3c8bceea2065e3d19cc6e2dbe9ea8b58d4f05cd35ad1b71899308d0ac1114cf7f9bfbd89a0dea8678ddef85bbdb789bbaf8155009c825546b59c2fbc4ace224af1e058bd2d269812b6ba5c409ae35fd45a934fe18d2bc904b0bbe04f2fcb6eac0120d8ba7b1f910ac0f6711f6b03f478201f911f97576816104c051185108d6a88720ff4de2fb4184e5c9347b14df49466d3ec7dfba6bc3fca964fb040c231654827de62a5865e1a9d31f5230855e267f82", 0x4fd}], 0x2}}], 0x1, 0x0) 3.090775102s ago: executing program 5 (id=3222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 3.090642512s ago: executing program 33 (id=3222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 3.090564692s ago: executing program 4 (id=3228): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x3c00, 0xffffffff, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3d5653a0b35cd406}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x8, 0x1, 0xc}, {0xd, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x80000000, 0x20003, 0x99}}]}}]}, 0x6c}}, 0x0) 773.315871ms ago: executing program 4 (id=3238): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) 772.798461ms ago: executing program 0 (id=3239): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x3c00, 0xffffffff, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3d5653a0b35cd406}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x8, 0x1, 0xc}, {0xd, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x80000000, 0x20003, 0x99}}]}}]}, 0x6c}}, 0x0) 772.282211ms ago: executing program 3 (id=3240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 653.248992ms ago: executing program 2 (id=3230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x40000080806, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 548.937581ms ago: executing program 0 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 548.382401ms ago: executing program 2 (id=3245): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x3c00, 0xffffffff, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3d5653a0b35cd406}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x8, 0x1, 0xc}, {0xd, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x80000000, 0x20003, 0x99}}]}}]}, 0x6c}}, 0x0) 545.518881ms ago: executing program 4 (id=3246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 536.953332ms ago: executing program 3 (id=3247): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) 492.599616ms ago: executing program 0 (id=3232): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0) 489.639036ms ago: executing program 6 (id=3233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x36, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') close_range(r2, 0xffffffffffffffff, 0x0) 422.060492ms ago: executing program 6 (id=3234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x1, 0xdbf3}, 0x10) 355.263528ms ago: executing program 6 (id=3235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@resuid}, {@delalloc}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) 355.144028ms ago: executing program 2 (id=3236): socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280000500030004"], 0x48}}, 0x40000) 352.667359ms ago: executing program 3 (id=3252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x36, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') close_range(r2, 0xffffffffffffffff, 0x0) 315.452512ms ago: executing program 6 (id=3237): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 315.347932ms ago: executing program 3 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x1) 315.258492ms ago: executing program 4 (id=3242): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000140), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 234.339809ms ago: executing program 6 (id=3243): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) 234.224429ms ago: executing program 2 (id=3248): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 234.142519ms ago: executing program 4 (id=3249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 162.808176ms ago: executing program 0 (id=3258): socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280000500030004"], 0x48}}, 0x40000) 162.699685ms ago: executing program 2 (id=3260): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000140), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 122.957869ms ago: executing program 2 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x1) 122.797639ms ago: executing program 3 (id=3262): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 120.989199ms ago: executing program 0 (id=3263): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000140), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 4.32555ms ago: executing program 6 (id=3250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 421.571µs ago: executing program 3 (id=3266): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000140), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 0s ago: executing program 0 (id=3267): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): oop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.609484][ T29] audit: type=1400 audit(1730912649.502:2190): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.632495][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.643261][ T29] audit: type=1400 audit(1730912649.522:2191): avc: denied { create } for pid=7774 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.662904][ T29] audit: type=1400 audit(1730912649.522:2192): avc: denied { connect } for pid=7774 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.682516][ T29] audit: type=1400 audit(1730912649.522:2193): avc: denied { name_connect } for pid=7774 comm="syz.2.1907" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 81.704506][ T29] audit: type=1400 audit(1730912649.522:2194): avc: denied { listen } for pid=7774 comm="syz.2.1907" lport=35332 faddr=::ffff:10.1.1.0 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.728094][ T29] audit: type=1400 audit(1730912649.522:2195): avc: denied { accept } for pid=7774 comm="syz.2.1907" lport=35332 faddr=::ffff:10.1.1.0 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.751597][ T29] audit: type=1400 audit(1730912649.522:2196): avc: denied { setopt } for pid=7774 comm="syz.2.1907" lport=35332 faddr=::ffff:10.1.1.0 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.800828][ T7791] syz.3.1913[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.800921][ T7791] syz.3.1913[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.813134][ T52] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 81.836315][ T7791] syz.3.1913[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.838718][ T29] audit: type=1400 audit(1730912649.732:2197): avc: denied { bind } for pid=7793 comm="syz.2.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.417342][ T29] audit: type=1326 audit(1730912650.312:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 82.417502][ T7799] xt_hashlimit: max too large, truncated to 1048576 [ 82.534975][ T7817] wireguard0: entered promiscuous mode [ 82.540607][ T7817] wireguard0: entered allmulticast mode [ 82.574008][ T7826] syz.4.1928[7826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.623048][ T7832] xt_hashlimit: max too large, truncated to 1048576 [ 82.735948][ T7845] wireguard0: entered promiscuous mode [ 82.741494][ T7845] wireguard0: entered allmulticast mode [ 82.824762][ T3349] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 83.656479][ T7871] xt_hashlimit: max too large, truncated to 1048576 [ 83.668533][ T7869] wireguard0: entered promiscuous mode [ 83.674093][ T7869] wireguard0: entered allmulticast mode [ 83.783788][ T7887] xt_hashlimit: max too large, truncated to 1048576 [ 83.882368][ T3349] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 84.054340][ T7933] wireguard0: entered promiscuous mode [ 84.060013][ T7933] wireguard0: entered allmulticast mode [ 84.195909][ T7955] __nla_validate_parse: 10 callbacks suppressed [ 84.195926][ T7955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1983'. [ 84.447396][ T7983] wireguard0: entered promiscuous mode [ 84.453038][ T7983] wireguard0: entered allmulticast mode [ 84.482097][ T7993] capability: warning: `syz.3.2000' uses deprecated v2 capabilities in a way that may be insecure [ 84.703086][ T8008] wireguard0: entered promiscuous mode [ 84.708678][ T8008] wireguard0: entered allmulticast mode [ 84.753641][ T3349] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 84.900191][ T8028] wireguard0: entered promiscuous mode [ 84.905743][ T8028] wireguard0: entered allmulticast mode [ 84.952597][ T8047] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 84.961322][ T8047] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 85.191003][ T8078] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 85.200319][ T8078] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 85.255269][ T8089] wireguard0: entered promiscuous mode [ 85.260915][ T8089] wireguard0: entered allmulticast mode [ 85.295382][ T8098] loop1: detected capacity change from 0 to 256 [ 85.546128][ T8107] wireguard0: entered promiscuous mode [ 85.546209][ T8112] bpf_get_probe_write_proto: 8 callbacks suppressed [ 85.546225][ T8112] syz.3.2048[8112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.551761][ T8107] wireguard0: entered allmulticast mode [ 85.575547][ T8112] syz.3.2048[8112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.575651][ T8112] syz.3.2048[8112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.617182][ T52] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.710995][ T8123] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 85.722074][ T8123] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 85.775171][ T8130] loop0: detected capacity change from 0 to 512 [ 85.782791][ T8133] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 85.792751][ T8133] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 85.802912][ T8130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.816973][ T8130] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.843395][ T8143] loop2: detected capacity change from 0 to 256 [ 85.864024][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.886944][ T8149] loop0: detected capacity change from 0 to 512 [ 85.894605][ T8149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.911132][ T8149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.923756][ T8149] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.947804][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.959981][ T8155] loop2: detected capacity change from 0 to 512 [ 85.975694][ T8159] syz.0.2061[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.975745][ T8159] syz.0.2061[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.987394][ T8159] syz.0.2061[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.988975][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.025405][ T8155] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.071887][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.101759][ T8171] wireguard0: entered promiscuous mode [ 86.107249][ T8171] wireguard0: entered allmulticast mode [ 86.297354][ T8179] wireguard0: entered promiscuous mode [ 86.302946][ T8179] wireguard0: entered allmulticast mode [ 86.414429][ T8194] loop1: detected capacity change from 0 to 512 [ 86.421693][ T8194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.463922][ T52] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 86.502873][ T8194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.515565][ T8194] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.551828][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.595708][ T8218] loop2: detected capacity change from 0 to 512 [ 86.597892][ T8212] loop1: detected capacity change from 0 to 512 [ 86.604465][ T8218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.633238][ T8218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.645912][ T8218] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.657881][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 86.657898][ T29] audit: type=1326 audit(1730912652.780:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 86.665416][ T8212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.687956][ T29] audit: type=1326 audit(1730912652.780:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.4.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb916e719 code=0x7ffc0000 [ 86.718293][ T8212] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.723814][ T29] audit: type=1326 audit(1730912652.780:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.4.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb916e719 code=0x7ffc0000 [ 86.757733][ T29] audit: type=1326 audit(1730912652.780:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.4.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f2bb916e719 code=0x7ffc0000 [ 86.781281][ T29] audit: type=1326 audit(1730912652.780:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.4.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb916e719 code=0x7ffc0000 [ 86.804700][ T29] audit: type=1326 audit(1730912652.780:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.4.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb916e719 code=0x7ffc0000 [ 86.828376][ T29] audit: type=1326 audit(1730912652.820:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 86.851857][ T29] audit: type=1326 audit(1730912652.820:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 86.875390][ T29] audit: type=1326 audit(1730912652.820:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 86.902720][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.927312][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.930323][ T8232] loop0: detected capacity change from 0 to 256 [ 86.946024][ T29] audit: type=1400 audit(1730912653.060:2320): avc: denied { create } for pid=8228 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.965928][ T8230] wireguard0: entered promiscuous mode [ 86.971505][ T8230] wireguard0: entered allmulticast mode [ 87.172375][ T8275] wireguard0: entered promiscuous mode [ 87.177895][ T8275] wireguard0: entered allmulticast mode [ 87.554216][ T28] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 87.612029][ T8360] wireguard0: entered promiscuous mode [ 87.617562][ T8360] wireguard0: entered allmulticast mode [ 87.624932][ T8362] loop0: detected capacity change from 0 to 512 [ 87.642134][ T8362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.656836][ T8362] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.684964][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.742216][ T8385] loop1: detected capacity change from 0 to 512 [ 87.881855][ T8385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.900961][ T8385] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.965079][ T8456] syz.2.2133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.988283][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.061628][ T8464] wireguard0: entered promiscuous mode [ 88.067468][ T8464] wireguard0: entered allmulticast mode [ 88.078894][ T8472] loop0: detected capacity change from 0 to 1024 [ 88.115129][ T8472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 88.124239][ T8472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.138361][ T8472] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 88.173310][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.361766][ T8521] wireguard0: entered promiscuous mode [ 88.367302][ T8521] wireguard0: entered allmulticast mode [ 88.427824][ T8537] loop1: detected capacity change from 0 to 512 [ 88.435048][ T8537] EXT4-fs: Ignoring removed oldalloc option [ 88.453590][ T8537] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2152: Parent and EA inode have the same ino 15 [ 88.469569][ T8537] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2152: Parent and EA inode have the same ino 15 [ 88.483838][ T8537] EXT4-fs (loop1): 1 orphan inode deleted [ 88.490648][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.515380][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.535295][ T8546] loop2: detected capacity change from 0 to 1024 [ 88.560110][ T8546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 88.569523][ T8546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.585258][ T8546] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 88.602243][ T8419] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 88.620785][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.636401][ T8569] wireguard0: entered promiscuous mode [ 88.641973][ T8569] wireguard0: entered allmulticast mode [ 89.178313][ T8675] loop1: detected capacity change from 0 to 1024 [ 89.192141][ T8675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 89.208433][ T8675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.230943][ T8675] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.270565][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.421807][ T8717] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 89.480205][ T8728] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 89.627113][ T8753] loop0: detected capacity change from 0 to 512 [ 89.645391][ T8753] EXT4-fs: Ignoring removed oldalloc option [ 89.683748][ T8753] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2186: Parent and EA inode have the same ino 15 [ 89.706611][ T8753] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2186: Parent and EA inode have the same ino 15 [ 89.730166][ T8753] EXT4-fs (loop0): 1 orphan inode deleted [ 89.737197][ T8753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.773400][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.023428][ T8826] loop2: detected capacity change from 0 to 512 [ 90.053224][ T8826] EXT4-fs: Ignoring removed oldalloc option [ 90.089342][ T8845] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 90.091162][ T8826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2201: Parent and EA inode have the same ino 15 [ 90.111700][ T8826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2201: Parent and EA inode have the same ino 15 [ 90.127563][ T8826] EXT4-fs (loop2): 1 orphan inode deleted [ 90.133813][ T8826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.156395][ T8407] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 90.168069][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2199'. [ 90.207756][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.240377][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2214'. [ 90.289804][ T8865] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2205'. [ 90.309660][ T8865] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2205'. [ 90.403708][ T8884] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2222'. [ 90.413423][ T8884] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2222'. [ 90.906351][ T8961] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2225'. [ 90.925817][ T8961] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2225'. [ 90.986817][ T8977] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 91.058002][ T8987] loop0: detected capacity change from 0 to 1024 [ 91.086338][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2217'. [ 91.102538][ T8987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 91.117840][ T8987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.147481][ T8987] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 91.191051][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.285275][ T9023] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2230'. [ 91.380883][ T9055] loop1: detected capacity change from 0 to 1024 [ 91.399495][ T8414] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 91.419525][ T9067] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 91.421671][ T9055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 91.437629][ T9055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.455794][ T9055] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 91.474372][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.173819][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 92.173834][ T29] audit: type=1326 audit(1730912658.290:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 92.203570][ T29] audit: type=1326 audit(1730912658.290:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 92.227198][ T29] audit: type=1326 audit(1730912658.290:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 92.250874][ T29] audit: type=1326 audit(1730912658.290:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 92.274307][ T29] audit: type=1326 audit(1730912658.290:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 92.297898][ T29] audit: type=1326 audit(1730912658.290:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 93.070877][ T29] audit: type=1400 audit(1730912659.180:2404): avc: denied { ioctl } for pid=9223 comm="syz.4.2249" path="socket:[20842]" dev="sockfs" ino=20842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.155994][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 93.201622][ T29] audit: type=1326 audit(1730912659.320:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 93.225418][ T29] audit: type=1326 audit(1730912659.320:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 93.249500][ T29] audit: type=1326 audit(1730912659.340:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 93.301950][ T9257] hub 2-0:1.0: USB hub found [ 93.306699][ T9257] hub 2-0:1.0: 8 ports detected [ 94.147009][ T9293] hub 2-0:1.0: USB hub found [ 94.151848][ T9293] hub 2-0:1.0: 8 ports detected [ 94.268525][ T9307] block device autoloading is deprecated and will be removed. [ 94.506022][ T9331] hub 2-0:1.0: USB hub found [ 94.510764][ T9331] hub 2-0:1.0: 8 ports detected [ 94.560694][ T9336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.644777][ T9339] block device autoloading is deprecated and will be removed. [ 94.771619][ T9345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.993363][ T9363] hub 2-0:1.0: USB hub found [ 94.998090][ T9363] hub 2-0:1.0: 8 ports detected [ 95.086477][ T9379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.207866][ T9396] __nla_validate_parse: 7 callbacks suppressed [ 95.207928][ T9396] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2325'. [ 95.264431][ T9398] hub 2-0:1.0: USB hub found [ 95.275007][ T9398] hub 2-0:1.0: 8 ports detected [ 95.992175][ T9407] block device autoloading is deprecated and will be removed. [ 96.009799][ T9410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.058252][ T9422] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 96.143086][ T9428] hub 2-0:1.0: USB hub found [ 96.147780][ T9428] hub 2-0:1.0: 8 ports detected [ 96.335131][ T9454] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 96.370751][ T9456] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 96.462532][ T9466] loop0: detected capacity change from 0 to 256 [ 96.476370][ T9466] FAT-fs (loop0): Directory bread(block 64) failed [ 96.484727][ T9466] FAT-fs (loop0): Directory bread(block 65) failed [ 96.493973][ T9466] FAT-fs (loop0): Directory bread(block 66) failed [ 96.502203][ T9466] FAT-fs (loop0): Directory bread(block 67) failed [ 96.508901][ T9466] FAT-fs (loop0): Directory bread(block 68) failed [ 96.517149][ T9466] FAT-fs (loop0): Directory bread(block 69) failed [ 96.528459][ T9466] FAT-fs (loop0): Directory bread(block 70) failed [ 96.537917][ T9466] FAT-fs (loop0): Directory bread(block 71) failed [ 96.544693][ T9466] FAT-fs (loop0): Directory bread(block 72) failed [ 96.551345][ T9466] FAT-fs (loop0): Directory bread(block 73) failed [ 96.916353][ T9480] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 96.968240][ T9483] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 97.192391][ T9510] loop0: detected capacity change from 0 to 1024 [ 97.199079][ T9512] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.215672][ T9510] EXT4-fs: Ignoring removed nobh option [ 97.235177][ T9520] loop1: detected capacity change from 0 to 256 [ 97.241114][ T9510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.255010][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 97.255027][ T29] audit: type=1400 audit(1730912663.370:2526): avc: denied { write } for pid=9509 comm="syz.0.2381" path="/496/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.286941][ T9520] FAT-fs (loop1): Directory bread(block 64) failed [ 97.293607][ T9520] FAT-fs (loop1): Directory bread(block 65) failed [ 97.300333][ T9520] FAT-fs (loop1): Directory bread(block 66) failed [ 97.303736][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.307026][ T9520] FAT-fs (loop1): Directory bread(block 67) failed [ 97.322812][ T9520] FAT-fs (loop1): Directory bread(block 68) failed [ 97.330748][ T9520] FAT-fs (loop1): Directory bread(block 69) failed [ 97.331571][ T29] audit: type=1326 audit(1730912663.450:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.337282][ T9520] FAT-fs (loop1): Directory bread(block 70) failed [ 97.337306][ T9520] FAT-fs (loop1): Directory bread(block 71) failed [ 97.337334][ T9520] FAT-fs (loop1): Directory bread(block 72) failed [ 97.337359][ T9520] FAT-fs (loop1): Directory bread(block 73) failed [ 97.382901][ T9527] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 97.387588][ T29] audit: type=1326 audit(1730912663.450:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.422691][ T29] audit: type=1326 audit(1730912663.460:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.446150][ T29] audit: type=1326 audit(1730912663.460:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.469759][ T29] audit: type=1326 audit(1730912663.460:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.493347][ T29] audit: type=1326 audit(1730912663.460:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.516826][ T29] audit: type=1326 audit(1730912663.460:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.540367][ T29] audit: type=1326 audit(1730912663.480:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.563869][ T29] audit: type=1326 audit(1730912663.490:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 97.829667][ T9553] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.847417][ T9555] loop1: detected capacity change from 0 to 1024 [ 97.858893][ T9555] EXT4-fs: Ignoring removed nobh option [ 97.904679][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.021392][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.188896][ T9589] loop2: detected capacity change from 0 to 256 [ 98.224218][ T9589] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.276985][ T9595] loop2: detected capacity change from 0 to 256 [ 98.327070][ T9595] FAT-fs (loop2): Directory bread(block 64) failed [ 98.338288][ T9595] FAT-fs (loop2): Directory bread(block 65) failed [ 98.344984][ T9595] FAT-fs (loop2): Directory bread(block 66) failed [ 98.352633][ T9595] FAT-fs (loop2): Directory bread(block 67) failed [ 98.361706][ T9595] FAT-fs (loop2): Directory bread(block 68) failed [ 98.368270][ T9595] FAT-fs (loop2): Directory bread(block 69) failed [ 98.376442][ T9595] FAT-fs (loop2): Directory bread(block 70) failed [ 98.383271][ T9595] FAT-fs (loop2): Directory bread(block 71) failed [ 98.391094][ T9595] FAT-fs (loop2): Directory bread(block 72) failed [ 98.397733][ T9595] FAT-fs (loop2): Directory bread(block 73) failed [ 99.842595][ T9642] loop2: detected capacity change from 0 to 1024 [ 99.851169][ T9642] EXT4-fs: Ignoring removed nobh option [ 99.866757][ T9642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.942748][ T9657] loop0: detected capacity change from 0 to 1024 [ 99.955210][ T9657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.980683][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.025877][ T9657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.099438][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.893066][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 100.975721][ T9699] loop0: detected capacity change from 0 to 256 [ 100.991976][ T9699] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.032138][ T9704] loop1: detected capacity change from 0 to 1024 [ 101.045322][ T9704] EXT4-fs: Ignoring removed nobh option [ 101.074985][ T9704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.122412][ T9720] Illegal XDP return value 2322124929 on prog (id 1717) dev syz_tun, expect packet loss! [ 101.168154][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2480'. [ 101.207075][ T9732] loop0: detected capacity change from 0 to 1024 [ 101.212265][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.213851][ T9732] EXT4-fs: Ignoring removed nobh option [ 101.257819][ T9732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.295598][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'. [ 101.314985][ T9740] loop1: detected capacity change from 0 to 256 [ 101.335411][ T9740] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.355017][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.560808][ T9768] loop2: detected capacity change from 0 to 8192 [ 101.600737][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2501'. [ 101.613344][ T9780] loop1: detected capacity change from 0 to 1024 [ 101.620223][ T9768] loop2: p1[EZD] p2 p4 [ 101.624510][ T9768] loop2: p1 size 1465778176 extends beyond EOD, truncated [ 101.632686][ T9780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.648885][ T9768] loop2: p2 start 65535 is beyond EOD, truncated [ 101.655320][ T9768] loop2: p4 size 65536 extends beyond EOD, truncated [ 101.676510][ T9780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.699949][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.712798][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.722901][ T9768] FAT-fs (loop2p1): bogus number of reserved sectors [ 101.729713][ T9768] FAT-fs (loop2p1): Can't find a valid FAT filesystem [ 101.765434][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.804715][ T9801] Process accounting resumed [ 101.916457][ T9817] loop1: detected capacity change from 0 to 256 [ 101.925342][ T9816] loop0: detected capacity change from 0 to 1024 [ 101.933071][ T9816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.943616][ T9817] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.968719][ T9816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.058601][ T9833] Process accounting resumed [ 102.058970][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.325111][ T9859] loop2: detected capacity change from 0 to 128 [ 102.372795][ T9859] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.389888][ T9859] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.445656][ T9855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.454339][ T9855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.472588][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 102.472606][ T29] audit: type=1326 audit(1730912668.590:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.502728][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.512245][ T29] audit: type=1326 audit(1730912668.630:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.545065][ T29] audit: type=1326 audit(1730912668.630:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.568679][ T29] audit: type=1326 audit(1730912668.630:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.592128][ T29] audit: type=1326 audit(1730912668.630:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.600564][ T9871] Process accounting resumed [ 102.615357][ T29] audit: type=1326 audit(1730912668.630:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.615443][ T29] audit: type=1326 audit(1730912668.630:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 102.672876][ T9873] loop1: detected capacity change from 0 to 512 [ 102.682182][ T9873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2548: bg 0: block 393: padding at end of block bitmap is not set [ 102.698628][ T9873] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 102.707769][ T9873] EXT4-fs (loop1): 2 truncates cleaned up [ 102.716575][ T9873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.740936][ T9883] Process accounting resumed [ 102.755238][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.903128][ T9905] loop0: detected capacity change from 0 to 128 [ 102.922718][ T9905] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.936397][ T9905] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.969055][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.999146][ T9912] pimreg: entered allmulticast mode [ 103.007859][ T9911] loop1: detected capacity change from 0 to 128 [ 103.020778][ T29] audit: type=1326 audit(1730912669.130:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.3.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 103.044295][ T29] audit: type=1326 audit(1730912669.130:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.3.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 103.067767][ T29] audit: type=1326 audit(1730912669.140:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.3.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 103.092931][ T9912] pimreg: left allmulticast mode [ 103.107477][ T9911] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.121246][ T9911] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.156150][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.187426][ T9921] Process accounting resumed [ 103.201278][ T9923] loop0: detected capacity change from 0 to 512 [ 103.223525][ T9923] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2566: invalid indirect mapped block 256 (level 2) [ 103.257535][ T9923] EXT4-fs (loop0): 2 truncates cleaned up [ 103.275036][ T9923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.315034][ T9938] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2577'. [ 103.352548][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.372508][ T9940] loop1: detected capacity change from 0 to 8192 [ 103.398096][ T9946] loop2: detected capacity change from 0 to 512 [ 103.406307][ T9946] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2588: invalid indirect mapped block 256 (level 2) [ 103.409687][ T9940] loop1: p1[EZD] p2 p4 [ 103.419989][ T9946] EXT4-fs (loop2): 2 truncates cleaned up [ 103.430274][ T9946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.431650][ T9947] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2589'. [ 103.450682][ T9940] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 103.462621][ T9940] loop1: p2 start 65535 is beyond EOD, truncated [ 103.469136][ T9940] loop1: p4 size 65536 extends beyond EOD, truncated [ 103.505949][ T9953] pimreg: entered allmulticast mode [ 103.508328][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.520140][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.520762][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.537183][ T9940] FAT-fs (loop1p1): bogus number of reserved sectors [ 103.544108][ T9940] FAT-fs (loop1p1): Can't find a valid FAT filesystem [ 103.547031][ T9953] pimreg: left allmulticast mode [ 103.568991][ T9957] loop2: detected capacity change from 0 to 512 [ 103.577416][ T9957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2582: bg 0: block 393: padding at end of block bitmap is not set [ 103.593428][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2583'. [ 103.594201][ T9957] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.603001][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2583'. [ 103.613269][ T9957] EXT4-fs (loop2): 2 truncates cleaned up [ 103.626630][ T9957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.672959][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2585'. [ 103.683968][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.872117][ T9979] loop0: detected capacity change from 0 to 128 [ 103.881245][ T9979] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.893675][ T9979] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.921171][ T9982] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2594'. [ 103.931510][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.952681][ T9987] loop0: detected capacity change from 0 to 128 [ 103.962357][ T9987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.975514][ T9987] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.997991][ T9993] pimreg: entered allmulticast mode [ 104.009945][ T9993] pimreg: left allmulticast mode [ 104.021854][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.041971][ T9997] loop0: detected capacity change from 0 to 512 [ 104.051536][ T9997] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2598: bg 0: block 393: padding at end of block bitmap is not set [ 104.074911][ T9997] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 104.087396][ T9997] EXT4-fs (loop0): 2 truncates cleaned up [ 104.093721][ T9997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.162963][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.202605][T10016] loop1: detected capacity change from 0 to 512 [ 104.246227][T10016] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2608: invalid indirect mapped block 256 (level 2) [ 104.262574][T10016] EXT4-fs (loop1): 2 truncates cleaned up [ 104.268762][T10016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.316846][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.366984][T10030] pimreg: entered allmulticast mode [ 104.384690][T10030] pimreg: left allmulticast mode [ 104.391742][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.400521][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.558484][T10049] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 104.566792][T10049] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.007528][T10067] syz.1.2633[10067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.007635][T10067] syz.1.2633[10067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.031524][T10067] syz.1.2633[10067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.129159][T10081] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 105.149147][T10081] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 105.211840][T10079] loop0: detected capacity change from 0 to 8192 [ 105.241772][T10091] loop1: detected capacity change from 0 to 512 [ 105.260446][T10079] loop0: p1[EZD] p2 p4 [ 105.264714][T10079] loop0: p1 size 1465778176 extends beyond EOD, truncated [ 105.272583][T10079] loop0: p2 start 65535 is beyond EOD, truncated [ 105.279103][T10079] loop0: p4 size 65536 extends beyond EOD, truncated [ 105.292150][T10091] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2646: invalid indirect mapped block 256 (level 2) [ 105.321496][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.339502][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.348561][T10101] syz.3.2649[10101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.348665][T10101] syz.3.2649[10101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.365550][T10101] syz.3.2649[10101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.386500][T10079] FAT-fs (loop0p1): bogus number of reserved sectors [ 105.404696][T10079] FAT-fs (loop0p1): Can't find a valid FAT filesystem [ 105.414204][T10091] EXT4-fs (loop1): 2 truncates cleaned up [ 105.420451][T10091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.470116][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.535413][T10114] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 105.543708][T10114] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 105.615866][T10123] loop1: detected capacity change from 0 to 512 [ 105.644955][T10123] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2669: invalid indirect mapped block 256 (level 2) [ 105.661293][T10123] EXT4-fs (loop1): 2 truncates cleaned up [ 105.667388][T10123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.752041][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.114357][T10141] syz.0.2666[10141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.114472][T10141] syz.0.2666[10141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.138732][T10141] syz.0.2666[10141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.154836][T10147] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 106.174716][T10147] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 106.190135][T10145] __nla_validate_parse: 16 callbacks suppressed [ 106.190155][T10145] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2671'. [ 106.549928][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.571298][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.886013][T10180] syz.2.2684[10180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.998047][T10187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2685'. [ 107.187727][T10195] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 107.195993][T10195] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 107.206359][T10196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2699'. [ 108.588160][T10241] loop1: detected capacity change from 0 to 8192 [ 108.724257][T10241] loop1: p1[EZD] p2 p4 [ 108.728495][T10241] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 108.729937][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.750762][T10241] loop1: p2 start 65535 is beyond EOD, truncated [ 108.757124][T10241] loop1: p4 size 65536 extends beyond EOD, truncated [ 108.834540][T10257] loop2: detected capacity change from 0 to 1764 [ 108.842537][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.861063][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 108.861080][ T29] audit: type=1400 audit(1730912672.760:2760): avc: denied { mount } for pid=10236 comm="syz.2.2703" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 108.880629][T10261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2714'. [ 108.909473][T10241] FAT-fs (loop1p1): bogus number of reserved sectors [ 108.916268][T10241] FAT-fs (loop1p1): Can't find a valid FAT filesystem [ 108.919399][ T29] audit: type=1400 audit(1730912672.780:2761): avc: denied { nlmsg_read } for pid=10260 comm="syz.0.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.068723][ T29] audit: type=1400 audit(1730912672.960:2762): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 109.144306][T10275] netem: incorrect ge model size [ 109.264523][ T29] audit: type=1400 audit(1730912673.160:2763): avc: denied { read } for pid=10281 comm="syz.0.2725" path="socket:[24234]" dev="sockfs" ino=24234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.476065][T10291] loop0: detected capacity change from 0 to 2048 [ 109.508097][T10291] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 109.582473][T10295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2730'. [ 109.829190][T10306] loop1: detected capacity change from 0 to 1764 [ 109.838037][T10309] netem: incorrect ge model size [ 109.990864][ T29] audit: type=1400 audit(1730912673.890:2764): avc: denied { create } for pid=10313 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.043349][ T29] audit: type=1400 audit(1730912673.910:2765): avc: denied { write } for pid=10313 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.117237][T10317] loop1: detected capacity change from 0 to 8192 [ 110.185953][T10325] loop2: detected capacity change from 0 to 2048 [ 110.200518][T10317] loop1: p1[EZD] p2 p4 [ 110.201582][T10325] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 110.204762][T10317] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 110.253295][T10317] loop1: p2 start 65535 is beyond EOD, truncated [ 110.259746][T10317] loop1: p4 size 65536 extends beyond EOD, truncated [ 110.282673][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.314903][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.347885][T10317] FAT-fs (loop1p1): bogus number of reserved sectors [ 110.354784][T10317] FAT-fs (loop1p1): Can't find a valid FAT filesystem [ 110.470736][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2746'. [ 110.589989][T10344] bpf_get_probe_write_proto: 14 callbacks suppressed [ 110.590012][T10344] syz.0.2748[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.601698][T10344] syz.0.2748[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.637384][T10344] syz.0.2748[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.654584][T10346] netem: incorrect ge model size [ 110.670998][T10346] netem: change failed [ 111.311174][T10369] loop1: detected capacity change from 0 to 2048 [ 111.317939][T10369] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 111.342105][T10374] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2760'. [ 111.375516][T10380] syz.2.2763[10380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.375600][T10380] syz.2.2763[10380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.400002][T10380] syz.2.2763[10380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.420108][T10380] netem: incorrect ge model size [ 111.564607][T10395] macsec0: entered promiscuous mode [ 111.581641][T10395] veth1_macvtap: left promiscuous mode [ 111.593012][T10395] macsec0 (unregistering): left promiscuous mode [ 112.650249][T10419] loop2: detected capacity change from 0 to 2048 [ 112.659774][T10419] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 112.712933][ T29] audit: type=1400 audit(1730912676.610:2766): avc: denied { listen } for pid=10428 comm="syz.4.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.733452][T10427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2777'. [ 112.752815][T10433] macsec0: entered promiscuous mode [ 112.790051][T10433] veth1_macvtap: left promiscuous mode [ 112.807525][T10433] macsec0 (unregistering): left promiscuous mode [ 112.820866][ T29] audit: type=1400 audit(1730912676.720:2767): avc: denied { read } for pid=10434 comm="syz.1.2785" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.844141][ T29] audit: type=1400 audit(1730912676.720:2768): avc: denied { open } for pid=10434 comm="syz.1.2785" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.918567][T10442] loop0: detected capacity change from 0 to 1764 [ 112.936840][ T29] audit: type=1326 audit(1730912676.830:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.3.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 113.065691][T10463] xt_nat: multiple ranges no longer supported [ 113.090842][T10466] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2800'. [ 113.145423][T10474] macsec0: entered promiscuous mode [ 113.162604][T10474] veth1_macvtap: left promiscuous mode [ 113.191754][T10474] macsec0 (unregistering): left promiscuous mode [ 113.252641][T10496] xt_nat: multiple ranges no longer supported [ 113.395520][T10523] loop2: detected capacity change from 0 to 2048 [ 113.459833][T10523] loop2: p1 < > p4 [ 113.464246][T10523] loop2: p4 size 8388608 extends beyond EOD, truncated [ 113.490665][T10533] macsec0: entered promiscuous mode [ 113.498298][T10533] veth1_macvtap: left promiscuous mode [ 113.504788][T10537] xt_nat: multiple ranges no longer supported [ 113.512262][T10533] macsec0 (unregistering): left promiscuous mode [ 113.600145][T10553] syz.0.2852[10553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.600213][T10553] syz.0.2852[10553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.613081][T10553] syz.0.2852[10553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.707631][T10565] loop0: detected capacity change from 0 to 2048 [ 113.727792][T10562] hub 2-0:1.0: USB hub found [ 113.732837][T10562] hub 2-0:1.0: 8 ports detected [ 113.753806][T10567] xt_nat: multiple ranges no longer supported [ 113.790963][T10565] loop0: p1 < > p4 [ 113.797443][T10565] loop0: p4 size 8388608 extends beyond EOD, truncated [ 113.808736][T10570] loop2: detected capacity change from 0 to 512 [ 113.816841][T10570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.833224][T10570] EXT4-fs (loop2): 1 truncate cleaned up [ 113.839398][T10570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.860345][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.103408][T10579] macsec0: entered promiscuous mode [ 114.110120][T10579] veth1_macvtap: left promiscuous mode [ 114.119361][T10579] macsec0 (unregistering): left promiscuous mode [ 114.188401][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 114.188420][ T29] audit: type=1400 audit(1730912678.080:2836): avc: denied { map } for pid=10586 comm="syz.3.2856" path="socket:[25229]" dev="sockfs" ino=25229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 114.244149][T10584] loop0: detected capacity change from 0 to 512 [ 114.251868][T10592] syz.1.2857[10592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.255066][T10584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.278014][T10584] EXT4-fs (loop0): 1 truncate cleaned up [ 114.284268][T10584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.310296][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.334710][T10601] hub 2-0:1.0: USB hub found [ 114.348106][T10601] hub 2-0:1.0: 8 ports detected [ 114.403962][ T29] audit: type=1400 audit(1730912678.300:2837): avc: denied { ioctl } for pid=10615 comm="syz.4.2868" path="socket:[25883]" dev="sockfs" ino=25883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.438801][ T29] audit: type=1326 audit(1730912678.330:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 114.476910][ T29] audit: type=1326 audit(1730912678.360:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 114.500518][ T29] audit: type=1326 audit(1730912678.360:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 114.524028][ T29] audit: type=1326 audit(1730912678.360:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 114.547674][ T29] audit: type=1326 audit(1730912678.360:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 114.669040][ T29] audit: type=1326 audit(1730912678.560:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 114.703019][ T29] audit: type=1326 audit(1730912678.560:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 114.726717][ T29] audit: type=1326 audit(1730912678.570:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f902827e719 code=0x7ffc0000 [ 114.749156][T10647] hub 2-0:1.0: USB hub found [ 114.756418][T10647] hub 2-0:1.0: 8 ports detected [ 115.005385][T10687] hub 2-0:1.0: USB hub found [ 115.016817][T10687] hub 2-0:1.0: 8 ports detected [ 115.406560][T10723] hub 2-0:1.0: USB hub found [ 115.413228][T10723] hub 2-0:1.0: 8 ports detected [ 115.476620][T10731] hub 2-0:1.0: USB hub found [ 115.481517][T10731] hub 2-0:1.0: 8 ports detected [ 115.520440][T10744] netlink: 'syz.2.2927': attribute type 39 has an invalid length. [ 116.333283][T10772] hub 2-0:1.0: USB hub found [ 116.342604][T10772] hub 2-0:1.0: 8 ports detected [ 116.435383][T10787] hub 2-0:1.0: USB hub found [ 116.441522][T10787] hub 2-0:1.0: 8 ports detected [ 117.245134][T10828] hub 2-0:1.0: USB hub found [ 117.249962][T10828] hub 2-0:1.0: 8 ports detected [ 117.299275][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.306872][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.314357][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.322991][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.330530][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.337987][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.345491][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.353001][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.353172][T10846] loop0: detected capacity change from 0 to 512 [ 117.360469][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.360498][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.381652][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.389076][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.396521][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.403979][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.411456][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.418944][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.426397][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.434057][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.442084][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.447038][T10846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.449519][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.449547][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.449608][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.484325][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.491764][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.499190][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.506656][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.514139][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.514322][T10846] ext4 filesystem being mounted at /608/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.521544][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.521571][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.521598][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.554347][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.561899][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.563992][T10846] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2975: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 117.569338][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.587556][T10846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 117.593077][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 117.602312][T10846] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2975: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 117.612580][ T35] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 117.638945][T10846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 117.649309][T10846] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2975: bg 0: block 18: invalid block bitmap [ 117.662279][T10846] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.2975: Failed to acquire dquot type 1 [ 117.687544][T10846] syz.0.2975 (10846) used greatest stack depth: 9296 bytes left [ 117.702489][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.740345][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.747804][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.755300][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.764487][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.771951][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.779401][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.786903][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.794327][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.801751][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.809282][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.816838][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.824241][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.831654][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.839066][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.846549][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.853945][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.861352][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.868911][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.876467][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.884013][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.891546][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.899057][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.906579][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.914020][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.921486][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.928879][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.936328][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.943739][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.951139][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.958532][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.965936][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.973391][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.980785][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.988231][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 117.997963][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 118.326126][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.333673][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.341186][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.348662][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.356124][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.363583][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.371094][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.378623][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.386055][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.393475][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.401021][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.408451][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.416099][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.423547][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.431173][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.438758][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.446220][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.453619][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.454419][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.468565][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.476128][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.483666][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.491264][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.498730][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.506136][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.513619][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.521039][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.528481][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.535948][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.543347][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.550760][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.558154][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.565597][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.573030][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.581412][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 118.685022][T10929] loop1: detected capacity change from 0 to 512 [ 118.701920][T10929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.714794][T10929] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.752534][T10929] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3009: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 118.771038][T10929] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 118.786781][T10929] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3009: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 118.797590][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.810745][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.818164][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.818415][T10929] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 118.825635][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.842090][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.843148][T10929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3009: bg 0: block 18: invalid block bitmap [ 118.849543][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.864175][T10929] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3009: Failed to acquire dquot type 1 [ 118.869522][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.888059][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.895580][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.903001][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.910444][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.917915][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.925369][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.932884][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.940389][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.947784][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.955331][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.962743][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.970255][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.971012][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.977655][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 118.994256][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.001752][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.009277][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.016719][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.024154][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.031576][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.038963][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.046369][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.053860][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.061306][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.068713][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.076133][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.083573][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.091011][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 119.101134][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 119.195656][T10960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3022'. [ 119.259191][T10967] loop1: detected capacity change from 0 to 2048 [ 119.328230][T10975] loop0: detected capacity change from 0 to 2048 [ 119.640570][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.648020][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.655486][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.664117][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.671616][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.679034][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.686496][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.693982][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.701428][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.708825][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.716376][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.723817][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.731286][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.738690][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.746187][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.753626][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.761065][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.768482][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.775998][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.783467][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.790912][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.798305][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.805779][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.813291][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.820784][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.828183][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.835735][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.843217][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.850631][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.858017][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.865507][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.873008][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.880507][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.887962][ T1033] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.895928][ T1033] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.560407][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3036'. [ 120.600139][T11010] loop1: detected capacity change from 0 to 512 [ 120.614617][T11010] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3045'. [ 120.642161][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 120.642178][ T29] audit: type=1400 audit(1730912684.540:2952): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.677558][ T29] audit: type=1326 audit(1730912684.570:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 120.701207][ T29] audit: type=1326 audit(1730912684.570:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 120.724770][ T29] audit: type=1326 audit(1730912684.570:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 120.748220][ T29] audit: type=1326 audit(1730912684.570:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cc99e719 code=0x7ffc0000 [ 120.775144][T11024] loop1: detected capacity change from 0 to 512 [ 120.788944][T11024] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3051: corrupted in-inode xattr: invalid ea_ino [ 120.803670][T11024] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3051: couldn't read orphan inode 15 (err -117) [ 120.816512][T11024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.846121][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.525493][T11044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3058'. [ 121.542542][T11048] loop0: detected capacity change from 0 to 512 [ 121.579498][ T29] audit: type=1326 audit(1730912685.470:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffac2e719 code=0x7ffc0000 [ 121.603127][ T29] audit: type=1326 audit(1730912685.470:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffac2e719 code=0x7ffc0000 [ 121.626842][ T29] audit: type=1326 audit(1730912685.470:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8ffac2e719 code=0x7ffc0000 [ 121.644706][T11048] netlink: 376 bytes leftover after parsing attributes in process `syz.0.3060'. [ 121.650348][ T29] audit: type=1326 audit(1730912685.470:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffac2e719 code=0x7ffc0000 [ 121.812711][T11085] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3076'. [ 121.830364][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3075'. [ 121.841764][ T29] audit: type=1326 audit(1730912685.740:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 121.953030][T11103] loop0: detected capacity change from 0 to 512 [ 121.963122][T11103] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3084: corrupted in-inode xattr: invalid ea_ino [ 121.976858][T11103] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.3084: couldn't read orphan inode 15 (err -117) [ 121.989523][T11103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.015187][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.607602][T11115] loop2: detected capacity change from 0 to 512 [ 122.611023][T11121] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3090'. [ 122.617718][T11115] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3099: corrupted in-inode xattr: invalid ea_ino [ 122.646817][T11115] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3099: couldn't read orphan inode 15 (err -117) [ 122.661353][T11115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.696554][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.803013][T11146] loop0: detected capacity change from 0 to 256 [ 122.821506][T11148] loop2: detected capacity change from 0 to 512 [ 122.834800][T11148] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3105'. [ 122.981017][T11181] delete_channel: no stack [ 122.985590][T11181] delete_channel: no stack [ 123.028910][T11188] loop1: detected capacity change from 0 to 256 [ 123.170854][T11187] cgroup: fork rejected by pids controller in /syz2 [ 123.175114][T11205] loop1: detected capacity change from 0 to 1024 [ 123.185628][T11205] EXT4-fs: Ignoring removed oldalloc option [ 123.202229][T11205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.259430][T11205] loop1: detected capacity change from 1024 to 0 [ 123.268151][T11205] syz.1.3128: attempt to access beyond end of device [ 123.268151][T11205] loop1: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 123.284125][T11205] EXT4-fs error (device loop1): __ext4_find_entry:1641: inode #2: comm syz.1.3128: reading directory lblock 0 [ 123.308682][T11205] syz.1.3128: attempt to access beyond end of device [ 123.308682][T11205] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 123.322149][T11205] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.323887][T11257] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3135'. [ 123.330673][T11205] EXT4-fs (loop1): I/O error while writing superblock [ 123.360336][ T3316] syz-executor: attempt to access beyond end of device [ 123.360336][ T3316] loop1: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 123.373907][ T3316] syz-executor: attempt to access beyond end of device [ 123.373907][ T3316] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 123.387477][ T3316] syz-executor: attempt to access beyond end of device [ 123.387477][ T3316] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 123.401055][ T3316] syz-executor: attempt to access beyond end of device [ 123.401055][ T3316] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 123.414667][ T3316] syz-executor: attempt to access beyond end of device [ 123.414667][ T3316] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 123.428258][ T3316] syz-executor: attempt to access beyond end of device [ 123.428258][ T3316] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 123.441867][ T3316] syz-executor: attempt to access beyond end of device [ 123.441867][ T3316] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 123.455577][ T3316] syz-executor: attempt to access beyond end of device [ 123.455577][ T3316] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 123.469138][ T3316] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 123.482023][ T3316] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.490356][ T3316] EXT4-fs (loop1): I/O error while writing superblock [ 123.497131][ T3316] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 123.506041][ T3316] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.514350][ T3316] EXT4-fs (loop1): I/O error while writing superblock [ 123.521179][ T3316] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 123.532618][ T3316] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.540925][ T3316] EXT4-fs (loop1): I/O error while writing superblock [ 123.640328][T11266] cgroup: fork rejected by pids controller in /syz0 [ 123.736753][T11318] loop2: detected capacity change from 0 to 256 [ 123.750256][ T52] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 123.767801][ T52] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.776123][ T52] EXT4-fs (loop1): I/O error while writing superblock [ 123.795541][ T7743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.809905][ T7743] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 123.818262][ T7743] EXT4-fs (loop1): I/O error while writing superblock [ 123.827176][T11241] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 123.967256][ T8414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.048135][ T8414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.059642][T11356] loop0: detected capacity change from 0 to 1024 [ 124.082890][T11356] EXT4-fs: Ignoring removed oldalloc option [ 124.125041][ T8414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.136688][T11356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.180048][T11356] loop0: detected capacity change from 1024 to 0 [ 124.187796][T11356] EXT4-fs error (device loop0): __ext4_find_entry:1641: inode #2: comm syz.0.3166: reading directory lblock 0 [ 124.200498][T11356] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 124.200625][ T8414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.208856][T11356] EXT4-fs (loop0): I/O error while writing superblock [ 124.243141][ T3320] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 124.257031][ T3320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 124.265381][ T3320] EXT4-fs (loop0): I/O error while writing superblock [ 124.271336][T11357] chnl_net:caif_netlink_parms(): no params data found [ 124.272323][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 124.288241][ T3320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 124.297224][ T3320] EXT4-fs (loop0): I/O error while writing superblock [ 124.304223][ T3320] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 124.315834][ T3320] EXT4-fs (loop0): I/O error while writing superblock [ 124.351665][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.358750][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.366439][T11357] bridge_slave_0: entered allmulticast mode [ 124.373140][T11357] bridge_slave_0: entered promiscuous mode [ 124.380299][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.387405][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.395292][T11357] bridge_slave_1: entered allmulticast mode [ 124.401725][T11357] bridge_slave_1: entered promiscuous mode [ 124.423486][ T8414] bridge_slave_1: left allmulticast mode [ 124.429248][ T8414] bridge_slave_1: left promiscuous mode [ 124.434976][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.444730][ T8414] bridge_slave_0: left allmulticast mode [ 124.450666][ T8414] bridge_slave_0: left promiscuous mode [ 124.456312][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.530456][T11125] EXT4-fs error (device loop0): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 124.545034][T11125] EXT4-fs (loop0): I/O error while writing superblock [ 124.552011][ T50] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:3: unable to read itable block [ 124.565834][ T50] EXT4-fs (loop0): I/O error while writing superblock [ 124.573525][ T7671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.583003][ T8414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.584505][ T7671] EXT4-fs (loop0): I/O error while writing superblock [ 124.600450][ T8414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.610518][ T8414] bond0 (unregistering): Released all slaves [ 124.619393][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.635284][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.657032][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.664557][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.672731][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.680299][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.690586][ T8414] veth0_macvtap: left promiscuous mode [ 124.696275][ T8414] veth1_vlan: left promiscuous mode [ 124.701535][ T8414] veth0_vlan: left promiscuous mode [ 124.772076][ T8414] team0 (unregistering): Port device team_slave_1 removed [ 124.783394][ T8414] team0 (unregistering): Port device team_slave_0 removed [ 124.824260][T11357] team0: Port device team_slave_0 added [ 124.830878][T11357] team0: Port device team_slave_1 added [ 124.862825][T11385] __nla_validate_parse: 2 callbacks suppressed [ 124.862841][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 124.878102][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.885670][T11385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.908254][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.915827][T11385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.934146][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.941179][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.967202][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.979041][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.986040][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.011983][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.068249][T11357] hsr_slave_0: entered promiscuous mode [ 125.080349][T11357] hsr_slave_1: entered promiscuous mode [ 125.217478][T11357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.226778][T11357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.236612][T11357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.247221][T11357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.260388][T11386] chnl_net:caif_netlink_parms(): no params data found [ 125.316397][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.323501][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.331283][T11386] bridge_slave_0: entered allmulticast mode [ 125.337726][T11386] bridge_slave_0: entered promiscuous mode [ 125.344999][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.352223][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.359426][T11386] bridge_slave_1: entered allmulticast mode [ 125.365896][T11386] bridge_slave_1: entered promiscuous mode [ 125.374822][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.397994][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.408945][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.429422][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.446631][T11386] team0: Port device team_slave_0 added [ 125.453553][T11386] team0: Port device team_slave_1 added [ 125.473626][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.485209][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.492262][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.518312][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.530774][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.537772][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.563772][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.580407][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.594307][T11357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.615119][T11386] hsr_slave_0: entered promiscuous mode [ 125.621928][T11386] hsr_slave_1: entered promiscuous mode [ 125.627777][T11386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.635487][T11386] Cannot create hsr debugfs directory [ 125.644037][T11357] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.670594][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.677670][ T8419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.687337][ T8419] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.694561][ T8419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.730909][ T28] bridge_slave_1: left allmulticast mode [ 125.736582][ T28] bridge_slave_1: left promiscuous mode [ 125.742410][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.750542][ T28] bridge_slave_0: left allmulticast mode [ 125.756357][ T28] bridge_slave_0: left promiscuous mode [ 125.762009][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.851921][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.862187][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.872415][ T28] bond0 (unregistering): Released all slaves [ 125.932978][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.940520][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.948660][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.956144][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.965753][ T28] veth0_macvtap: left promiscuous mode [ 125.971414][ T28] veth1_vlan: left promiscuous mode [ 125.976688][ T28] veth0_vlan: left promiscuous mode [ 126.045191][ T28] team0 (unregistering): Port device team_slave_1 removed [ 126.055917][ T28] team0 (unregistering): Port device team_slave_0 removed [ 126.102251][T11357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.210840][T11357] veth0_vlan: entered promiscuous mode [ 126.219047][T11357] veth1_vlan: entered promiscuous mode [ 126.234565][T11357] veth0_macvtap: entered promiscuous mode [ 126.241995][T11357] veth1_macvtap: entered promiscuous mode [ 126.254387][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.264932][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.274875][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.285327][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.296403][T11357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.307287][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.317787][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.327834][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.338297][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.348989][T11357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.359002][T11357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.367795][T11357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.376645][T11357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.385397][T11357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.406617][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 126.406633][ T29] audit: type=1400 audit(1730912690.300:3013): avc: denied { mounton } for pid=11357 comm="syz-executor" path="/root/syzkaller.JzNoEj/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 126.437705][ T29] audit: type=1400 audit(1730912690.300:3014): avc: denied { mount } for pid=11357 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.459984][ T29] audit: type=1400 audit(1730912690.300:3015): avc: denied { mounton } for pid=11357 comm="syz-executor" path="/root/syzkaller.JzNoEj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 126.487031][ T29] audit: type=1400 audit(1730912690.300:3016): avc: denied { mounton } for pid=11357 comm="syz-executor" path="/root/syzkaller.JzNoEj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 126.515069][ T29] audit: type=1400 audit(1730912690.340:3017): avc: denied { mounton } for pid=11357 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 126.538722][T11386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.557029][T11386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.567014][T11436] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3165'. [ 126.576881][T11386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.590256][T11386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.657495][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.672107][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.683223][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.690429][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.711306][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.718426][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.784372][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.793569][T11447] cgroup: fork rejected by pids controller in /syz5 [ 126.869222][T11498] loop2: detected capacity change from 0 to 512 [ 126.899192][T11498] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3190: corrupted in-inode xattr: invalid ea_ino [ 126.904955][ T29] audit: type=1326 audit(1730912690.800:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.5.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005672e719 code=0x7ffc0000 [ 126.923196][T11498] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3190: couldn't read orphan inode 15 (err -117) [ 126.936255][ T29] audit: type=1326 audit(1730912690.800:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.5.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005672e719 code=0x7ffc0000 [ 126.976947][ T29] audit: type=1326 audit(1730912690.870:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.5.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005672e719 code=0x7ffc0000 [ 127.000750][ T29] audit: type=1326 audit(1730912690.870:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.5.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005672e719 code=0x7ffc0000 [ 127.024315][ T29] audit: type=1326 audit(1730912690.870:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.5.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005672e719 code=0x7ffc0000 [ 127.048962][T11498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.076028][T11386] veth0_vlan: entered promiscuous mode [ 127.084392][T11386] veth1_vlan: entered promiscuous mode [ 127.100597][T11386] veth0_macvtap: entered promiscuous mode [ 127.110811][T11386] veth1_macvtap: entered promiscuous mode [ 127.125932][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.136518][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.138381][T11513] loop5: detected capacity change from 0 to 1024 [ 127.146377][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.153504][T11513] EXT4-fs: Ignoring removed oldalloc option [ 127.163197][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.163220][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.189735][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.202646][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.214638][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.225256][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.235204][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.245696][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.255588][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.266056][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.277522][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.280171][T11513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.286092][T11386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.305602][T11386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.314388][T11386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.323214][T11386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.340697][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.389847][T11513] loop5: detected capacity change from 1024 to 0 [ 127.397945][ C0] I/O error, dev loop5, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 127.407578][T11525] EXT4-fs error (device loop5): __ext4_find_entry:1641: inode #2: comm syz.5.3198: reading directory lblock 0 [ 127.419955][T11525] EXT4-fs (loop5): I/O error while writing superblock [ 127.436545][T11357] EXT4-fs error (device loop5): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 127.442645][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 127.449705][T11357] EXT4-fs (loop5): I/O error while writing superblock [ 127.458277][T11530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.465047][T11357] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5780: IO failure [ 127.465092][T11357] EXT4-fs (loop5): I/O error while writing superblock [ 127.472483][T11530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.495296][T11357] EXT4-fs error (device loop5): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 127.507207][T11357] EXT4-fs (loop5): I/O error while writing superblock [ 127.521689][ T1731] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 127.522017][T11530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.539812][ T1731] EXT4-fs (loop5): I/O error while writing superblock [ 127.542946][T11530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.557763][T11357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.577769][T11357] EXT4-fs (loop5): I/O error while writing superblock [ 127.737127][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 127.746106][T11548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.753739][T11548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.762298][T11548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.769809][T11548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.791297][T11553] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 127.908836][T11568] loop2: detected capacity change from 0 to 1024 [ 127.915682][T11568] EXT4-fs: Ignoring removed oldalloc option [ 127.941118][T11568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.989565][T11568] loop2: detected capacity change from 1024 to 0 [ 127.996717][T11568] EXT4-fs error (device loop2): __ext4_find_entry:1641: inode #2: comm syz.2.3216: reading directory lblock 0 [ 128.008578][T11568] EXT4-fs (loop2): I/O error while writing superblock [ 128.022509][ T3319] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 128.035409][ T3319] EXT4-fs (loop2): I/O error while writing superblock [ 128.042219][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: IO failure [ 128.051205][ T3319] EXT4-fs (loop2): I/O error while writing superblock [ 128.058019][ T3319] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 128.069601][ T3319] EXT4-fs (loop2): I/O error while writing superblock [ 128.224660][ T1731] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 128.238467][ T1731] EXT4-fs (loop2): I/O error while writing superblock [ 128.246009][ T7810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.256455][ T7810] EXT4-fs (loop2): I/O error while writing superblock [ 128.456595][ T1731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.502994][ T1731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.552493][ T1731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.602686][ T1731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.661515][ T1731] bridge_slave_1: left allmulticast mode [ 128.667193][ T1731] bridge_slave_1: left promiscuous mode [ 128.673066][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.680928][ T1731] bridge_slave_0: left allmulticast mode [ 128.686627][ T1731] bridge_slave_0: left promiscuous mode [ 128.692423][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.822534][ T1731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.832792][ T1731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.843097][ T1731] bond0 (unregistering): Released all slaves [ 128.851596][T11579] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 128.891077][ T1731] tipc: Disabling bearer [ 128.896415][ T1731] tipc: Left network mode [ 128.913305][ T1731] veth0_macvtap: left promiscuous mode [ 128.918843][ T1731] veth1_vlan: left promiscuous mode [ 128.924192][ T1731] veth0_vlan: left promiscuous mode [ 128.994880][ T1731] team0 (unregistering): Port device team_slave_1 removed [ 129.005374][ T1731] team0 (unregistering): Port device team_slave_0 removed [ 129.149000][T11581] chnl_net:caif_netlink_parms(): no params data found [ 129.160240][T11585] chnl_net:caif_netlink_parms(): no params data found [ 129.231851][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.239033][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.246285][T11585] bridge_slave_0: entered allmulticast mode [ 129.253264][T11585] bridge_slave_0: entered promiscuous mode [ 129.260493][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.267603][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.274894][T11581] bridge_slave_0: entered allmulticast mode [ 129.281493][T11581] bridge_slave_0: entered promiscuous mode [ 129.288471][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.295633][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.302847][T11581] bridge_slave_1: entered allmulticast mode [ 129.309423][T11581] bridge_slave_1: entered promiscuous mode [ 129.315662][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.322843][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.330231][T11585] bridge_slave_1: entered allmulticast mode [ 129.336750][T11585] bridge_slave_1: entered promiscuous mode [ 129.363754][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.374495][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.384837][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.400347][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.424317][T11581] team0: Port device team_slave_0 added [ 129.430895][T11581] team0: Port device team_slave_1 added [ 129.439259][ T1731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.451499][T11585] team0: Port device team_slave_0 added [ 129.462572][T11585] team0: Port device team_slave_1 added [ 129.481796][ T1731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.493378][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.500738][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.526823][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.543324][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.550362][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.576358][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.589978][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.596940][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.622998][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.634267][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.641267][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.667298][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.680985][ T1731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.708775][T11581] hsr_slave_0: entered promiscuous mode [ 129.714875][T11581] hsr_slave_1: entered promiscuous mode [ 129.721007][T11581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.728572][T11581] Cannot create hsr debugfs directory [ 129.742385][ T1731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.765692][T11585] hsr_slave_0: entered promiscuous mode [ 129.771832][T11585] hsr_slave_1: entered promiscuous mode [ 129.777722][T11585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.785494][T11585] Cannot create hsr debugfs directory [ 129.829855][ T1731] bridge_slave_1: left allmulticast mode [ 129.835536][ T1731] bridge_slave_1: left promiscuous mode [ 129.841262][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.849001][ T1731] bridge_slave_0: left allmulticast mode [ 129.854720][ T1731] bridge_slave_0: left promiscuous mode [ 129.860381][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.942077][ T1731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.952571][ T1731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.962805][ T1731] bond0 (unregistering): Released all slaves [ 130.032853][ T1731] hsr_slave_0: left promiscuous mode [ 130.038524][ T1731] hsr_slave_1: left promiscuous mode [ 130.044328][ T1731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.051854][ T1731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.059510][ T1731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.066947][ T1731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.076671][ T1731] veth1_macvtap: left promiscuous mode [ 130.082267][ T1731] veth0_macvtap: left promiscuous mode [ 130.088138][ T1731] veth1_vlan: left promiscuous mode [ 130.093417][ T1731] veth0_vlan: left promiscuous mode [ 130.172142][ T1731] team0 (unregistering): Port device team_slave_1 removed [ 130.182766][ T1731] team0 (unregistering): Port device team_slave_0 removed [ 130.433243][T11581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.442294][T11581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.450835][T11581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.462591][T11581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.481943][T11585] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.490368][T11585] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.498849][T11585] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.508181][T11585] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.567306][T11581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.582866][T11585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.591078][T11581] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.601429][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.608482][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.620677][T11585] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.629255][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.636348][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.648302][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.655397][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.667190][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.674283][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.751420][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.770038][T11585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.831846][T11581] veth0_vlan: entered promiscuous mode [ 130.842008][T11581] veth1_vlan: entered promiscuous mode [ 130.861006][T11581] veth0_macvtap: entered promiscuous mode [ 130.868587][T11581] veth1_macvtap: entered promiscuous mode [ 130.880098][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.890646][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.901599][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.914262][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.924835][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.935673][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.944480][T11581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.953437][T11581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.962255][T11581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.971041][T11581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.992795][T11585] veth0_vlan: entered promiscuous mode [ 131.004522][T11585] veth1_vlan: entered promiscuous mode [ 131.023027][T11585] veth0_macvtap: entered promiscuous mode [ 131.030917][T11585] veth1_macvtap: entered promiscuous mode [ 131.041254][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.051831][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.061929][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.072419][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.083434][T11585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.092010][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.102694][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.112693][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.123175][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.134553][T11585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.147131][T11585] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.155933][T11585] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.164738][T11585] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.173706][T11585] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.294359][T11660] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 131.304416][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3247'. [ 131.345521][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 131.354543][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.361998][T11671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.381243][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.388666][T11671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.550156][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 131.550176][ T29] audit: type=1326 audit(1730912695.450:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 131.592921][ T29] audit: type=1326 audit(1730912695.450:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 131.616732][ T29] audit: type=1326 audit(1730912695.450:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 131.640560][ T29] audit: type=1326 audit(1730912695.450:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 131.664365][ T29] audit: type=1326 audit(1730912695.450:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc3bde719 code=0x7ffc0000 [ 131.721549][ T29] audit: type=1326 audit(1730912695.620:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0554e719 code=0x7ffc0000 [ 131.747953][ T29] audit: type=1326 audit(1730912695.620:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7feb0554e719 code=0x7ffc0000 [ 131.771700][ T29] audit: type=1326 audit(1730912695.620:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0554e719 code=0x7ffc0000 [ 131.795901][ T29] audit: type=1326 audit(1730912695.650:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0554e719 code=0x7ffc0000 [ 134.990400][ T29] audit: type=1400 audit(1730912698.890:3056): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 177.819491][ C1] ================================================================== [ 177.827612][ C1] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 177.835954][ C1] [ 177.838275][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 177.845640][ C1] __tmigr_cpu_deactivate+0xa1/0x410 [ 177.850950][ C1] tmigr_cpu_deactivate+0x66/0x180 [ 177.856080][ C1] __get_next_timer_interrupt+0x137/0x530 [ 177.861800][ C1] timer_base_try_to_set_idle+0x54/0x60 [ 177.867347][ C1] tick_nohz_idle_stop_tick+0x15b/0x650 [ 177.872983][ C1] do_idle+0x178/0x230 [ 177.877056][ C1] cpu_startup_entry+0x25/0x30 [ 177.881846][ C1] rest_init+0xef/0xf0 [ 177.885915][ C1] start_kernel+0x586/0x5e0 [ 177.890430][ C1] x86_64_start_reservations+0x2a/0x30 [ 177.895893][ C1] x86_64_start_kernel+0x9a/0xa0 [ 177.900832][ C1] common_startup_64+0x12c/0x137 [ 177.905774][ C1] [ 177.908112][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 177.915660][ C1] tmigr_handle_remote+0x26e/0x940 [ 177.920790][ C1] run_timer_softirq+0x5f/0x70 [ 177.925561][ C1] handle_softirqs+0xbf/0x280 [ 177.930247][ C1] irq_exit_rcu+0x3e/0x90 [ 177.934602][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 177.940248][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.946255][ C1] acpi_safe_halt+0x21/0x30 [ 177.950760][ C1] acpi_idle_do_entry+0x1d/0x30 [ 177.955613][ C1] acpi_idle_enter+0x96/0xb0 [ 177.960204][ C1] cpuidle_enter_state+0xc5/0x260 [ 177.965229][ C1] cpuidle_enter+0x40/0x70 [ 177.969654][ C1] do_idle+0x195/0x230 [ 177.973749][ C1] cpu_startup_entry+0x25/0x30 [ 177.978550][ C1] start_secondary+0x96/0xa0 [ 177.983155][ C1] common_startup_64+0x12c/0x137 [ 177.988118][ C1] [ 177.990436][ C1] value changed: 0x01 -> 0x00 [ 177.995104][ C1] [ 177.997421][ C1] Reported by Kernel Concurrency Sanitizer on: [ 178.003573][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.013903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.023989][ C1] ================================================================== [ 178.035219][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 178.035234][ T29] audit: type=1400 audit(1730912741.930:3061): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[459]" dev="pipefs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 178.323092][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.413143][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.482250][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.542758][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.601587][ T52] bridge_slave_1: left allmulticast mode [ 178.607253][ T52] bridge_slave_1: left promiscuous mode [ 178.612952][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.622738][ T52] bridge_slave_0: left allmulticast mode [ 178.628383][ T52] bridge_slave_0: left promiscuous mode [ 178.634064][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.703366][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.713830][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.724695][ T52] bond0 (unregistering): Released all slaves [ 178.802765][ T52] hsr_slave_0: left promiscuous mode [ 178.808559][ T52] hsr_slave_1: left promiscuous mode [ 178.814300][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.821800][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.829453][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.836850][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.845686][ T52] veth1_macvtap: left promiscuous mode [ 178.851284][ T52] veth0_macvtap: left promiscuous mode [ 178.856858][ T52] veth1_vlan: left promiscuous mode [ 178.862358][ T52] veth0_vlan: left promiscuous mode [ 178.942040][ T52] team0 (unregistering): Port device team_slave_1 removed [ 178.953002][ T52] team0 (unregistering): Port device team_slave_0 removed [ 179.305020][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.372402][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.422308][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.472242][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.554092][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.592208][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.632301][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.672236][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.724426][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.772870][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.822618][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.872419][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.934091][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.982333][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.032216][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.103414][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.181815][ T52] bridge_slave_1: left allmulticast mode [ 180.187481][ T52] bridge_slave_1: left promiscuous mode [ 180.193360][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.201022][ T52] bridge_slave_0: left allmulticast mode [ 180.206745][ T52] bridge_slave_0: left promiscuous mode [ 180.212523][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.220785][ T52] bridge_slave_1: left allmulticast mode [ 180.226443][ T52] bridge_slave_1: left promiscuous mode [ 180.232258][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.239933][ T52] bridge_slave_0: left allmulticast mode [ 180.245645][ T52] bridge_slave_0: left promiscuous mode [ 180.251407][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.259584][ T52] bridge_slave_1: left allmulticast mode [ 180.265251][ T52] bridge_slave_1: left promiscuous mode [ 180.270967][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.278638][ T52] bridge_slave_0: left allmulticast mode [ 180.284361][ T52] bridge_slave_0: left promiscuous mode [ 180.290102][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.298290][ T52] bridge_slave_1: left allmulticast mode [ 180.304067][ T52] bridge_slave_1: left promiscuous mode [ 180.309732][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.317557][ T52] bridge_slave_0: left allmulticast mode [ 180.323239][ T52] bridge_slave_0: left promiscuous mode [ 180.328957][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.671712][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.681961][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.691933][ T52] bond0 (unregistering): Released all slaves [ 180.701363][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.711547][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.721417][ T52] bond0 (unregistering): Released all slaves [ 180.731040][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.741154][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.751373][ T52] bond0 (unregistering): Released all slaves [ 180.760136][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.770700][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.780702][ T52] bond0 (unregistering): Released all slaves [ 180.822693][ T52] tipc: Disabling bearer [ 180.828018][ T52] tipc: Left network mode [ 180.832752][ T52] tipc: Disabling bearer [ 180.838075][ T52] tipc: Left network mode [ 180.850166][ T52] hsr_slave_0: left promiscuous mode [ 180.856005][ T52] hsr_slave_1: left promiscuous mode [ 180.861927][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.869412][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.876895][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.884552][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.893617][ T52] hsr_slave_0: left promiscuous mode [ 180.899352][ T52] hsr_slave_1: left promiscuous mode [ 180.909656][ T52] veth0_macvtap: left promiscuous mode [ 180.915243][ T52] veth1_vlan: left promiscuous mode [ 180.920584][ T52] veth0_vlan: left promiscuous mode [ 180.926238][ T52] veth0_macvtap: left promiscuous mode [ 180.931769][ T52] veth1_vlan: left promiscuous mode [ 180.937017][ T52] veth0_vlan: left promiscuous mode [ 180.942913][ T52] veth1_macvtap: left promiscuous mode [ 180.948396][ T52] veth0_macvtap: left promiscuous mode [ 180.953975][ T52] veth1_vlan: left promiscuous mode [ 180.959213][ T52] veth0_vlan: left promiscuous mode [ 180.965012][ T52] veth1_macvtap: left promiscuous mode [ 180.970543][ T52] veth0_macvtap: left promiscuous mode [ 180.976116][ T52] veth1_vlan: left promiscuous mode [ 180.981494][ T52] veth0_vlan: left promiscuous mode [ 181.174199][ T52] team0 (unregistering): Port device team_slave_1 removed [ 181.184375][ T52] team0 (unregistering): Port device team_slave_0 removed [ 181.242224][ T52] team0 (unregistering): Port device team_slave_1 removed [ 181.252197][ T52] team0 (unregistering): Port device team_slave_0 removed [ 181.308525][ T52] team0 (unregistering): Port device team_slave_1 removed [ 181.319411][ T52] team0 (unregistering): Port device team_slave_0 removed [ 181.379425][ T52] team0 (unregistering): Port device team_slave_1 removed [ 181.388910][ T52] team0 (unregistering): Port device team_slave_0 removed