last executing test programs: 5.188967955s ago: executing program 0 (id=3259): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) tkill(r0, 0x35) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done], 0x0, 0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) 5.179382615s ago: executing program 3 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setrlimit(0xc, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 4.289942693s ago: executing program 3 (id=3265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 4.287450314s ago: executing program 0 (id=3266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="a9cefcf92d710d8807c28e664b6cb2171541024577bbd75549587c1874a254e7861a155301b04c3ec876ede8571cf370ce462ecc2ce6cda563f4e10f29ee6f14efc012cc1f508d08b5db3c16510b0e6a5a85937fdde2a9beeb7af938b6bf02c34e4716685c26036e64419c2ccb4aac25abc1d75226f93cebe991", 0x7a}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000076000100000000000000000003080000000000000800", @ANYRESDEC], 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r5 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x7ffffb, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r5, r5, 0x0, 0x100000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$eJzs3T9vI0UUAPC3jmMbKOyCCiGxEhRUUZKWxgElUoQrkAuggIgkEootpESKxB9hUtHSUPIJkJDoaPkANPcNTrr2pOsuRaQ9rb0bOznHOZ/i5P78fk0ms+/NvJmMHKXYyTfv9g9209g/+fl+NBpJVNrRjtMkWlGJ0q9xQfv3AABeZqdZFo+ykXnykohoLK4sAGCB5v79/8/CSwIAFuzzL778dKPT2fwsTRux1f/tuJv/ZZ9/HT3f2I/vohd7sRrNOIvIzo3aW1mWDapprhUf9AfH3Tyz//X/xfgbDyOG+WvRjNaw62L+dmdzLR2ZyB/kdbxZzN/O89ejGW9PmX+7s7k+JT+6tfjw/Yn6V6IZ976N76MXu8Mixvm/rKXpJ9kfj3/6Ki8vz08Gx936MG4sW7rlHw0AAAAAAAAAAAAAAAAAAAAAAK+wleLunHoM7+/Ju4r7d5bO8m+WIy21Lt7PM8pPyoEu3Q80yOLP8n6d1TRNsyJwnF+Nd6pRvZtVAwAAAAAAAAAAAAAAAAAAwIvl6IcfD3Z6vb3DG2mUtwGUr/U/7zjt857q4XsxO7g+nqtSNGeMHEtlTBIxs4x8ETe0Ldc13riq5r/+nnfAxvUxy+O5olVsxg2vqzxdBzvJ9D2sR9nTKA/Jv5MxtXjGuWpXPcrmOn61qY+ac6+99tawMZgRE8mswj56MNq5oie5vIracFenpi8XjYn0S2djrvP89GdFkiziEwgAAAAAAAAAAAAAAAAAACiNX/qd8vBkZmolqy+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4VeP//z9HY1Akj3r++3hGcC0Oj+54iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwGngQAAP//4gNebw==") open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4.042357645s ago: executing program 1 (id=3267): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff4b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x0, 0x0) 3.565775187s ago: executing program 3 (id=3268): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x14a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe065) 3.446348727s ago: executing program 2 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 3.391939792s ago: executing program 0 (id=3272): ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 3.330631598s ago: executing program 2 (id=3273): r0 = socket$inet(0x2, 0x0, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x94, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@noinit_itable}, {@sysvgroups}, {@errors_remount}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x24, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x482}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x80}}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5a4, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x57c, 0x8, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x364, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.128382675s ago: executing program 0 (id=3274): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@errors_remount}, {@noinit_itable}, {@mblk_io_submit}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) 3.036659784s ago: executing program 3 (id=3275): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$cgroup_int(r1, 0x0, 0x0) 2.704254373s ago: executing program 1 (id=3276): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) 2.547459636s ago: executing program 4 (id=3279): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) write$cgroup_int(r1, 0x0, 0x0) 2.513586809s ago: executing program 4 (id=3280): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.263306301s ago: executing program 3 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000280)="2209b886c0d562c87eedf80ed6302bdf3a11fe7c53f13a7454e74af43e3e811dfd6db89eb36b0b7c54cace31a6c89a8bac9395731ea90f08f9442ce6c0ddd9a88453864a7380c73a7ea77b3cc3", 0x0, &(0x7f0000000200), &(0x7f0000000080), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.176257429s ago: executing program 3 (id=3282): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@nouid32}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@prjquota}, {@nodiscard}]}, 0xfa, 0x43a, &(0x7f00000008c0)="$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") 2.115740365s ago: executing program 2 (id=3283): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) tkill(r0, 0x35) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) 1.630082807s ago: executing program 1 (id=3284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 1.457758032s ago: executing program 4 (id=3285): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) write$cgroup_int(r1, 0x0, 0x0) 1.434330724s ago: executing program 1 (id=3286): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/103, 0x67}], 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.381062879s ago: executing program 4 (id=3287): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 1.302007446s ago: executing program 4 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x5, &(0x7f0000000100)={0x1, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") 1.283479488s ago: executing program 1 (id=3289): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/103, 0x67}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.059009067s ago: executing program 2 (id=3290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10}}, 0x84}}, 0x0) 726.725257ms ago: executing program 1 (id=3291): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, 0x0, 0x0) ptrace(0x10, 0x1) 667.154802ms ago: executing program 2 (id=3292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000280)="2209b886c0d562c87eedf80ed6302bdf3a11fe7c53f13a7454e74af43e3e811dfd6db89eb36b0b7c54cace31a6c89a8bac9395731ea90f08f9442ce6c0ddd9a88453864a7380c73a7ea77b3cc3", 0x0, &(0x7f0000000200), &(0x7f0000000080), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 640.215654ms ago: executing program 0 (id=3293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xb4}}, 0x0) 582.186029ms ago: executing program 2 (id=3294): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x14a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendfile(r0, r1, 0x0, 0xe065) 579.829339ms ago: executing program 0 (id=3295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="a9cefcf92d710d8807c28e664b6cb2171541024577bbd75549587c1874a254e7861a155301b04c3ec876ede8571cf370ce462ecc2ce6cda563f4e10f29ee6f14efc012cc1f508d08b5db3c16510b0e6a5a85937fdde2a9beeb7af938b6bf02c34e4716685c26036e64419c2ccb4aac25abc1d75226f93cebe991", 0x7a}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000076000100000000000000000003080000000000000800", @ANYRESDEC], 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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") r5 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x7ffffb, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r5, r5, 0x0, 0x100000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x181000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="a9cefcf92d710d8807c28e664b6cb2171541024577bbd75549587c1874a254e7861a155301b04c3ec876ede8571cf370ce462ecc2ce6cda563f4e10f29ee6f14efc012cc1f508d08b5db3c16510b0e6a5a85937fdde2a9beeb7af938b6bf02c34e4716685c26036e64419c2ccb4aac25abc1d75226f93cebe991", 0x7a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000076000100000000000000000003080000000000000800", @ANYRESDEC], 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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") r4 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r5, 0x7ffffb, 0x0) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r4, r4, 0x0, 0x100000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) kernel console output (not intermixed with test programs): nregistering): Port device team_slave_1 removed [ 440.325262][ T28] team0 (unregistering): Port device team_slave_0 removed [ 440.404140][T15213] ip6gre2: entered allmulticast mode [ 440.521060][ T29] audit: type=1326 audit(1726120035.686:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 440.577172][T15138] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.584452][T15138] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.585306][T15238] usb usb8: usbfs: process 15238 (syz.3.2734) did not claim interface 0 before use [ 440.606063][ T29] audit: type=1326 audit(1726120035.696:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 440.626145][T15138] bridge_slave_0: entered allmulticast mode [ 440.629648][ T29] audit: type=1326 audit(1726120035.696:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 440.651016][T15138] bridge_slave_0: entered promiscuous mode [ 440.659075][ T29] audit: type=1326 audit(1726120035.696:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 440.688137][T15138] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.695981][T15138] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.767398][T15138] bridge_slave_1: entered allmulticast mode [ 440.784946][T15138] bridge_slave_1: entered promiscuous mode [ 440.836435][T15138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.863597][T15138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.925095][T15138] team0: Port device team_slave_0 added [ 440.940492][T15138] team0: Port device team_slave_1 added [ 440.948720][T15265] loop3: detected capacity change from 0 to 2048 [ 440.983621][T15138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.990772][T15138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.016779][T15138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.068005][T15138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.075127][T15138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.101206][T15138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.141129][T15265] loop3: p1 < > p4 [ 441.182820][T15265] loop3: p4 size 8388608 extends beyond EOD, truncated [ 441.213774][T15138] hsr_slave_0: entered promiscuous mode [ 441.234672][T15138] hsr_slave_1: entered promiscuous mode [ 441.240914][T15138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.248490][T15138] Cannot create hsr debugfs directory [ 441.267659][ T2962] loop3: p1 < > p4 [ 441.273922][ T2962] loop3: p4 size 8388608 extends beyond EOD, truncated [ 441.449858][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2739'. [ 441.475116][T15300] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 441.733494][T15138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.765014][T15138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.794785][T15138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.829094][T15138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 441.857871][T15335] loop4: detected capacity change from 0 to 512 [ 441.938028][T15335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.980567][T15138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.022566][T15138] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.033793][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.039559][T15335] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.040915][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.062981][T15335] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2751: Directory hole found for htree leaf block 0 [ 442.099482][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.106643][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.154044][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.339664][T15138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.422988][ T29] audit: type=1400 audit(1726120037.586:625): avc: denied { bind } for pid=15370 comm="syz.3.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.442551][ T29] audit: type=1400 audit(1726120037.586:626): avc: denied { name_bind } for pid=15370 comm="syz.3.2755" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 442.464816][ T29] audit: type=1400 audit(1726120037.586:627): avc: denied { node_bind } for pid=15370 comm="syz.3.2755" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 442.486607][ T29] audit: type=1400 audit(1726120037.586:628): avc: denied { listen } for pid=15370 comm="syz.3.2755" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.526188][T15138] veth0_vlan: entered promiscuous mode [ 442.539119][ T29] audit: type=1400 audit(1726120037.646:629): avc: denied { accept } for pid=15370 comm="syz.3.2755" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.574736][T15138] veth1_vlan: entered promiscuous mode [ 442.619774][T15138] veth0_macvtap: entered promiscuous mode [ 442.634202][ T29] audit: type=1400 audit(1726120037.736:630): avc: denied { write } for pid=15370 comm="syz.3.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.662746][T15138] veth1_macvtap: entered promiscuous mode [ 442.708647][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.719275][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.729199][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.739723][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.749568][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.760057][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.769917][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.780483][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.790337][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.800919][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.811027][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.821512][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.831383][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.841862][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.868569][T15138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.893774][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.904270][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.914433][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.924940][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.934431][T15397] usb usb8: usbfs: process 15397 (syz.3.2758) did not claim interface 0 before use [ 442.935039][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.954677][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.964698][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.975179][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.985046][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.995519][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.005372][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.015933][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.025961][T15138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.036452][T15138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.054801][T15138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.064059][T15138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.072913][T15138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.081756][T15138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.090480][T15138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.155883][T15401] lo: entered allmulticast mode [ 443.280228][T15416] loop3: detected capacity change from 0 to 512 [ 443.335187][T15416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 443.359681][T15431] loop1: detected capacity change from 0 to 512 [ 443.399667][T15431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 443.419845][T15416] EXT4-fs (loop3): 1 orphan inode deleted [ 443.425666][T15416] EXT4-fs (loop3): 1 truncate cleaned up [ 443.440750][T15431] System zones: 1-12 [ 443.445196][T15431] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2765: invalid indirect mapped block 8 (level 2) [ 443.470862][T15431] EXT4-fs (loop1): Remounting filesystem read-only [ 443.477586][T15431] EXT4-fs (loop1): 1 truncate cleaned up [ 443.530955][T15431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.557251][T15416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.574718][T15431] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 443.584656][T15431] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.671144][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.692439][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.335667][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.416733][T15508] loop3: detected capacity change from 0 to 2048 [ 444.426924][T15510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.440590][T15510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.451035][T15508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.474038][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.856168][T15527] loop2: detected capacity change from 0 to 512 [ 444.863458][T15527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 444.880357][T15527] EXT4-fs (loop2): 1 orphan inode deleted [ 444.886203][T15527] EXT4-fs (loop2): 1 truncate cleaned up [ 444.892344][T15527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.943524][T15138] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.107732][T15543] loop4: detected capacity change from 0 to 512 [ 445.114704][T15543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.126534][T15543] EXT4-fs (loop4): 1 orphan inode deleted [ 445.132493][T15543] EXT4-fs (loop4): 1 truncate cleaned up [ 445.138502][T15543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.908798][T15566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.021141][T15566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.056596][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.125922][T15572] usb usb8: usbfs: process 15572 (syz.4.2810) did not claim interface 0 before use [ 446.211104][T15576] loop1: detected capacity change from 0 to 512 [ 446.322114][T15576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 446.353225][T15576] EXT4-fs (loop1): 1 orphan inode deleted [ 446.359066][T15576] EXT4-fs (loop1): 1 truncate cleaned up [ 446.365428][T15576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.682367][T15585] loop2: detected capacity change from 0 to 512 [ 446.715847][T15585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.780892][T15589] loop0: detected capacity change from 0 to 512 [ 446.789072][T15589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 446.862551][T15589] EXT4-fs (loop0): 1 orphan inode deleted [ 446.868351][T15589] EXT4-fs (loop0): 1 truncate cleaned up [ 446.874944][T15589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.011956][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.080078][T15585] EXT4-fs (loop2): 1 orphan inode deleted [ 447.085914][T15585] EXT4-fs (loop2): 1 truncate cleaned up [ 447.136221][T15585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.164634][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 447.164651][ T29] audit: type=1326 audit(1726120042.336:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.195006][ T29] audit: type=1326 audit(1726120042.346:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.218729][ T29] audit: type=1326 audit(1726120042.346:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.242529][ T29] audit: type=1326 audit(1726120042.346:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.266041][ T29] audit: type=1326 audit(1726120042.346:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.289609][ T29] audit: type=1326 audit(1726120042.346:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.313126][ T29] audit: type=1326 audit(1726120042.346:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.336725][ T29] audit: type=1326 audit(1726120042.346:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.360310][ T29] audit: type=1326 audit(1726120042.346:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.383934][ T29] audit: type=1326 audit(1726120042.346:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.1.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9262def9 code=0x7ffc0000 [ 447.454255][T15601] loop1: detected capacity change from 0 to 512 [ 447.475987][T15601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 447.533586][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.569631][T15138] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.592635][T15601] EXT4-fs (loop1): 1 orphan inode deleted [ 447.598418][T15601] EXT4-fs (loop1): 1 truncate cleaned up [ 447.604931][T15601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.015163][T15622] loop3: detected capacity change from 0 to 512 [ 448.067391][T15622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 448.114920][T15622] EXT4-fs (loop3): 1 orphan inode deleted [ 448.120737][T15622] EXT4-fs (loop3): 1 truncate cleaned up [ 448.162682][T15622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.259927][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.565983][T15635] loop1: detected capacity change from 0 to 512 [ 448.645507][T15635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 448.657884][T15635] EXT4-fs (loop1): 1 orphan inode deleted [ 448.663760][T15635] EXT4-fs (loop1): 1 truncate cleaned up [ 448.670651][T15635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.010941][T15642] loop0: detected capacity change from 0 to 512 [ 449.019290][T15642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 449.033664][T15642] EXT4-fs (loop0): 1 orphan inode deleted [ 449.039443][T15642] EXT4-fs (loop0): 1 truncate cleaned up [ 449.047212][T15642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.138189][ T5961] bridge_slave_1: left allmulticast mode [ 449.144047][ T5961] bridge_slave_1: left promiscuous mode [ 449.149788][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.358682][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.412060][ T5961] bridge_slave_0: left allmulticast mode [ 449.417744][ T5961] bridge_slave_0: left promiscuous mode [ 449.423589][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.439598][T15649] 9pnet_fd: Insufficient options for proto=fd [ 449.734354][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.792041][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.813379][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.894322][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.910482][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.941095][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.955531][ T5961] bond0 (unregistering): Released all slaves [ 450.012634][ T5961] tipc: Left network mode [ 450.037266][T15693] 9pnet_fd: Insufficient options for proto=fd [ 450.063124][ T5961] hsr_slave_0: left promiscuous mode [ 450.069998][ T5961] hsr_slave_1: left promiscuous mode [ 450.077365][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.085506][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.091012][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.103609][ T5961] pim6reg (unregistering): left allmulticast mode [ 450.139057][T15699] loop3: detected capacity change from 0 to 512 [ 450.156166][T15700] loop4: detected capacity change from 0 to 512 [ 450.238919][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.247541][T15699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 450.258685][T15700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.303717][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 450.332759][T15699] EXT4-fs (loop3): 1 orphan inode deleted [ 450.338569][T15699] EXT4-fs (loop3): 1 truncate cleaned up [ 450.344928][T15699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.384543][T15700] EXT4-fs (loop4): 1 orphan inode deleted [ 450.390338][T15700] EXT4-fs (loop4): 1 truncate cleaned up [ 450.397074][T15700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.500236][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 450.852842][ T5961] IPVS: stop unused estimator thread 0... [ 450.924880][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.948927][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.144991][T15733] loop4: detected capacity change from 0 to 512 [ 451.210620][T15733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.224000][T15733] EXT4-fs (loop4): 1 orphan inode deleted [ 451.229804][T15733] EXT4-fs (loop4): 1 truncate cleaned up [ 451.236185][T15733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.750274][T15748] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2870'. [ 451.827844][T15751] loop1: detected capacity change from 0 to 2048 [ 451.852985][T15751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.894206][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.922892][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.174567][T15769] loop4: detected capacity change from 0 to 512 [ 452.225341][T15769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 452.341340][T15769] EXT4-fs (loop4): 1 orphan inode deleted [ 452.347163][T15769] EXT4-fs (loop4): 1 truncate cleaned up [ 452.353731][T15769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.608626][T15782] loop0: detected capacity change from 0 to 2048 [ 452.625450][T15782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.684883][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.935088][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.005441][T15813] loop1: detected capacity change from 0 to 512 [ 453.080884][T15813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 453.115684][T15813] EXT4-fs (loop1): 1 orphan inode deleted [ 453.121563][T15813] EXT4-fs (loop1): 1 truncate cleaned up [ 453.127935][T15813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.474952][T15819] loop3: detected capacity change from 0 to 2048 [ 453.478514][T15820] loop4: detected capacity change from 0 to 512 [ 453.492531][T15819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.509264][T15820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 453.540199][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.551750][T15820] EXT4-fs (loop4): 1 orphan inode deleted [ 453.557570][T15820] EXT4-fs (loop4): 1 truncate cleaned up [ 453.589998][T15820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.263162][T15832] loop3: detected capacity change from 0 to 512 [ 454.289120][T15834] loop0: detected capacity change from 0 to 512 [ 454.369432][T15832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 454.379660][T15834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 454.393048][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.410444][T15834] EXT4-fs (loop0): 1 orphan inode deleted [ 454.416261][T15834] EXT4-fs (loop0): 1 truncate cleaned up [ 454.422809][T15834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.460787][T15832] EXT4-fs (loop3): 1 orphan inode deleted [ 454.466610][T15832] EXT4-fs (loop3): 1 truncate cleaned up [ 454.473312][T15832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.517341][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.656487][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.667774][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.793166][T15847] loop3: detected capacity change from 0 to 4096 [ 454.901032][T15847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.908431][T15860] loop1: detected capacity change from 0 to 2048 [ 454.972412][ T29] audit: type=1400 audit(1726120050.136:659): avc: denied { rmdir } for pid=12961 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.995283][ T29] audit: type=1400 audit(1726120050.136:660): avc: denied { unlink } for pid=12961 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 455.040253][ T29] audit: type=1400 audit(1726120050.196:661): avc: denied { unmount } for pid=12961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 455.060442][ T29] audit: type=1400 audit(1726120050.196:662): avc: denied { unlink } for pid=12961 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 455.088001][T15869] loop0: detected capacity change from 0 to 512 [ 455.095599][T15869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.232673][T15869] EXT4-fs (loop0): 1 orphan inode deleted [ 455.238561][T15869] EXT4-fs (loop0): 1 truncate cleaned up [ 455.446787][ T29] audit: type=1400 audit(1726120050.616:663): avc: denied { write } for pid=15873 comm="syz.1.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 455.527316][T15879] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2915'. [ 455.659520][T15884] loop1: detected capacity change from 0 to 512 [ 455.713374][T15884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 455.744705][T15884] EXT4-fs (loop1): 1 orphan inode deleted [ 455.750486][T15884] EXT4-fs (loop1): 1 truncate cleaned up [ 456.131584][T15899] loop4: detected capacity change from 0 to 512 [ 456.132806][T15898] loop0: detected capacity change from 0 to 4096 [ 456.148385][T15899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.162410][T15899] EXT4-fs (loop4): 1 orphan inode deleted [ 456.168269][T15899] EXT4-fs (loop4): 1 truncate cleaned up [ 456.208453][T15903] loop0: detected capacity change from 0 to 2048 [ 456.317503][T15908] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2925'. [ 456.323911][T15703] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 456.344015][T15910] 9pnet_fd: Insufficient options for proto=fd [ 456.360256][T15703] EXT4-fs (loop1): Remounting filesystem read-only [ 456.998293][T15930] loop4: detected capacity change from 0 to 512 [ 457.013269][T15930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 457.023464][T15930] System zones: 1-12 [ 457.027787][T15930] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.2934: invalid block [ 457.039763][T15930] EXT4-fs (loop4): Remounting filesystem read-only [ 457.048405][T15930] EXT4-fs (loop4): 1 truncate cleaned up [ 457.054568][T15930] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 457.077976][T15930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.090293][T15930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.127552][T15935] loop0: detected capacity change from 0 to 2048 [ 457.305560][T15942] loop0: detected capacity change from 0 to 512 [ 457.316687][T15942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 457.506300][T15942] EXT4-fs (loop0): 1 orphan inode deleted [ 457.512210][T15942] EXT4-fs (loop0): 1 truncate cleaned up [ 457.682530][T15949] loop1: detected capacity change from 0 to 164 [ 457.724564][T15949] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 457.745914][T15949] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 457.771526][T15949] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 457.981257][T15951] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 458.162556][T15963] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2942'. [ 459.133768][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 459.143706][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 459.280541][T16031] loop1: detected capacity change from 0 to 164 [ 459.285997][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 459.297702][T16031] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 459.314913][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2975'. [ 459.324167][T16031] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 459.334815][T16031] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 459.400120][T16038] loop3: detected capacity change from 0 to 512 [ 459.411173][T16038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 459.423775][T16038] EXT4-fs (loop3): 1 orphan inode deleted [ 459.429594][T16038] EXT4-fs (loop3): 1 truncate cleaned up [ 459.485991][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.497612][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.511141][T16046] loop1: detected capacity change from 0 to 512 [ 459.522856][T16046] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.529374][T16046] EXT4-fs: Ignoring removed i_version option [ 459.538191][ T29] audit: type=1326 audit(1726120054.706:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06cbcddef9 code=0x0 [ 459.563474][T16046] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.2981: invalid block [ 459.574670][T16046] EXT4-fs (loop1): Remounting filesystem read-only [ 459.583038][T16046] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 460.463991][ T5961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.523784][T16074] loop3: detected capacity change from 0 to 164 [ 460.557163][ T5961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.559952][T16074] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 460.586923][T16074] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 460.603075][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.611627][T16074] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 460.619550][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.636750][ T5961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.664907][T16056] chnl_net:caif_netlink_parms(): no params data found [ 460.702467][ T5961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.843934][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.851164][T16056] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.865274][T16056] bridge_slave_0: entered allmulticast mode [ 460.885099][T16056] bridge_slave_0: entered promiscuous mode [ 460.901568][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.908705][T16056] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.926744][T16056] bridge_slave_1: entered allmulticast mode [ 460.935808][T16056] bridge_slave_1: entered promiscuous mode [ 460.975737][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.990008][T16056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.016984][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.025218][ T5961] bridge_slave_1: left allmulticast mode [ 461.030908][ T5961] bridge_slave_1: left promiscuous mode [ 461.036637][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.050265][ T5961] bridge_slave_0: left allmulticast mode [ 461.056134][ T5961] bridge_slave_0: left promiscuous mode [ 461.061900][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.129800][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.148519][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.162392][ T29] audit: type=1400 audit(1726120056.336:665): avc: denied { read write } for pid=16099 comm="syz.0.2997" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 461.185844][ T29] audit: type=1400 audit(1726120056.336:666): avc: denied { open } for pid=16099 comm="syz.0.2997" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 461.225916][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.236710][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.249038][ T5961] bond0 (unregistering): Released all slaves [ 461.262468][T16056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.299059][T16056] team0: Port device team_slave_0 added [ 461.316018][T16056] team0: Port device team_slave_1 added [ 461.351590][T16056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.358572][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.384612][T16056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.437676][ T5961] hsr_slave_0: left promiscuous mode [ 461.443837][ T5961] hsr_slave_1: left promiscuous mode [ 461.449785][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.457260][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.469247][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.476711][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.489656][ T5961] veth1_macvtap: left promiscuous mode [ 461.495297][ T5961] veth0_macvtap: left promiscuous mode [ 461.500899][ T5961] veth1_vlan: left promiscuous mode [ 461.506213][ T5961] veth0_vlan: left promiscuous mode [ 461.637681][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 461.650000][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 461.706942][T16056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.714087][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.740058][T16056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.766603][T16116] loop0: detected capacity change from 0 to 512 [ 461.777493][T16116] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.783992][T16116] EXT4-fs: Ignoring removed i_version option [ 461.795141][T16116] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.2998: invalid block [ 461.813127][T16116] EXT4-fs (loop0): Remounting filesystem read-only [ 461.821024][T16116] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 461.866792][T16056] hsr_slave_0: entered promiscuous mode [ 461.883801][T16056] hsr_slave_1: entered promiscuous mode [ 461.902618][T16056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.920416][T16056] Cannot create hsr debugfs directory [ 462.292288][T16056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 462.309695][T16056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 462.329339][T16056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 462.346662][T16056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 462.445620][T16056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.476914][T16056] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.511407][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.518515][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.549994][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.557207][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.721856][T16056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.915481][T16056] veth0_vlan: entered promiscuous mode [ 462.938222][T16056] veth1_vlan: entered promiscuous mode [ 462.976086][T16056] veth0_macvtap: entered promiscuous mode [ 463.006676][T16056] veth1_macvtap: entered promiscuous mode [ 463.035895][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.046508][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.056368][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.066929][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.076802][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.087330][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.097170][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.107707][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.117653][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.128164][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.138184][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.148765][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.158794][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.169264][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.213528][T16056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.222847][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.233345][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.243240][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.253773][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.263628][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.274089][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.283954][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.294427][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.304286][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.314744][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.324610][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.335056][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.344910][T16056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.355586][T16056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.367790][T16056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.377092][T16056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.385966][T16056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.394865][T16056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.403823][T16056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.483721][T16208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.514918][T16208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.040041][T16227] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3007'. [ 464.122505][T16229] loop0: detected capacity change from 0 to 4096 [ 464.194450][T16233] loop0: detected capacity change from 0 to 512 [ 464.202347][T16233] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.208898][T16233] EXT4-fs: Ignoring removed i_version option [ 464.223186][T16233] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.3009: invalid block [ 464.234384][T16233] EXT4-fs (loop0): Remounting filesystem read-only [ 464.243207][T16233] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 465.417149][ T29] audit: type=1400 audit(1726120060.586:667): avc: denied { write } for pid=16253 comm="syz.4.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.437009][ T29] audit: type=1400 audit(1726120060.586:668): avc: denied { setopt } for pid=16253 comm="syz.4.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.456661][ T29] audit: type=1400 audit(1726120060.586:669): avc: denied { mount } for pid=16253 comm="syz.4.3016" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 465.697094][T16262] loop1: detected capacity change from 0 to 512 [ 465.718288][T16262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 465.726343][T16262] System zones: 1-12 [ 465.734844][T16262] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.3017: invalid block [ 465.746673][T16262] EXT4-fs (loop1): Remounting filesystem read-only [ 465.753793][T16262] EXT4-fs (loop1): 1 truncate cleaned up [ 465.760501][T16262] EXT4-fs mount: 29 callbacks suppressed [ 465.760517][T16262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.781488][T16262] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 465.796269][T16262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.827397][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.855035][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.081486][ T29] audit: type=1400 audit(1726120061.256:670): avc: denied { unmount } for pid=14328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 466.108373][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.132589][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.256894][T16280] loop4: detected capacity change from 0 to 512 [ 466.264416][T16280] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.270949][T16280] EXT4-fs: Ignoring removed i_version option [ 466.282767][T16280] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.3025: invalid block [ 466.295654][T16280] EXT4-fs (loop4): Remounting filesystem read-only [ 466.302693][T16280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.326226][T16280] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 466.328873][T16274] xt_policy: neither incoming nor outgoing policy selected [ 466.336754][T16280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.107915][ T29] audit: type=1400 audit(1726120062.276:671): avc: denied { create } for pid=16298 comm="syz.2.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 467.348456][T16310] loop4: detected capacity change from 0 to 512 [ 467.356351][T16310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 467.364490][T16310] System zones: 1-12 [ 467.368665][T16310] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3036: invalid indirect mapped block 8 (level 2) [ 467.383112][T16310] EXT4-fs (loop4): Remounting filesystem read-only [ 467.389835][T16310] EXT4-fs (loop4): 1 truncate cleaned up [ 467.398187][T16310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.410604][T16310] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 467.421045][T16310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.439251][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.452394][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.636326][T16319] loop0: detected capacity change from 0 to 2048 [ 467.654126][T16319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.666522][T16319] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.882103][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.140194][T16331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.151786][T16330] loop4: detected capacity change from 0 to 512 [ 468.153654][T16331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.158409][T16330] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.183773][T16330] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 468.195335][T16330] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3041: corrupted in-inode xattr: e_value out of bounds [ 468.212438][T16330] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3041: couldn't read orphan inode 15 (err -117) [ 468.314016][T16330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.546063][ T29] audit: type=1400 audit(1726120063.716:672): avc: denied { setattr } for pid=16329 comm="syz.4.3041" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 468.591032][ T29] audit: type=1400 audit(1726120063.756:673): avc: denied { mounton } for pid=16336 comm="syz.1.3043" path="/proc/591/task" dev="proc" ino=54619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 468.593592][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.666748][T16341] loop4: detected capacity change from 0 to 512 [ 468.681030][T16341] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.687638][T16341] EXT4-fs: Ignoring removed i_version option [ 468.714765][T16341] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.3044: invalid block [ 468.729153][T16341] EXT4-fs (loop4): Remounting filesystem read-only [ 468.741201][T16341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.768542][T16341] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 468.780835][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.789892][T16341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.805424][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.830376][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 468.837852][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.845396][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.852830][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.860327][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.867842][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.875278][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 468.882848][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.890241][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 468.897897][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.905321][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.912746][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.920158][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.927595][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 468.935090][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.942513][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.950399][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.957953][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.965430][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.972869][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.980324][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 468.987752][T14000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.013632][T14000] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 469.111042][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.130794][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.146155][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 469.153632][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.161113][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.168594][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.176100][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.183559][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.190973][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 469.198401][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.206024][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 469.213498][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.220944][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.228350][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.235858][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.243381][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 469.250898][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.258333][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.265763][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.273193][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.280588][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.288012][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.295483][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.302910][ T3495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 469.313225][ T3495] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 469.671360][T16361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.702575][T16361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.724898][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 469.732489][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.739906][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.747363][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.754842][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.762253][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.769717][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 469.777250][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.784695][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 469.792191][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.799599][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.807037][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.814573][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.822004][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 469.829478][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.837002][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.844435][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.851871][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.859433][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.866946][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.874566][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.882080][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.890519][ T3495] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 469.927902][T16364] xt_policy: neither incoming nor outgoing policy selected [ 469.970271][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3057'. [ 470.116521][T16378] loop4: detected capacity change from 0 to 4096 [ 470.140222][T16378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.220665][T16378] loop4: detected capacity change from 4096 to 0 [ 470.227613][T16381] bio_check_eod: 8 callbacks suppressed [ 470.227628][T16381] syz.4.3060: attempt to access beyond end of device [ 470.227628][T16381] loop4: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 470.246570][T16381] EXT4-fs error (device loop4): __ext4_find_entry:1641: inode #2: comm syz.4.3060: reading directory lblock 0 [ 470.247034][T16380] xt_policy: neither incoming nor outgoing policy selected [ 470.258309][T16381] syz.4.3060: attempt to access beyond end of device [ 470.258309][T16381] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 470.258340][T16381] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.287137][T16381] EXT4-fs (loop4): I/O error while writing superblock [ 470.315063][T14328] syz-executor: attempt to access beyond end of device [ 470.315063][T14328] loop4: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 470.331176][T14328] syz-executor: attempt to access beyond end of device [ 470.331176][T14328] loop4: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 470.346775][T14328] syz-executor: attempt to access beyond end of device [ 470.346775][T14328] loop4: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 470.361129][T14328] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 470.376893][T14328] syz-executor: attempt to access beyond end of device [ 470.376893][T14328] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 470.390414][T14328] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.400882][T14328] EXT4-fs (loop4): I/O error while writing superblock [ 470.407676][T14328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 470.418667][T14328] syz-executor: attempt to access beyond end of device [ 470.418667][T14328] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 470.432147][T14328] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.459934][T14328] EXT4-fs (loop4): I/O error while writing superblock [ 470.466771][T14328] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 470.473590][T16383] loop1: detected capacity change from 0 to 2048 [ 470.492035][T14328] syz-executor: attempt to access beyond end of device [ 470.492035][T14328] loop4: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 470.505519][T14328] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.525512][T16383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.530762][T14328] EXT4-fs (loop4): I/O error while writing superblock [ 470.538992][T16383] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.596485][ T11] kworker/u8:0: attempt to access beyond end of device [ 470.596485][ T11] loop4: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 470.614304][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.623639][ T11] kworker/u8:0: attempt to access beyond end of device [ 470.623639][ T11] loop4: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 470.640025][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 470.676729][ T11] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.690305][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 470.699712][T14328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.718102][T14328] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 470.732242][T16396] loop2: detected capacity change from 0 to 128 [ 470.736187][T14328] EXT4-fs (loop4): I/O error while writing superblock [ 470.754634][T16396] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 470.799649][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 470.950055][T16403] loop2: detected capacity change from 0 to 512 [ 470.968267][T16403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 470.982563][T16403] EXT4-fs (loop2): 1 orphan inode deleted [ 470.988319][T16403] EXT4-fs (loop2): 1 truncate cleaned up [ 470.994705][T16403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.365384][T16406] loop0: detected capacity change from 0 to 512 [ 471.389528][T16406] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.412928][T16406] EXT4-fs (loop0): 1 orphan inode deleted [ 471.418741][T16406] EXT4-fs (loop0): 1 truncate cleaned up [ 471.425464][T16406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.526644][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.748250][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.806774][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.845887][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.933606][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.974971][T16418] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.036172][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.048098][T16434] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.120076][T16438] loop2: detected capacity change from 0 to 128 [ 472.172793][T16438] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 472.218168][ T5961] bridge_slave_1: left allmulticast mode [ 472.223889][ T5961] bridge_slave_1: left promiscuous mode [ 472.229627][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.258121][ T5961] bridge_slave_0: left allmulticast mode [ 472.264016][ T5961] bridge_slave_0: left promiscuous mode [ 472.269747][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.289196][ T3382] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 472.307406][T16417] xt_policy: neither incoming nor outgoing policy selected [ 472.552030][ T29] audit: type=1400 audit(1726120067.716:674): avc: denied { remount } for pid=16447 comm="syz.2.3082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 472.993737][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.006325][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.017259][ T5961] bond0 (unregistering): Released all slaves [ 473.413154][ T5961] hsr_slave_0: left promiscuous mode [ 473.419148][ T5961] hsr_slave_1: left promiscuous mode [ 473.428632][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.436122][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.447322][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.454801][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.470397][ T5961] veth1_macvtap: left promiscuous mode [ 473.475933][ T5961] veth0_macvtap: left promiscuous mode [ 473.481552][ T5961] veth1_vlan: left promiscuous mode [ 473.486845][ T5961] veth0_vlan: left promiscuous mode [ 473.546316][T16463] loop2: detected capacity change from 0 to 2048 [ 473.591457][T16463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.618613][T16463] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.638463][ T29] audit: type=1400 audit(1726120068.806:675): avc: denied { ioctl } for pid=16462 comm="syz.2.3086" path="/23/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.687558][T16464] xt_policy: neither incoming nor outgoing policy selected [ 473.769322][T16469] loop0: detected capacity change from 0 to 512 [ 473.779693][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 473.779815][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.799482][T16469] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.806555][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 473.814165][T16469] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.825169][T16469] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3087: corrupted in-inode xattr: e_value out of bounds [ 473.842402][T16469] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3087: couldn't read orphan inode 15 (err -117) [ 473.855232][T16469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.912564][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.923319][T16472] loop2: detected capacity change from 0 to 128 [ 473.954854][T16411] chnl_net:caif_netlink_parms(): no params data found [ 473.962152][T16472] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 474.161461][T16490] loop0: detected capacity change from 0 to 512 [ 474.217883][T16490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 474.243549][T16411] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.250731][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.286803][T16490] EXT4-fs (loop0): 1 orphan inode deleted [ 474.292593][T16490] EXT4-fs (loop0): 1 truncate cleaned up [ 474.299227][T16490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.331188][T16411] bridge_slave_0: entered allmulticast mode [ 474.361116][T16411] bridge_slave_0: entered promiscuous mode [ 474.381769][T16411] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.388900][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.477536][T16411] bridge_slave_1: entered allmulticast mode [ 474.494596][T16411] bridge_slave_1: entered promiscuous mode [ 474.951754][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.039465][T16411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.050349][T16419] chnl_net:caif_netlink_parms(): no params data found [ 475.066396][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.132619][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.150442][T16411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.232842][ T50] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 475.277619][ T5961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.323128][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.330401][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.401115][T16525] loop2: detected capacity change from 0 to 512 [ 475.481319][T16525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 475.526991][T16525] EXT4-fs (loop2): 1 orphan inode deleted [ 475.532918][T16525] EXT4-fs (loop2): 1 truncate cleaned up [ 475.539512][T16525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.576265][T16419] bridge_slave_0: entered allmulticast mode [ 475.614128][T16419] bridge_slave_0: entered promiscuous mode [ 475.674883][T16411] team0: Port device team_slave_0 added [ 475.693798][T16411] team0: Port device team_slave_1 added [ 475.766675][ T5961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.798550][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.805694][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.814453][T16419] bridge_slave_1: entered allmulticast mode [ 475.822929][T16419] bridge_slave_1: entered promiscuous mode [ 475.869935][ T5961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.908850][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.918383][T16411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.925498][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.951515][T16411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.981506][ T5961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.994318][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.004868][T16411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.011893][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.037922][T16411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.125066][T16419] team0: Port device team_slave_0 added [ 476.132231][T16419] team0: Port device team_slave_1 added [ 476.138089][T16540] loop0: detected capacity change from 0 to 512 [ 476.145433][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.157065][T16540] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.163580][T16540] EXT4-fs: Ignoring removed i_version option [ 476.202714][T16540] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.3098: invalid block [ 476.229802][T16411] hsr_slave_0: entered promiscuous mode [ 476.239806][T16411] hsr_slave_1: entered promiscuous mode [ 476.250855][T16540] EXT4-fs (loop0): Remounting filesystem read-only [ 476.264768][T16411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.275013][T16540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.293939][T16411] Cannot create hsr debugfs directory [ 476.304539][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.311569][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.337643][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.350989][T16540] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 476.357969][T16540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.367427][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.374567][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.400727][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.436588][ T5961] bridge_slave_1: left allmulticast mode [ 476.442488][ T5961] bridge_slave_1: left promiscuous mode [ 476.448197][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.754968][T16559] loop2: detected capacity change from 0 to 512 [ 476.762546][T16559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.778495][T16559] EXT4-fs (loop2): 1 orphan inode deleted [ 476.784274][T16559] EXT4-fs (loop2): 1 truncate cleaned up [ 476.790428][T16559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.118144][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.142510][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.166920][ T5961] bond0 (unregistering): Released all slaves [ 477.235793][T16419] hsr_slave_0: entered promiscuous mode [ 477.246374][T16419] hsr_slave_1: entered promiscuous mode [ 477.280474][T16419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.293279][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.302467][T16419] Cannot create hsr debugfs directory [ 477.327601][ T5961] hsr_slave_0: left promiscuous mode [ 477.343111][ T5961] hsr_slave_1: left promiscuous mode [ 477.351901][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.359423][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.393227][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.400876][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.425199][ T5961] veth1_macvtap: left promiscuous mode [ 477.430760][ T5961] veth0_macvtap: left promiscuous mode [ 477.436346][ T5961] veth1_vlan: left promiscuous mode [ 477.441655][ T5961] veth0_vlan: left promiscuous mode [ 477.572542][T16577] loop2: detected capacity change from 0 to 512 [ 477.604983][T16577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 477.714887][T16577] EXT4-fs (loop2): 1 orphan inode deleted [ 477.720738][T16577] EXT4-fs (loop2): 1 truncate cleaned up [ 477.726875][T16577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.881472][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 477.945470][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 477.958818][T16582] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.054299][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.081164][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.331581][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.564544][T16411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.646327][T16629] loop0: detected capacity change from 0 to 512 [ 478.713480][T16629] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 478.836351][T16411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.896165][T16629] EXT4-fs (loop0): 1 orphan inode deleted [ 478.901989][T16629] EXT4-fs (loop0): 1 truncate cleaned up [ 478.908429][T16629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.985525][T16411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.032993][T16411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.049841][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.065894][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.090556][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 479.098038][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.105535][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.112986][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.120461][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.127745][T16411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.127915][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.141895][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 479.149386][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.156831][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 479.158272][T16411] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.164245][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.164274][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.185729][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.185832][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.193137][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.193160][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 479.193182][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.200250][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.207636][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.237218][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.244686][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.246428][T16411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.252111][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.262479][T16411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.269873][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.288062][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.295555][ T3511] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 479.300850][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.310019][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.318756][ T3511] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 479.360049][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.478743][T16648] loop0: detected capacity change from 0 to 2048 [ 479.486129][T16411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.535071][T16648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.543109][T16419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.562798][T16419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.573016][T16419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.590707][T16419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.609681][T16648] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.694702][T16664] loop2: detected capacity change from 0 to 512 [ 479.720679][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.749147][T16411] veth0_vlan: entered promiscuous mode [ 479.760098][T16664] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.767003][T16664] EXT4-fs: Ignoring removed i_version option [ 479.782475][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.797872][T16411] veth1_vlan: entered promiscuous mode [ 479.814401][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.834393][T16411] veth0_macvtap: entered promiscuous mode [ 479.842735][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.849853][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.869820][T16411] veth1_macvtap: entered promiscuous mode [ 479.892836][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.901679][T16673] loop0: detected capacity change from 0 to 512 [ 479.903447][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.919995][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.920228][T16673] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.930558][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.946951][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.957588][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.967554][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.971495][T16664] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.3117: invalid block [ 479.978246][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.990078][T16664] EXT4-fs (loop2): Remounting filesystem read-only [ 479.999027][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.016109][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.026063][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.036578][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.051572][T16664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.065349][T16673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 480.069812][T16664] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 480.093105][T16664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.111695][T16411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.119952][T16673] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3119: corrupted in-inode xattr: e_value out of bounds [ 480.137817][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.144922][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.184879][T16673] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3119: couldn't read orphan inode 15 (err -117) [ 480.231544][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.242121][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.242480][T16673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.251988][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.252007][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.252021][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.295218][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.305073][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.315582][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.325501][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.335948][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.345807][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.356474][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.422534][T16683] loop1: detected capacity change from 0 to 512 [ 480.430988][T16683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 480.444547][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.466020][T16683] EXT4-fs (loop1): 1 orphan inode deleted [ 480.471806][T16683] EXT4-fs (loop1): 1 truncate cleaned up [ 480.478528][T16683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.602256][T16411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.618269][T16419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.628711][T16419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.725470][T16411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.734342][T16411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.743087][T16411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.751867][T16411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.890907][T16419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.994664][T16703] loop0: detected capacity change from 0 to 512 [ 481.004046][T16703] EXT4-fs: Ignoring removed mblk_io_submit option [ 481.054311][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.071980][T16703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 481.215430][T16703] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3125: corrupted in-inode xattr: e_value out of bounds [ 481.293031][T16703] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3125: couldn't read orphan inode 15 (err -117) [ 481.357069][T16703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.663130][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.739860][T16419] veth0_vlan: entered promiscuous mode [ 481.779154][T16419] veth1_vlan: entered promiscuous mode [ 481.809139][T16750] loop0: detected capacity change from 0 to 512 [ 481.846379][T16750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 481.852034][T16419] veth0_macvtap: entered promiscuous mode [ 481.888601][T16419] veth1_macvtap: entered promiscuous mode [ 481.896697][T16750] EXT4-fs (loop0): 1 orphan inode deleted [ 481.902603][T16750] EXT4-fs (loop0): 1 truncate cleaned up [ 481.921173][T16750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.938467][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.949049][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.958949][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.969425][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.979274][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.989741][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.999592][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.010160][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.020274][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.030858][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.040706][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.051164][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.061035][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.071558][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.127332][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.140705][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.151198][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.161118][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.171572][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.181459][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.191915][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.201764][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.212247][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.222092][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.232588][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.242433][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.252891][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.262778][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.273258][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.316961][T16764] loop1: detected capacity change from 0 to 512 [ 482.341418][T16764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.398191][T16764] EXT4-fs (loop1): 1 orphan inode deleted [ 482.404489][T16764] EXT4-fs (loop1): 1 truncate cleaned up [ 482.410541][T16764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.499550][T16419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.538812][T16419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.547698][T16419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.556496][T16419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.565297][T16419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.652331][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.796219][T16787] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.021597][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.226199][T16816] loop1: detected capacity change from 0 to 512 [ 483.241788][T16816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 483.264804][T16816] EXT4-fs (loop1): 1 orphan inode deleted [ 483.270726][T16816] EXT4-fs (loop1): 1 truncate cleaned up [ 483.277161][T16816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.071036][T16822] loop3: detected capacity change from 0 to 512 [ 484.123124][T16822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.144731][T16822] EXT4-fs (loop3): 1 orphan inode deleted [ 484.150498][T16822] EXT4-fs (loop3): 1 truncate cleaned up [ 484.156801][T16822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.233998][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.309874][T16411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.434110][T16836] loop3: detected capacity change from 0 to 512 [ 484.450292][T16837] loop1: detected capacity change from 0 to 512 [ 484.467345][T16837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 484.480042][T16837] EXT4-fs (loop1): 1 orphan inode deleted [ 484.485939][T16837] EXT4-fs (loop1): 1 truncate cleaned up [ 484.492746][T16837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.674652][T16836] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.788526][T16836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.835127][T16836] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3137: corrupted in-inode xattr: e_value out of bounds [ 484.863654][T16836] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3137: couldn't read orphan inode 15 (err -117) [ 484.889389][T16836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.994415][T16411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.137971][T16856] loop3: detected capacity change from 0 to 512 [ 485.164705][T16856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 485.203477][T16856] System zones: 1-12 [ 485.216664][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.240525][T16856] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3138: invalid indirect mapped block 8 (level 2) [ 485.315633][T16856] EXT4-fs (loop3): Remounting filesystem read-only [ 485.343568][T16856] EXT4-fs (loop3): 1 truncate cleaned up [ 485.374135][T16856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.410701][T16856] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 485.437855][T16856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.492350][T16856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.511300][T16856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.573646][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.601875][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.702387][T16884] loop0: detected capacity change from 0 to 512 [ 485.723404][T16884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 485.829452][T16884] EXT4-fs (loop0): 1 orphan inode deleted [ 485.835289][T16884] EXT4-fs (loop0): 1 truncate cleaned up [ 485.841919][T16884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.036730][T16889] loop4: detected capacity change from 0 to 512 [ 486.045526][T16889] EXT4-fs: Ignoring removed mblk_io_submit option [ 486.061456][T16889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 486.074583][T16889] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3144: corrupted in-inode xattr: e_value out of bounds [ 486.090088][T16889] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3144: couldn't read orphan inode 15 (err -117) [ 486.117808][T16889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.189974][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.216270][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.251565][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.374319][T16892] xt_policy: neither incoming nor outgoing policy selected [ 486.499236][T16904] loop4: detected capacity change from 0 to 512 [ 486.506077][T16904] EXT4-fs: Ignoring removed mblk_io_submit option [ 486.579088][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.603809][T16904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 486.611824][T16904] System zones: 1-12 [ 486.618459][T16904] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3147: casefold flag without casefold feature [ 486.632083][T16904] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3147: couldn't read orphan inode 15 (err -117) [ 486.892538][T16912] loop0: detected capacity change from 0 to 4096 [ 487.047432][T16920] loop1: detected capacity change from 0 to 512 [ 487.600692][T16920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 487.623074][T16920] EXT4-fs (loop1): 1 orphan inode deleted [ 487.628838][T16920] EXT4-fs (loop1): 1 truncate cleaned up [ 487.798068][T16924] loop4: detected capacity change from 0 to 512 [ 487.825134][T16924] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.844142][T16924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.887734][T16924] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3155: corrupted in-inode xattr: e_value out of bounds [ 487.903004][T16924] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3155: couldn't read orphan inode 15 (err -117) [ 488.485984][T16936] loop2: detected capacity change from 0 to 512 [ 488.497182][T16939] loop0: detected capacity change from 0 to 512 [ 488.505431][T16936] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 488.515536][T16939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.607522][T16939] EXT4-fs (loop0): 1 orphan inode deleted [ 488.613348][T16939] EXT4-fs (loop0): 1 truncate cleaned up [ 488.630023][T16936] EXT4-fs (loop2): 1 orphan inode deleted [ 488.635822][T16936] EXT4-fs (loop2): 1 truncate cleaned up [ 488.980740][ T29] audit: type=1400 audit(1726120084.096:676): avc: denied { read } for pid=16945 comm="syz.1.3161" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.005063][ T29] audit: type=1400 audit(1726120084.096:677): avc: denied { open } for pid=16945 comm="syz.1.3161" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.029742][ T29] audit: type=1400 audit(1726120084.096:678): avc: denied { ioctl } for pid=16945 comm="syz.1.3161" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.395275][T16954] xt_policy: neither incoming nor outgoing policy selected [ 489.712255][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 489.873560][T16971] loop2: detected capacity change from 0 to 512 [ 489.969566][T16971] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.282702][T16971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 490.321713][T16971] System zones: 1-12 [ 490.338774][T16971] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3167: casefold flag without casefold feature [ 490.389073][T16971] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3167: couldn't read orphan inode 15 (err -117) [ 490.696259][T16985] loop4: detected capacity change from 0 to 2048 [ 490.733682][T16985] loop4: p1 < > p4 [ 490.738383][T16985] loop4: p4 size 8388608 extends beyond EOD, truncated [ 490.756539][ T2962] loop4: p1 < > p4 [ 490.769028][ T2962] loop4: p4 size 8388608 extends beyond EOD, truncated [ 490.777842][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.797834][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.827061][ T29] audit: type=1326 audit(1726120085.996:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.3175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd637def9 code=0x0 [ 491.386343][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 492.322129][T17013] loop1: detected capacity change from 0 to 512 [ 492.338765][T17013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 492.519046][T17013] EXT4-fs (loop1): 1 orphan inode deleted [ 492.524904][T17013] EXT4-fs (loop1): 1 truncate cleaned up [ 492.576852][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.645921][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.323176][T17026] loop1: detected capacity change from 0 to 512 [ 493.330222][T17026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 493.427941][T17026] EXT4-fs (loop1): 1 orphan inode deleted [ 493.433952][T17026] EXT4-fs (loop1): 1 truncate cleaned up [ 493.560622][T17030] loop0: detected capacity change from 0 to 512 [ 493.636278][T17030] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.691497][T17030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 493.709700][T17030] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3187: corrupted in-inode xattr: e_value out of bounds [ 493.738393][T17030] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3187: couldn't read orphan inode 15 (err -117) [ 493.980542][ T29] audit: type=1326 audit(1726120089.146:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.004268][ T29] audit: type=1326 audit(1726120089.146:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.262921][ T29] audit: type=1326 audit(1726120089.236:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.286468][ T29] audit: type=1326 audit(1726120089.236:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.310043][ T29] audit: type=1326 audit(1726120089.236:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.333589][ T29] audit: type=1326 audit(1726120089.236:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.357067][ T29] audit: type=1326 audit(1726120089.236:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.380568][ T29] audit: type=1326 audit(1726120089.236:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.404010][ T29] audit: type=1326 audit(1726120089.236:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.427467][ T29] audit: type=1326 audit(1726120089.236:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.450975][ T29] audit: type=1326 audit(1726120089.246:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.0.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 494.476993][T17042] loop1: detected capacity change from 0 to 128 [ 494.546788][T17042] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 494.810381][T17056] loop4: detected capacity change from 0 to 512 [ 494.822020][T17056] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.828491][T17056] EXT4-fs: Ignoring removed i_version option [ 494.848882][ T3572] kernel read not supported for file /newroot/13/file0 (pid: 3572 comm: kworker/0:12) [ 494.852615][T17056] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.3197: invalid block [ 494.869671][T17056] EXT4-fs (loop4): Remounting filesystem read-only [ 494.876666][T17056] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 495.976495][ T3495] kernel read not supported for file /newroot/46/file0 (pid: 3495 comm: kworker/0:5) [ 496.822596][T17085] loop3: detected capacity change from 0 to 128 [ 496.854087][T17085] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 496.869857][T17087] loop1: detected capacity change from 0 to 1024 [ 496.902493][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.987738][T17087] EXT4-fs mount: 22 callbacks suppressed [ 496.987808][T17087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.026794][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.623097][T17103] loop0: detected capacity change from 0 to 512 [ 497.630013][T17103] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.760352][ T3382] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 497.916308][T17103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 497.924506][T17103] System zones: 1-12 [ 497.933328][T17103] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3208: casefold flag without casefold feature [ 497.946736][T17103] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3208: couldn't read orphan inode 15 (err -117) [ 497.959316][T17103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.162489][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.186146][T14603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.219160][T17114] loop4: detected capacity change from 0 to 512 [ 498.226413][T17114] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.320294][T17114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 498.328565][T17114] System zones: 1-12 [ 498.335101][T17114] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3211: casefold flag without casefold feature [ 498.348655][T17114] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3211: couldn't read orphan inode 15 (err -117) [ 498.364065][T17114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.679306][T17121] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3212'. [ 499.049012][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.175347][T17129] loop2: detected capacity change from 0 to 512 [ 499.214355][T17129] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.278559][T17129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 499.327010][T17129] System zones: 1-12 [ 499.354292][T17129] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3209: casefold flag without casefold feature [ 499.502352][T17141] loop4: detected capacity change from 0 to 512 [ 499.509621][T17141] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.683583][T17141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 499.691628][T17141] System zones: 1-12 [ 499.699130][T17141] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3215: casefold flag without casefold feature [ 499.717192][T17141] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3215: couldn't read orphan inode 15 (err -117) [ 499.732402][T17141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.869752][T17147] loop1: detected capacity change from 0 to 512 [ 499.878655][T17129] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3209: couldn't read orphan inode 15 (err -117) [ 499.898047][T17147] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.904683][T17147] EXT4-fs: Ignoring removed i_version option [ 499.962086][T17147] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.3217: invalid block [ 499.973849][T17129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.110793][T17147] EXT4-fs (loop1): Remounting filesystem read-only [ 500.145449][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.169427][T17147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.359536][T17147] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 500.471115][T17147] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.722371][T17225] loop4: detected capacity change from 0 to 128 [ 500.842824][T17225] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 501.180020][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 502.113303][T17201] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 502.226453][T17258] syz.0.3226[17258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.226589][T17258] syz.0.3226[17258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.599308][T17263] loop3: detected capacity change from 0 to 512 [ 502.640871][T17263] EXT4-fs: Ignoring removed mblk_io_submit option [ 502.658317][T17263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 502.691695][ T3580] kernel read not supported for file /newroot/26/file0 (pid: 3580 comm: kworker/1:11) [ 502.720766][T17263] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3229: corrupted in-inode xattr: e_value out of bounds [ 502.753029][T17263] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3229: couldn't read orphan inode 15 (err -117) [ 502.817573][T17263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.881781][T16411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.925288][T17273] loop0: detected capacity change from 0 to 256 [ 502.943487][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.602118][T17287] loop4: detected capacity change from 0 to 4096 [ 503.634571][T17287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.704849][T17291] loop2: detected capacity change from 0 to 512 [ 503.721108][T17291] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.745592][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.862546][T17291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 503.870576][T17291] System zones: 1-12 [ 503.917214][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 503.917228][ T29] audit: type=1326 audit(1726120099.086:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 503.985040][T17291] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3236: casefold flag without casefold feature [ 504.020786][ T29] audit: type=1326 audit(1726120099.126:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.044878][ T29] audit: type=1326 audit(1726120099.126:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.068862][ T29] audit: type=1326 audit(1726120099.126:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.084668][T17291] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3236: couldn't read orphan inode 15 (err -117) [ 504.092434][ T29] audit: type=1326 audit(1726120099.126:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.092477][ T29] audit: type=1326 audit(1726120099.126:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.092513][ T29] audit: type=1326 audit(1726120099.126:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.174833][ T29] audit: type=1326 audit(1726120099.126:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.198347][ T29] audit: type=1326 audit(1726120099.126:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.221912][ T29] audit: type=1326 audit(1726120099.126:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17297 comm="syz.4.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f285ce0def9 code=0x7ffc0000 [ 504.301694][T17291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.390839][T17311] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3242'. [ 504.422293][T17302] loop4: detected capacity change from 0 to 512 [ 504.439957][T17302] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.468648][T17302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 504.486086][ T3570] kernel read not supported for file /newroot/150/file0 (pid: 3570 comm: kworker/0:11) [ 504.518888][T17302] System zones: 1-12 [ 504.565856][T17302] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3241: casefold flag without casefold feature [ 504.630704][T17302] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3241: couldn't read orphan inode 15 (err -117) [ 504.651011][T17302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.827211][T17316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.850366][T17316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.274586][T17320] loop1: detected capacity change from 0 to 512 [ 505.291327][T17320] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.297799][T17320] EXT4-fs: Ignoring removed i_version option [ 505.342148][T17320] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.3247: invalid block [ 505.354441][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.380218][T17320] EXT4-fs (loop1): Remounting filesystem read-only [ 505.386834][T16056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.405509][T17320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.434375][T17325] loop4: detected capacity change from 0 to 512 [ 505.444105][T17320] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 505.502974][T17320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.512201][T17325] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.525273][T17325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 505.563977][T17325] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3249: corrupted in-inode xattr: e_value out of bounds [ 505.679394][T17330] loop3: detected capacity change from 0 to 4096 [ 505.699183][T17325] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3249: couldn't read orphan inode 15 (err -117) [ 505.726441][T17325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.755919][T17330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.790960][T16419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.828192][T16411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.454581][T17378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.582760][T17378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.636625][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 508.056880][T17459] loop4: detected capacity change from 0 to 128 [ 508.068202][T17459] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 508.288064][T17461] loop1: detected capacity change from 0 to 4096 [ 508.310701][T17461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.388065][T17473] ieee802154 phy0 wpan0: encryption failed: -90 [ 508.435205][T17473] loop0: detected capacity change from 0 to 8192 [ 508.503596][T17473] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 508.604396][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.991724][T17439] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 508.995509][T17481] loop3: detected capacity change from 0 to 128 [ 509.031788][T17481] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 509.082464][T17487] loop4: detected capacity change from 0 to 2048 [ 509.132543][T17487] loop4: p1 < > p4 [ 509.137096][T17487] loop4: p4 size 8388608 extends beyond EOD, truncated [ 509.147858][ T2962] loop4: p1 < > p4 [ 509.161276][ T2962] loop4: p4 size 8388608 extends beyond EOD, truncated [ 509.208210][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 509.208226][ T29] audit: type=1326 audit(1726120104.376:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.238394][ T29] audit: type=1326 audit(1726120104.376:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.266100][ T29] audit: type=1326 audit(1726120104.426:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.289640][ T29] audit: type=1326 audit(1726120104.426:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.313061][ T29] audit: type=1326 audit(1726120104.426:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.336569][ T29] audit: type=1326 audit(1726120104.426:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.360151][ T29] audit: type=1326 audit(1726120104.426:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.383612][ T29] audit: type=1326 audit(1726120104.426:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.407050][ T29] audit: type=1326 audit(1726120104.426:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.430703][ T29] audit: type=1326 audit(1726120104.426:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0606f4def9 code=0x7ffc0000 [ 509.463270][T17498] loop0: detected capacity change from 0 to 512 [ 509.476133][T17497] loop2: detected capacity change from 0 to 512 [ 509.484119][T17498] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.490579][T17498] EXT4-fs: Ignoring removed i_version option [ 509.509471][T17498] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.3274: invalid block [ 509.522328][T17222] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 509.525707][T17498] EXT4-fs (loop0): Remounting filesystem read-only [ 509.539395][T17497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 509.542885][T17498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.563083][T17497] System zones: 1-12 [ 509.574197][T17503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.587850][T17498] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 509.594670][T17503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.605682][T17498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.618803][T17497] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.3273: invalid block [ 509.663207][T17497] EXT4-fs (loop2): Remounting filesystem read-only [ 509.687262][T17497] EXT4-fs (loop2): 1 truncate cleaned up [ 509.707024][T17497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.741024][T17497] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 509.756309][T17497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.784462][T17494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.798427][T17494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.271375][T17539] loop3: detected capacity change from 0 to 512 [ 511.290357][T17539] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.395383][T17545] loop4: detected capacity change from 0 to 2048 [ 511.452118][T17545] loop4: p1 < > p4 [ 511.481297][T17545] loop4: p4 size 8388608 extends beyond EOD, truncated [ 511.675503][T17539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 511.806202][T17539] System zones: 1-12 [ 511.827114][T17539] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3282: casefold flag without casefold feature [ 511.843810][T17539] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3282: couldn't read orphan inode 15 (err -117) [ 511.878443][T17539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.952456][T17558] loop2: detected capacity change from 0 to 128 [ 511.974989][T17558] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 512.097941][T17562] ieee802154 phy0 wpan0: encryption failed: -90 [ 512.295510][T17562] loop0: detected capacity change from 0 to 8192 [ 512.415721][T17562] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.581319][ T3254] ================================================================== [ 512.589470][ T3254] BUG: KCSAN: data-race in _copy_to_iter / fat16_ent_put [ 512.596545][ T3254] [ 512.598903][ T3254] write to 0xffff88811d0d0efa of 2 bytes by task 17562 on cpu 1: [ 512.606647][ T3254] fat16_ent_put+0x28/0x60 [ 512.611112][ T3254] fat_alloc_clusters+0x4c9/0xa80 [ 512.616179][ T3254] fat_get_block+0x25c/0x5e0 [ 512.620797][ T3254] __block_write_begin_int+0x417/0xfa0 [ 512.626285][ T3254] block_write_begin+0x7b/0x170 [ 512.631161][ T3254] cont_write_begin+0x486/0x6b0 [ 512.636222][ T3254] fat_write_begin+0x61/0xf0 [ 512.640839][ T3254] cont_write_begin+0x186/0x6b0 [ 512.645734][ T3254] fat_write_begin+0x61/0xf0 [ 512.650354][ T3254] generic_perform_write+0x1b4/0x580 [ 512.655668][ T3254] __generic_file_write_iter+0xa1/0x120 [ 512.661237][ T3254] generic_file_write_iter+0x7d/0x1d0 [ 512.666633][ T3254] vfs_write+0x78f/0x900 [ 512.670900][ T3254] ksys_write+0xeb/0x1b0 [ 512.675174][ T3254] __x64_sys_write+0x42/0x50 [ 512.679796][ T3254] x64_sys_call+0x27dd/0x2d60 [ 512.684499][ T3254] do_syscall_64+0xc9/0x1c0 [ 512.689017][ T3254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.694941][ T3254] [ 512.697280][ T3254] read to 0xffff88811d0d0c00 of 1024 bytes by task 3254 on cpu 0: [ 512.705187][ T3254] _copy_to_iter+0x126/0xb00 [ 512.709808][ T3254] copy_page_to_iter+0x171/0x2b0 [ 512.714773][ T3254] filemap_read+0x42c/0x690 [ 512.719310][ T3254] blkdev_read_iter+0x217/0x2c0 [ 512.724190][ T3254] vfs_read+0x5e9/0x6e0 [ 512.728372][ T3254] ksys_read+0xeb/0x1b0 [ 512.732551][ T3254] __x64_sys_read+0x42/0x50 [ 512.737089][ T3254] x64_sys_call+0x27d3/0x2d60 [ 512.741810][ T3254] do_syscall_64+0xc9/0x1c0 [ 512.746344][ T3254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.752280][ T3254] [ 512.754618][ T3254] Reported by Kernel Concurrency Sanitizer on: [ 512.760793][ T3254] CPU: 0 UID: 0 PID: 3254 Comm: udevd Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 512.771059][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 512.781135][ T3254] ================================================================== [ 512.942623][T17567] ieee802154 phy0 wpan0: encryption failed: -90 [ 513.045148][T17567] loop4: detected capacity change from 0 to 8192 [ 513.209673][T17567] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 513.622647][T17441] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 513.782643][T16411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.