last executing test programs: 3m7.682769003s ago: executing program 2 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f00000002c0)={[0xbd4]}, 0x0, 0x8) 3m7.561893156s ago: executing program 2 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x2, 0x0) 3m7.463078446s ago: executing program 2 (id=614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r1], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 3m7.404846081s ago: executing program 2 (id=607): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x102b23) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3m7.312534321s ago: executing program 2 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m7.179279084s ago: executing program 0 (id=612): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, 0x0, 0x8) 3m7.176416964s ago: executing program 2 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 3m7.095875233s ago: executing program 0 (id=618): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m7.02175229s ago: executing program 0 (id=622): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3m6.986499893s ago: executing program 0 (id=624): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m6.963502155s ago: executing program 0 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m6.930724069s ago: executing program 0 (id=628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m51.871726247s ago: executing program 32 (id=628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m51.830784811s ago: executing program 33 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 33.287407667s ago: executing program 1 (id=6397): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[], 0xfffffd97) 33.268000598s ago: executing program 1 (id=6398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 33.24782412s ago: executing program 1 (id=6399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0xfff}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x55b391e6, 0x3}, 0x1c) close(r1) 33.177422187s ago: executing program 1 (id=6401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}}, 0x0) 33.176525567s ago: executing program 1 (id=6403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='afs_cb_call\x00', r0, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 33.175973707s ago: executing program 1 (id=6405): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[], [{@context={'context', 0x3d, 'system_u'}}]}) 18.155333102s ago: executing program 34 (id=6405): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[], [{@context={'context', 0x3d, 'system_u'}}]}) 16.679692859s ago: executing program 6 (id=6997): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) 16.612350006s ago: executing program 6 (id=7002): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file2\x00') 16.505360776s ago: executing program 6 (id=7015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 16.418206355s ago: executing program 6 (id=7020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 16.297244528s ago: executing program 6 (id=7024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='afs_cb_call\x00', r0, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 16.177734169s ago: executing program 6 (id=7029): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) 13.817835835s ago: executing program 4 (id=7033): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x38860bc, 0x0, 0x3, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 13.58058163s ago: executing program 4 (id=7037): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x78}, 0x20) 12.962226811s ago: executing program 4 (id=7057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xf4}], 0x1, 0x62, 0x0) 1.035611446s ago: executing program 35 (id=7029): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) 1.029020806s ago: executing program 4 (id=7045): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r1, &(0x7f0000000640)="cf", 0x1, 0x7ff) 1.026407227s ago: executing program 3 (id=7049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 936.968576ms ago: executing program 4 (id=7063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 776.541442ms ago: executing program 4 (id=7052): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x4, 0x39b5}, 0x88025, 0xccf5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) exit(0xffff) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 761.694903ms ago: executing program 5 (id=7065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4d, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"ef20f4708c6c82d740d1ba948ff267c1706196ec262e45cd31ea731c4927d9c36eca572b2f1ed03d5baa15ad78eb1c8bf608daeb81d945b213"}}}}}}}, 0x0) 593.62342ms ago: executing program 3 (id=7058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 591.55593ms ago: executing program 5 (id=7069): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 544.851015ms ago: executing program 3 (id=7060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 533.143166ms ago: executing program 5 (id=7061): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 403.053569ms ago: executing program 5 (id=7066): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001740)={[{}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@i_version}, {@nojournal_checksum}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 383.345491ms ago: executing program 3 (id=7067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) 296.62145ms ago: executing program 7 (id=7070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) 224.368607ms ago: executing program 3 (id=7071): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x31, 0x7fff, 0x6}, 0x2c) 215.953478ms ago: executing program 7 (id=7072): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}]}, &(0x7f0000000240)=0x10) 168.908253ms ago: executing program 7 (id=7073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 159.400934ms ago: executing program 5 (id=7074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 156.648644ms ago: executing program 3 (id=7075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0xa, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac54525c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b858f89737f33786445cbaf271959da24"}}}}, 0xfce) 120.218798ms ago: executing program 7 (id=7076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x85}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 31.454487ms ago: executing program 7 (id=7077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 2.75342ms ago: executing program 5 (id=7078): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x5dd4, &(0x7f0000000080)={0x0, 0xccda, 0x40, 0x0, 0x83}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000040), 0x0) 0s ago: executing program 7 (id=7079): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): call=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 165.641252][ T29] audit: type=1326 audit(1763054213.269:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17852 comm="syz.3.5466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 165.669950][T17859] loop1: detected capacity change from 0 to 512 [ 165.676764][T17859] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.683553][T17859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.698400][T17859] EXT4-fs (loop1): 1 truncate cleaned up [ 165.704372][T17859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.744513][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.793304][T17886] loop3: detected capacity change from 0 to 512 [ 165.809235][T17886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 165.811065][T17894] loop4: detected capacity change from 0 to 128 [ 165.823694][T17886] System zones: 1-12 [ 165.828213][T17886] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.5475: corrupted in-inode xattr: e_value size too large [ 165.842799][T17886] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5475: couldn't read orphan inode 15 (err -117) [ 165.881916][T17886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.945161][T17899] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.962616][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.929920][T17934] loop1: detected capacity change from 0 to 32768 [ 166.954856][T17967] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 166.965632][T17968] loop5: detected capacity change from 0 to 2048 [ 167.000080][T17968] Alternate GPT is invalid, using primary GPT. [ 167.006505][T17968] loop5: p2 p3 p7 [ 167.047250][T17989] atomic_op ffff888110e53d28 conn xmit_atomic 0000000000000000 [ 167.079329][T17993] netlink: 'syz.6.5519': attribute type 1 has an invalid length. [ 167.347467][T18046] loop1: detected capacity change from 0 to 1024 [ 167.354507][T18046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.362642][T18046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 167.370880][T18046] System zones: 0-1, 3-36 [ 167.376294][T18046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.404212][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.413756][T18014] loop5: detected capacity change from 0 to 32768 [ 167.441779][T18060] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.506592][T18062] random: crng reseeded on system resumption [ 167.560592][T18071] loop6: detected capacity change from 0 to 1024 [ 167.567423][T18071] EXT4-fs: inline encryption not supported [ 167.573319][T18071] EXT4-fs: Ignoring removed i_version option [ 167.589580][T18071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.615125][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.657212][T18089] loop6: detected capacity change from 0 to 1024 [ 167.688620][T18095] __nla_validate_parse: 6 callbacks suppressed [ 167.688637][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5553'. [ 167.738362][T18089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.772099][T18101] bridge0: entered promiscuous mode [ 167.783134][T18101] macsec1: entered promiscuous mode [ 167.798605][T18105] atomic_op ffff888110e53528 conn xmit_atomic 0000000000000000 [ 167.818805][T18101] bridge0: port 4(macsec1) entered blocking state [ 167.825420][T18101] bridge0: port 4(macsec1) entered disabled state [ 167.833061][T18101] macsec1: entered allmulticast mode [ 167.838407][T18101] bridge0: entered allmulticast mode [ 167.848295][T18101] macsec1: left allmulticast mode [ 167.853417][T18101] bridge0: left allmulticast mode [ 167.858568][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.868133][T18101] bridge0: left promiscuous mode [ 167.912589][ T3384] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 167.920410][ T3384] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 167.930010][ T3384] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 167.940982][ T3384] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 168.117663][T18157] rdma_op ffff888119311980 conn xmit_rdma 0000000000000000 [ 168.171492][T18170] loop6: detected capacity change from 0 to 1024 [ 168.178554][T18170] EXT4-fs: inline encryption not supported [ 168.225095][T18170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.262566][T18170] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.5578: Allocating blocks 385-513 which overlap fs metadata [ 168.278687][T18167] EXT4-fs (loop6): pa ffff888106e13700: logic 16, phys. 129, len 24 [ 168.286811][T18167] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 168.296868][T18185] sd 0:0:1:0: device reset [ 168.324483][T18188] loop3: detected capacity change from 0 to 512 [ 168.353401][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.420301][T18202] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.430265][T18202] vhci_hcd: invalid port number 96 [ 168.435457][T18202] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 168.443090][T18188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.451033][T18188] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5583: bad orphan inode 13 [ 168.469550][T18188] ext4_test_bit(bit=12, block=18) = 1 [ 168.474974][T18188] is_bad_inode(inode)=0 [ 168.479156][T18188] NEXT_ORPHAN(inode)=2130706432 [ 168.484021][T18188] max_ino=32 [ 168.487215][T18188] i_nlink=1 [ 168.492288][T18188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.533911][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.551305][T18211] loop4: detected capacity change from 0 to 512 [ 168.558446][T18210] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5595'. [ 168.558954][T18211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.590014][T18211] EXT4-fs (loop4): 1 truncate cleaned up [ 168.603815][T18211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.644682][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.662014][T18226] loop6: detected capacity change from 0 to 164 [ 168.662379][T18232] loop3: detected capacity change from 0 to 128 [ 168.676399][T18226] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 168.697523][T18226] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 168.707013][T18226] Symlink component flag not implemented [ 168.712807][T18226] Symlink component flag not implemented [ 168.729331][T18244] loop5: detected capacity change from 0 to 128 [ 168.732192][T18226] Symlink component flag not implemented (7) [ 168.741575][T18226] Symlink component flag not implemented (116) [ 168.745456][T18244] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.768568][T18244] ext4 filesystem being mounted at /958/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.949078][ T5690] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.179822][T18300] loop1: detected capacity change from 0 to 256 [ 169.357475][T18329] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.478868][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5640'. [ 169.573189][T18358] loop9: detected capacity change from 0 to 7 [ 169.580095][T18358] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.588610][T18358] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.596450][T18358] loop9: unable to read partition table [ 169.602322][T18358] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.602322][T18358] ) failed (rc=-5) [ 169.697664][T18384] loop1: detected capacity change from 0 to 512 [ 169.704653][T18384] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 169.717864][T18384] EXT4-fs (loop1): invalid journal inode [ 169.724779][T18384] EXT4-fs (loop1): can't get journal size [ 169.756043][T18384] EXT4-fs (loop1): 1 truncate cleaned up [ 169.768450][T18384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.769907][T18396] loop5: detected capacity change from 0 to 512 [ 169.792683][T18399] loop6: detected capacity change from 0 to 512 [ 169.803465][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.818273][T18399] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.833896][T18399] EXT4-fs (loop6): mount failed [ 169.835673][T18396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.851539][T18396] ext4 filesystem being mounted at /968/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.887546][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.899858][T18414] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5665'. [ 170.014948][T18440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.029101][T18440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.040479][T18444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5679'. [ 170.130850][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.291989][T18494] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.670518][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 170.670532][ T29] audit: type=1400 audit(1763054219.465:6266): avc: denied { mounton } for pid=18508 comm="syz.1.5715" path="/proc/2540/cgroup" dev="proc" ino=48609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 170.732326][ T29] audit: type=1400 audit(1763054219.505:6267): avc: denied { remount } for pid=18508 comm="syz.1.5715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 170.791006][ T29] audit: type=1326 audit(1763054219.585:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.814583][ T29] audit: type=1326 audit(1763054219.585:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.818808][ T29] audit: type=1326 audit(1763054219.605:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.862380][ T29] audit: type=1326 audit(1763054219.605:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.885980][ T29] audit: type=1326 audit(1763054219.605:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.959316][T18524] loop3: detected capacity change from 0 to 1024 [ 170.959928][T18524] EXT4-fs: Ignoring removed bh option [ 170.964157][ T29] audit: type=1326 audit(1763054219.675:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.995926][ T29] audit: type=1326 audit(1763054219.705:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 170.995958][ T29] audit: type=1326 audit(1763054219.705:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.3.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 171.025190][T18524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.069168][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133567][T18536] loop1: detected capacity change from 0 to 128 [ 171.165554][T18540] loop3: detected capacity change from 0 to 512 [ 171.176837][T18540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 223 vs 220 free clusters [ 171.191636][T18540] EXT4-fs (loop3): Remounting filesystem read-only [ 171.191674][T18540] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 171.191707][T18540] EXT4-fs (loop3): 1 orphan inode deleted [ 171.192204][T18540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.209831][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.281589][T18554] program syz.4.5719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.417614][T18584] loop3: detected capacity change from 0 to 512 [ 171.426205][T18584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.444579][T18584] EXT4-fs (loop3): 1 truncate cleaned up [ 171.457736][T18584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.497140][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.665383][T18630] loop1: detected capacity change from 0 to 512 [ 171.710096][T18630] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5744: Failed to acquire dquot type 1 [ 171.758719][T18630] EXT4-fs (loop1): 1 truncate cleaned up [ 171.764999][T18630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.802541][T18630] ext4 filesystem being mounted at /1222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.922098][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.101723][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'. [ 172.138780][T18665] IPVS: Error connecting to the multicast addr [ 172.188277][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.194402][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 172.213869][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 172.308820][T18686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5766'. [ 172.512928][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5785'. [ 172.633545][T18753] loop1: detected capacity change from 0 to 2048 [ 172.659720][T18753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.689062][T18763] loop3: detected capacity change from 0 to 128 [ 172.718279][T18753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 172.757054][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.784102][T18776] loop6: detected capacity change from 0 to 2048 [ 172.790907][T18780] geneve3: entered promiscuous mode [ 172.796190][T18780] geneve3: entered allmulticast mode [ 172.811969][T18776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 172.853547][T18797] loop3: detected capacity change from 0 to 2048 [ 172.868769][T18797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.904651][T18776] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.904737][T18797] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 172.955779][T18811] random: crng reseeded on system resumption [ 172.973147][T18776] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 750 with error 28 [ 172.985556][T18776] EXT4-fs (loop6): This should not happen!! Data will be lost [ 172.985556][T18776] [ 172.995299][T18776] EXT4-fs (loop6): Total free blocks count 0 [ 173.001351][T18776] EXT4-fs (loop6): Free/Dirty block details [ 173.007254][T18776] EXT4-fs (loop6): free_blocks=2415919104 [ 173.013020][T18776] EXT4-fs (loop6): dirty_blocks=752 [ 173.018221][T18776] EXT4-fs (loop6): Block reservation details [ 173.024173][T18776] EXT4-fs (loop6): i_reserved_data_blocks=47 [ 173.041740][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.090110][T18829] loop4: detected capacity change from 0 to 128 [ 173.110543][T18829] EXT4-fs: Ignoring removed nobh option [ 173.119660][T18829] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.139518][T18835] loop1: detected capacity change from 0 to 128 [ 173.151821][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 173.153590][T18829] ext4 filesystem being mounted at /1083/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.218587][ T4694] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.248708][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5828'. [ 173.259339][T18858] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5828'. [ 173.268445][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5828'. [ 173.392569][T18876] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5850'. [ 173.441234][T18880] loop5: detected capacity change from 0 to 2048 [ 173.460307][T18880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 173.488232][T18882] loop6: detected capacity change from 0 to 8192 [ 173.495570][T18882] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.581549][T18906] loop6: detected capacity change from 0 to 512 [ 173.591357][T18880] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.607094][T18880] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 173.619694][T18880] EXT4-fs (loop5): This should not happen!! Data will be lost [ 173.619694][T18880] [ 173.629354][T18880] EXT4-fs (loop5): Total free blocks count 0 [ 173.635350][T18880] EXT4-fs (loop5): Free/Dirty block details [ 173.641398][T18880] EXT4-fs (loop5): free_blocks=2415919104 [ 173.642960][T18906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 173.647117][T18880] EXT4-fs (loop5): dirty_blocks=2080 [ 173.647133][T18880] EXT4-fs (loop5): Block reservation details [ 173.647145][T18880] EXT4-fs (loop5): i_reserved_data_blocks=130 [ 173.655581][T18906] System zones: 0-2, 18-18, 34-34 [ 173.679456][T18906] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 173.716537][T18906] EXT4-fs (loop6): Remounting filesystem read-only [ 173.723553][T18906] EXT4-fs (loop6): 1 truncate cleaned up [ 173.729684][T18906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.742348][ T5980] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 173.752904][ T5980] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 173.779968][T18906] ext4 filesystem being mounted at /1039/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.796570][ T5980] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 173.865399][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 18 with error 28 [ 173.907037][T18951] loop4: detected capacity change from 0 to 1024 [ 173.915595][T18953] loop1: detected capacity change from 0 to 512 [ 173.930194][T18953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 173.940105][T18953] System zones: 0-2, 18-18, 34-34 [ 173.947865][T18953] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 173.963614][T18953] EXT4-fs (loop1): Remounting filesystem read-only [ 173.970456][T18972] loop5: detected capacity change from 0 to 2048 [ 173.970836][T18953] EXT4-fs (loop1): 1 truncate cleaned up [ 173.989218][T18953] ext4 filesystem being mounted at /1246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.000077][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.010637][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.023774][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.097976][T18972] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.113159][T18972] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1616 with error 28 [ 174.125624][T18972] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.125624][T18972] [ 174.135271][T18972] EXT4-fs (loop5): Total free blocks count 0 [ 174.141281][T18972] EXT4-fs (loop5): Free/Dirty block details [ 174.147192][T18972] EXT4-fs (loop5): free_blocks=2415919104 [ 174.152953][T18972] EXT4-fs (loop5): dirty_blocks=1616 [ 174.158323][T18972] EXT4-fs (loop5): Block reservation details [ 174.164300][T18972] EXT4-fs (loop5): i_reserved_data_blocks=101 [ 174.265591][T19015] hub 9-0:1.0: USB hub found [ 174.276736][T19015] hub 9-0:1.0: 8 ports detected [ 174.309080][T19020] loop1: detected capacity change from 0 to 512 [ 174.341812][T19020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 174.374237][T19020] System zones: 0-2, 18-18, 34-34 [ 174.382378][T19041] loop5: detected capacity change from 0 to 512 [ 174.419044][T19020] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 174.433840][T19020] EXT4-fs (loop1): Remounting filesystem read-only [ 174.440855][T19020] EXT4-fs (loop1): 1 truncate cleaned up [ 174.447064][T19020] ext4 filesystem being mounted at /1247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.447595][T19041] ext4 filesystem being mounted at /1019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.478122][ T6040] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.488725][ T6040] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.507039][ T6040] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.653032][T19089] loop6: detected capacity change from 0 to 1024 [ 174.664379][T19076] loop1: detected capacity change from 0 to 8192 [ 174.789450][T19116] loop5: detected capacity change from 0 to 2048 [ 174.820134][T19123] loop6: detected capacity change from 0 to 512 [ 174.833032][T19123] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 174.841568][T19123] System zones: 0-2, 18-18, 34-35 [ 174.983539][T19123] ext4 filesystem being mounted at /1046/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.992619][T19116] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.008898][T19116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 175.021411][T19116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 175.021411][T19116] [ 175.031063][T19116] EXT4-fs (loop5): Total free blocks count 0 [ 175.037112][T19116] EXT4-fs (loop5): Free/Dirty block details [ 175.043042][T19116] EXT4-fs (loop5): free_blocks=2415919104 [ 175.048828][T19116] EXT4-fs (loop5): dirty_blocks=3488 [ 175.050890][T19123] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5872: corrupted xattr block 33: invalid header [ 175.054156][T19116] EXT4-fs (loop5): Block reservation details [ 175.054171][T19116] EXT4-fs (loop5): i_reserved_data_blocks=218 [ 175.120001][T19123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 175.130340][T19123] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5872: corrupted xattr block 33: invalid header [ 175.153433][T19123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 175.168278][T19123] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5872: corrupted xattr block 33: invalid header [ 175.189701][T19123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 175.210885][T19123] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5872: corrupted xattr block 33: invalid header [ 175.214219][ T5980] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1424 with error 28 [ 175.224216][T19123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 175.236719][ T5980] EXT4-fs (loop5): This should not happen!! Data will be lost [ 175.236719][ T5980] [ 175.260740][T19123] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5872: corrupted xattr block 33: invalid header [ 175.266875][T19149] bond0: (slave vlan0): Opening slave failed [ 175.274368][T19123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 175.307448][T19157] hub 9-0:1.0: USB hub found [ 175.312554][T19157] hub 9-0:1.0: 8 ports detected [ 175.365330][T19163] loop4: detected capacity change from 0 to 512 [ 175.383004][T19166] loop6: detected capacity change from 0 to 512 [ 175.390984][T19163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 175.399524][T19163] System zones: 0-2, 18-18, 34-34 [ 175.406829][T19163] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 175.435253][T19166] ext4 filesystem being mounted at /1047/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.460125][T19163] EXT4-fs (loop4): Remounting filesystem read-only [ 175.472928][T19163] EXT4-fs (loop4): 1 truncate cleaned up [ 175.479542][T19163] ext4 filesystem being mounted at /1098/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.494340][ T6040] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.504898][ T6040] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.515591][ T6040] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.539489][T19178] hub 9-0:1.0: USB hub found [ 175.544258][T19178] hub 9-0:1.0: 8 ports detected [ 175.568617][T19185] loop6: detected capacity change from 0 to 2048 [ 175.602467][T19185] loop6: p2 p3 p7 [ 175.637225][T19204] loop5: detected capacity change from 0 to 512 [ 175.639853][T19205] hub 9-0:1.0: USB hub found [ 175.648220][T19205] hub 9-0:1.0: 8 ports detected [ 175.659458][T19204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 175.667558][T19204] System zones: 0-2, 18-18, 34-34 [ 175.673863][T19204] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 175.688154][T19204] EXT4-fs (loop5): Remounting filesystem read-only [ 175.694939][T19204] EXT4-fs (loop5): 1 truncate cleaned up [ 175.701261][T19204] ext4 filesystem being mounted at /1028/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.712066][ T5987] __quota_error: 141 callbacks suppressed [ 175.712126][ T5987] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 175.753220][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.763808][ T5987] Quota error (device loop5): write_blk: dquota write failed [ 175.771204][ T5987] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 175.781313][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.791869][ T5987] Quota error (device loop5): write_blk: dquota write failed [ 175.799366][ T5987] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 175.810100][T19221] loop4: detected capacity change from 0 to 2048 [ 175.811292][ T5987] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.826582][ T5987] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 175.835767][ T5987] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 175.848112][ T5987] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 175.922978][T19221] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.937736][T19221] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1830 with error 28 [ 175.950248][T19221] EXT4-fs (loop4): This should not happen!! Data will be lost [ 175.950248][T19221] [ 175.959902][T19221] EXT4-fs (loop4): Total free blocks count 0 [ 175.965934][T19221] EXT4-fs (loop4): Free/Dirty block details [ 175.971829][T19221] EXT4-fs (loop4): free_blocks=2415919104 [ 175.977603][T19221] EXT4-fs (loop4): dirty_blocks=1840 [ 175.982881][T19221] EXT4-fs (loop4): Block reservation details [ 175.988933][T19221] EXT4-fs (loop4): i_reserved_data_blocks=115 [ 176.024092][T19230] loop5: detected capacity change from 0 to 512 [ 176.042995][T19230] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 176.057341][T19230] System zones: 0-2, 18-18, 34-34 [ 176.070371][T19230] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 176.088440][T19250] bond0: (slave vlan2): Opening slave failed [ 176.099499][T19230] EXT4-fs (loop5): Remounting filesystem read-only [ 176.116533][T19230] EXT4-fs (loop5): 1 truncate cleaned up [ 176.122728][T19230] ext4 filesystem being mounted at /1029/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.133500][ T5987] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 176.156650][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.167198][ T5987] Quota error (device loop5): write_blk: dquota write failed [ 176.174610][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.197203][ T5987] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 176.262207][T19267] loop4: detected capacity change from 0 to 2048 [ 176.274580][T19258] loop5: detected capacity change from 0 to 8192 [ 176.401500][T19267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.416671][T19267] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 176.429139][T19267] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.429139][T19267] [ 176.438790][T19267] EXT4-fs (loop4): Total free blocks count 0 [ 176.444762][T19267] EXT4-fs (loop4): Free/Dirty block details [ 176.450666][T19267] EXT4-fs (loop4): free_blocks=2415919104 [ 176.456386][T19267] EXT4-fs (loop4): dirty_blocks=3216 [ 176.461680][T19267] EXT4-fs (loop4): Block reservation details [ 176.467654][T19267] EXT4-fs (loop4): i_reserved_data_blocks=201 [ 176.639519][ T5980] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1164 with error 28 [ 176.652254][ T5980] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.652254][ T5980] [ 177.108308][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5899'. [ 177.133773][T19284] loop1: detected capacity change from 0 to 2048 [ 177.227311][T19284] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.242254][T19284] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1526 with error 28 [ 177.254803][T19284] EXT4-fs (loop1): This should not happen!! Data will be lost [ 177.254803][T19284] [ 177.264525][T19284] EXT4-fs (loop1): Total free blocks count 0 [ 177.270524][T19284] EXT4-fs (loop1): Free/Dirty block details [ 177.276420][T19284] EXT4-fs (loop1): free_blocks=2415919104 [ 177.282150][T19284] EXT4-fs (loop1): dirty_blocks=1536 [ 177.287449][T19284] EXT4-fs (loop1): Block reservation details [ 177.293446][T19284] EXT4-fs (loop1): i_reserved_data_blocks=96 [ 177.443870][T19342] loop3: detected capacity change from 0 to 512 [ 177.452157][T19344] bond0: (slave vlan0): Opening slave failed [ 177.478110][T19342] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 177.478145][T19342] System zones: 0-2, 18-18, 34-34 [ 177.508203][T19342] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 177.522893][T19342] EXT4-fs (loop3): Remounting filesystem read-only [ 177.530218][T19342] EXT4-fs (loop3): 1 truncate cleaned up [ 177.536435][T19342] ext4 filesystem being mounted at /871/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.550050][ T6040] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.560624][ T6040] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.575151][T19372] bridge0: port 3(batadv1) entered blocking state [ 177.581811][T19372] bridge0: port 3(batadv1) entered disabled state [ 177.598069][T19372] batadv1: entered allmulticast mode [ 177.608341][ T6040] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 177.626081][T19372] batadv1: entered promiscuous mode [ 177.708976][T19393] loop4: detected capacity change from 0 to 512 [ 177.719923][T19385] bond0: (slave vlan0): Opening slave failed [ 177.726485][T19393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 177.743115][T19393] System zones: 0-2, 18-18, 34-34 [ 177.750782][T19393] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 177.770260][T19393] EXT4-fs (loop4): Remounting filesystem read-only [ 177.777155][T19393] EXT4-fs (loop4): 1 truncate cleaned up [ 177.783410][T19393] ext4 filesystem being mounted at /1106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.794308][ T6040] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.804966][ T6040] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.825147][ T6040] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.078011][ T5987] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 178.087247][ T5987] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 178.687836][T19484] loop6: detected capacity change from 0 to 512 [ 178.694915][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'. [ 178.705933][T19486] bond0: (slave vlan0): Opening slave failed [ 178.714329][T19485] loop3: detected capacity change from 0 to 764 [ 178.722900][T19485] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.734359][T19485] Symlink component flag not implemented [ 178.740343][T19485] Symlink component flag not implemented (7) [ 178.746796][T19484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 178.754899][T19484] System zones: 0-2, 18-18, 34-34 [ 178.761826][T19484] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 178.778426][T19484] EXT4-fs (loop6): Remounting filesystem read-only [ 178.797431][T19484] EXT4-fs (loop6): 1 truncate cleaned up [ 178.803523][T19484] ext4 filesystem being mounted at /1054/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.803983][T19504] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5921'. [ 178.830548][ T6040] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.834913][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5934'. [ 178.841108][ T6040] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.878003][ T6040] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.918868][T19511] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.5939'. [ 178.970167][T19531] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.984078][T19526] loop1: detected capacity change from 0 to 512 [ 179.008678][T19526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 179.016727][T19526] System zones: 0-2, 18-18, 34-34 [ 179.023185][T19526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 179.037706][T19526] EXT4-fs (loop1): Remounting filesystem read-only [ 179.044648][T19526] EXT4-fs (loop1): 1 truncate cleaned up [ 179.050664][T19526] ext4 filesystem being mounted at /1262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.061269][ T6040] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.071845][ T6040] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.082516][ T6040] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 179.643837][T19539] loop5: detected capacity change from 0 to 512 [ 179.659490][T19539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 179.677314][T19539] System zones: 0-2, 18-18, 34-34 [ 179.685386][T19539] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 179.699782][T19539] EXT4-fs (loop5): Remounting filesystem read-only [ 179.706477][T19539] EXT4-fs (loop5): 1 truncate cleaned up [ 179.712708][T19539] ext4 filesystem being mounted at /1037/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.723504][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.734093][ T5987] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.754125][ T5987] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 179.792411][T19555] bridge0: port 3(batadv1) entered blocking state [ 179.798892][T19555] bridge0: port 3(batadv1) entered disabled state [ 179.807542][T19555] batadv1: entered allmulticast mode [ 179.817708][T19555] batadv1: entered promiscuous mode [ 179.845187][T19566] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5954'. [ 179.878538][T19575] loop3: detected capacity change from 0 to 512 [ 179.886145][T19575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.899601][T19575] EXT4-fs (loop3): 1 truncate cleaned up [ 179.910101][T19579] bond0: (slave vlan0): Opening slave failed [ 180.089502][T19605] set match dimension is over the limit! [ 180.308005][ T6027] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 180.317240][ T6027] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 180.350187][T19643] rdma_op ffff88810f377d80 conn xmit_rdma 0000000000000000 [ 180.416632][T19651] xt_connbytes: Forcing CT accounting to be enabled [ 180.423720][T19651] Cannot find set identified by id 0 to match [ 180.431932][T19653] ALSA: seq fatal error: cannot create timer (-19) [ 180.534108][T19671] netlink: 63 bytes leftover after parsing attributes in process `syz.5.5986'. [ 180.612092][T19689] ALSA: seq fatal error: cannot create timer (-19) [ 180.667748][T19696] loop3: detected capacity change from 0 to 512 [ 180.674921][T19696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.686032][T19696] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5994: invalid indirect mapped block 4294967295 (level 0) [ 180.700132][T19696] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5994: invalid indirect mapped block 4294967295 (level 1) [ 180.714594][T19696] EXT4-fs (loop3): 1 orphan inode deleted [ 180.720390][T19696] EXT4-fs (loop3): 1 truncate cleaned up [ 181.153715][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 181.153731][ T29] audit: type=1326 audit(1763054229.945:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.183954][ T29] audit: type=1326 audit(1763054229.945:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.207479][ T29] audit: type=1326 audit(1763054229.965:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14d5eedf10 code=0x7ffc0000 [ 181.231000][ T29] audit: type=1326 audit(1763054229.965:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.254809][ T29] audit: type=1326 audit(1763054229.965:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.278289][ T29] audit: type=1326 audit(1763054229.965:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.301947][ T29] audit: type=1326 audit(1763054229.965:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.1.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d5eef6c9 code=0x7ffc0000 [ 181.325881][ T29] audit: type=1326 audit(1763054230.025:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19709 comm="syz.4.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 181.349439][ T29] audit: type=1326 audit(1763054230.025:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19709 comm="syz.4.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 181.373106][ T29] audit: type=1326 audit(1763054230.025:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19709 comm="syz.4.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 181.570449][T19739] loop1: detected capacity change from 0 to 128 [ 181.579937][T19742] loop6: detected capacity change from 0 to 512 [ 181.599936][T19742] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 181.608912][T19742] EXT4-fs (loop6): invalid journal inode [ 181.614593][T19742] EXT4-fs (loop6): can't get journal size [ 181.621007][T19742] EXT4-fs (loop6): 1 truncate cleaned up [ 181.922588][T19792] loop4: detected capacity change from 0 to 128 [ 181.963414][T19800] SELinux: failed to load policy [ 181.968819][ T5987] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.976548][T19798] loop1: detected capacity change from 0 to 512 [ 181.983489][T19798] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 181.993900][T19798] EXT4-fs (loop1): invalid journal inode [ 181.999578][T19798] EXT4-fs (loop1): can't get journal size [ 182.008917][T19798] EXT4-fs (loop1): 1 truncate cleaned up [ 182.024201][T19816] loop5: detected capacity change from 0 to 512 [ 182.047512][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.055021][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.058281][T19816] ext4 filesystem being mounted at /1065/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.062453][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.080242][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.087697][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.095092][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.102602][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.110012][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.117503][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.124890][ T3384] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 182.134165][ T3384] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 182.160555][T19837] wireguard0: entered promiscuous mode [ 182.166048][T19837] wireguard0: entered allmulticast mode [ 182.262974][T19853] loop5: detected capacity change from 0 to 128 [ 182.369120][T19867] loop3: detected capacity change from 0 to 512 [ 182.376124][T19867] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 182.388468][T19867] EXT4-fs (loop3): invalid journal inode [ 182.398060][T19867] EXT4-fs (loop3): can't get journal size [ 182.405941][T19867] EXT4-fs (loop3): 1 truncate cleaned up [ 182.446985][T19884] loop3: detected capacity change from 0 to 512 [ 182.449159][T19885] loop4: detected capacity change from 0 to 512 [ 182.453918][T19884] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 182.460618][T19885] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.469046][T19884] EXT4-fs (loop3): invalid journal inode [ 182.474573][T19885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.479914][T19884] EXT4-fs (loop3): can't get journal size [ 182.491348][T19885] EXT4-fs (loop4): 1 truncate cleaned up [ 182.498724][T19884] EXT4-fs (loop3): 1 truncate cleaned up [ 182.577065][T19898] wireguard0: entered promiscuous mode [ 182.582610][T19898] wireguard0: entered allmulticast mode [ 182.732348][T19909] wireguard0: entered promiscuous mode [ 182.737853][T19909] wireguard0: entered allmulticast mode [ 182.783190][T19918] loop4: detected capacity change from 0 to 1024 [ 182.812729][T19918] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6068: Allocating blocks 497-513 which overlap fs metadata [ 182.828277][T19918] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6068: Allocating blocks 497-513 which overlap fs metadata [ 182.842880][T19918] EXT4-fs (loop4): pa ffff888106e47e70: logic 256, phys. 369, len 9 [ 182.850908][T19918] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 183.266901][T19932] wireguard0: entered promiscuous mode [ 183.272433][T19932] wireguard0: entered allmulticast mode [ 184.027998][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.028292][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 184.059626][ T6040] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.072677][T19947] wireguard0: entered promiscuous mode [ 184.078185][T19947] wireguard0: entered allmulticast mode [ 184.102349][T19960] loop6: detected capacity change from 0 to 512 [ 184.111070][T19960] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.117774][T19960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 184.129138][T19960] EXT4-fs (loop6): 1 truncate cleaned up [ 184.262740][T19975] wireguard0: entered promiscuous mode [ 184.268273][T19975] wireguard0: entered allmulticast mode [ 184.302657][T19987] loop5: detected capacity change from 0 to 1024 [ 184.321850][T19987] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.6084: Allocating blocks 497-513 which overlap fs metadata [ 184.336999][T19987] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.6084: Allocating blocks 497-513 which overlap fs metadata [ 184.352422][T19987] EXT4-fs (loop5): pa ffff888106e47e70: logic 256, phys. 369, len 9 [ 184.360462][T19987] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 184.472818][T20004] wireguard0: entered promiscuous mode [ 184.478378][T20004] wireguard0: entered allmulticast mode [ 184.556690][T20021] netlink: 'syz.5.6099': attribute type 3 has an invalid length. [ 186.108030][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.108057][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 186.972114][ T6040] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.303687][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 187.303703][ T29] audit: type=1326 audit(1763054236.095:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.333585][ T29] audit: type=1326 audit(1763054236.095:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.357107][ T29] audit: type=1326 audit(1763054236.095:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.380750][ T29] audit: type=1326 audit(1763054236.095:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.404330][ T29] audit: type=1326 audit(1763054236.095:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.427790][ T29] audit: type=1326 audit(1763054236.095:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.451353][ T29] audit: type=1326 audit(1763054236.175:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.474954][ T29] audit: type=1326 audit(1763054236.175:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.498498][ T29] audit: type=1326 audit(1763054236.175:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.522034][ T29] audit: type=1326 audit(1763054236.175:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 187.563140][T20135] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6148'. [ 188.987988][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.988017][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 189.028083][ T5987] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.152083][T20177] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6162'. [ 189.180795][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6164'. [ 189.339858][T20191] loop6: detected capacity change from 0 to 32768 [ 189.436935][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6179'. [ 189.912351][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6182'. [ 189.969536][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 190.153873][T20228] loop4: detected capacity change from 0 to 32768 [ 190.540178][T20270] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.547493][T20270] vhci_hcd: invalid port number 96 [ 190.552688][T20270] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 191.068011][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.068011][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 191.110033][ T5980] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.909569][T20334] loop4: detected capacity change from 0 to 164 [ 192.917392][T20334] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.926539][T20334] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.935104][T20334] Symlink component flag not implemented [ 192.940858][T20334] Symlink component flag not implemented [ 192.947070][T20334] Symlink component flag not implemented (7) [ 192.953192][T20334] Symlink component flag not implemented (116) [ 193.068071][ T4972] IPVS: starting estimator thread 0... [ 193.075650][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 193.075663][ T29] audit: type=1400 audit(1763054241.865:6693): avc: denied { relabelto } for pid=20348 comm="syz.6.6241" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 193.108335][ T29] audit: type=1400 audit(1763054241.865:6694): avc: denied { associate } for pid=20348 comm="syz.6.6241" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_exec_t:s0" [ 193.110259][T20349] loop4: detected capacity change from 0 to 2048 [ 193.148394][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.198284][T20349] loop4: p1 p3 < > p4 < p5 > [ 193.202971][T20349] loop4: partition table partially beyond EOD, truncated [ 193.210194][T20346] IPVS: using max 2592 ests per chain, 129600 per kthread [ 193.217839][T20349] loop4: p3 start 4284289 is beyond EOD, truncated [ 193.229412][ T29] audit: type=1400 audit(1763054242.025:6695): avc: denied { write } for pid=20347 comm="syz.4.6243" name="loop4p1" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.252351][ T29] audit: type=1400 audit(1763054242.025:6696): avc: denied { open } for pid=20347 comm="syz.4.6243" path="/dev/loop4p1" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.275850][ T29] audit: type=1400 audit(1763054242.045:6697): avc: denied { ioctl } for pid=20347 comm="syz.4.6243" path="/dev/loop4p1" dev="devtmpfs" ino=731 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.307146][ T5987] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.325841][T20375] netlink: 96 bytes leftover after parsing attributes in process `+}[@'. [ 193.339009][T20372] loop6: detected capacity change from 0 to 2048 [ 193.378245][T20372] loop6: p1 p3 < > p4 < p5 > [ 193.382944][T20372] loop6: partition table partially beyond EOD, truncated [ 193.390737][T20372] loop6: p3 start 4284289 is beyond EOD, truncated [ 195.047840][T20401] loop5: detected capacity change from 0 to 164 [ 195.054960][T20401] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.064012][T20401] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.072353][T20401] Symlink component flag not implemented [ 195.078019][T20401] Symlink component flag not implemented [ 195.083735][T20401] Symlink component flag not implemented (7) [ 195.089712][T20401] Symlink component flag not implemented (116) [ 195.110200][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/0:3) [ 195.113301][T20410] netlink: 'syz.5.6254': attribute type 29 has an invalid length. [ 195.136085][T20410] netlink: 'syz.5.6254': attribute type 29 has an invalid length. [ 195.144969][T20410] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6254'. [ 195.145852][T20412] loop3: detected capacity change from 0 to 256 [ 195.194338][ T29] audit: type=1326 audit(1763054243.985:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.3.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 195.218129][ T29] audit: type=1326 audit(1763054243.985:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.3.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 195.241664][ T29] audit: type=1326 audit(1763054243.985:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.3.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 195.265329][ T29] audit: type=1326 audit(1763054243.985:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.3.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 195.288936][ T29] audit: type=1326 audit(1763054243.985:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.3.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 195.312506][T11201] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.319065][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 195.340514][T20427] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.6262'. [ 195.386031][T20432] loop1: detected capacity change from 0 to 2048 [ 195.418409][T20432] loop1: p1 p3 < > p4 < p5 > [ 195.423102][T20432] loop1: partition table partially beyond EOD, truncated [ 195.430686][T20432] loop1: p3 start 4284289 is beyond EOD, truncated [ 195.511269][T20456] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6270'. [ 195.521170][T20456] netlink: zone id is out of range [ 195.526418][T20456] netlink: zone id is out of range [ 195.539355][T20459] loop1: detected capacity change from 0 to 164 [ 195.546644][T20459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.546677][T20456] netlink: set zone limit has 8 unknown bytes [ 195.557818][T20459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.569557][T20459] Symlink component flag not implemented [ 195.575207][T20459] Symlink component flag not implemented [ 195.581235][T20459] Symlink component flag not implemented (7) [ 195.587205][T20459] Symlink component flag not implemented (116) [ 195.687987][T20473] netlink: 'syz.1.6274': attribute type 29 has an invalid length. [ 195.696918][T20473] netlink: 'syz.1.6274': attribute type 29 has an invalid length. [ 195.706516][T20473] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6274'. [ 195.716619][T20470] loop3: detected capacity change from 0 to 164 [ 195.723983][T20470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.733779][T20470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.734572][T20476] loop1: detected capacity change from 0 to 256 [ 195.745600][T20470] Symlink component flag not implemented [ 195.753995][T20470] Symlink component flag not implemented [ 195.760031][T20470] Symlink component flag not implemented (7) [ 195.766077][T20470] Symlink component flag not implemented (116) [ 195.793930][T20485] netlink: 'syz.1.6294': attribute type 29 has an invalid length. [ 195.802943][T20485] netlink: 'syz.1.6294': attribute type 29 has an invalid length. [ 195.811674][T20485] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6294'. [ 195.894537][T20491] netlink: 'syz.1.6296': attribute type 29 has an invalid length. [ 195.904477][T20491] netlink: 'syz.1.6296': attribute type 29 has an invalid length. [ 195.905061][T20491] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6296'. [ 195.950539][T20500] netlink: 'syz.1.6300': attribute type 29 has an invalid length. [ 195.959436][T20500] netlink: 'syz.1.6300': attribute type 29 has an invalid length. [ 195.970761][T20500] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6300'. [ 195.992655][T20499] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6284'. [ 196.749111][T20517] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6304'. [ 196.791171][T20527] loop4: detected capacity change from 0 to 1024 [ 196.799096][T20528] netlink: zone id is out of range [ 196.804270][T20528] netlink: zone id is out of range [ 196.809922][T20525] loop5: detected capacity change from 0 to 1024 [ 196.816862][T20525] EXT4-fs: inline encryption not supported [ 196.822856][T20528] netlink: set zone limit has 8 unknown bytes [ 196.839687][T20525] EXT4-fs mount: 64 callbacks suppressed [ 196.839705][T20525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.862148][T20527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.874601][T20527] ext4 filesystem being mounted at /1194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.880881][T20525] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 196.903099][T20527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6309: bg 0: block 112: padding at end of block bitmap is not set [ 196.917899][T20542] loop6: detected capacity change from 0 to 256 [ 196.924208][T20527] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 196.930418][T20525] EXT4-fs (loop5): Remounting filesystem read-only [ 196.936738][T20527] EXT4-fs (loop4): This should not happen!! Data will be lost [ 196.936738][T20527] [ 196.982526][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.996743][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.129994][T20575] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 197.153437][T20577] loop4: detected capacity change from 0 to 1024 [ 197.160620][T20577] EXT4-fs: inline encryption not supported [ 197.169039][T20577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.190834][T20577] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 197.209572][T20577] EXT4-fs (loop4): Remounting filesystem read-only [ 197.225828][T20586] loop5: detected capacity change from 0 to 1024 [ 197.233643][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.249126][T20586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.261542][T20586] ext4 filesystem being mounted at /1138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.275768][T20586] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6318: bg 0: block 112: padding at end of block bitmap is not set [ 197.291050][T20586] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 197.303529][T20586] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.303529][T20586] [ 197.326283][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.855938][T20617] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 197.934328][T20624] loop6: detected capacity change from 0 to 1024 [ 197.943677][T20628] loop3: detected capacity change from 0 to 1024 [ 197.946119][T20624] EXT4-fs: inline encryption not supported [ 197.959667][T20624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.978391][T20628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.993552][T20624] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 198.008289][T20628] ext4 filesystem being mounted at /951/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.018835][T20624] EXT4-fs (loop6): Remounting filesystem read-only [ 198.030059][T20628] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6333: bg 0: block 112: padding at end of block bitmap is not set [ 198.046189][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.057431][T20628] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 198.070058][T20628] EXT4-fs (loop3): This should not happen!! Data will be lost [ 198.070058][T20628] [ 198.090139][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.113034][T20647] loop1: detected capacity change from 0 to 1024 [ 198.120057][T20647] EXT4-fs: inline encryption not supported [ 198.132871][T20647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.137432][T20647] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 198.137629][T20647] EXT4-fs (loop1): Remounting filesystem read-only [ 198.156367][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.226648][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 198.226662][ T29] audit: type=1400 audit(1763054247.015:6725): avc: denied { create } for pid=20656 comm="syz.3.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.283740][T20668] loop5: detected capacity change from 0 to 764 [ 198.291466][T20668] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 198.302028][T20671] loop4: detected capacity change from 0 to 128 [ 198.309006][T20671] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.321017][T20668] Symlink component flag not implemented [ 198.326686][T20668] Symlink component flag not implemented (7) [ 198.337062][ T29] audit: type=1400 audit(1763054247.125:6726): avc: denied { listen } for pid=20666 comm="syz.6.6355" lport=46150 faddr=2001:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.359922][ T29] audit: type=1400 audit(1763054247.125:6727): avc: denied { accept } for pid=20666 comm="syz.6.6355" lport=46150 faddr=2001:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.402457][T20675] __nla_validate_parse: 3 callbacks suppressed [ 198.402474][T20675] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6345'. [ 198.409094][T20677] loop3: detected capacity change from 0 to 1024 [ 198.424744][T20677] EXT4-fs: inline encryption not supported [ 198.455438][T20677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.468238][T20690] loop6: detected capacity change from 0 to 1024 [ 198.479672][T20677] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 198.495163][T20677] EXT4-fs (loop3): Remounting filesystem read-only [ 198.499458][T20690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.513827][T20690] ext4 filesystem being mounted at /1121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.525007][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.530316][T20690] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6348: bg 0: block 112: padding at end of block bitmap is not set [ 198.548554][T20690] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 198.561640][T20690] EXT4-fs (loop6): This should not happen!! Data will be lost [ 198.561640][T20690] [ 198.582541][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.616607][ T29] audit: type=1326 audit(1763054247.405:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.639654][ T29] audit: type=1326 audit(1763054247.405:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.673555][ T29] audit: type=1326 audit(1763054247.455:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.696702][ T29] audit: type=1326 audit(1763054247.455:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.720058][ T29] audit: type=1326 audit(1763054247.465:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.4.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.743691][ T29] audit: type=1326 audit(1763054247.465:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.4.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.767245][ T29] audit: type=1326 audit(1763054247.465:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20708 comm="syz.4.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5b45f6c9 code=0x7ffc0000 [ 198.906305][T20732] loop3: detected capacity change from 0 to 128 [ 198.941145][T20739] loop6: detected capacity change from 0 to 1024 [ 198.948489][T20739] EXT4-fs: Ignoring removed i_version option [ 198.955115][T20739] EXT4-fs: Ignoring removed nobh option [ 198.988810][T20739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.062919][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.104104][T20768] loop1: detected capacity change from 0 to 764 [ 199.114031][T20768] rock: directory entry would overflow storage [ 199.120288][T20768] rock: sig=0x4f50, size=4, remaining=3 [ 199.125864][T20768] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 199.514001][T20815] loop6: detected capacity change from 0 to 2048 [ 199.536163][T20813] loop1: detected capacity change from 0 to 8192 [ 199.544793][T20815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.557061][T20813] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.570287][T20815] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 199.596418][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.742075][T20843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6401'. [ 199.777092][T20851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20851 comm=syz.4.6404 [ 199.919028][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6409'. [ 199.928070][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6409'. [ 200.191231][T20889] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6420'. [ 200.330514][T20905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.355331][T20909] loop3: detected capacity change from 0 to 128 [ 200.412906][T20918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.429150][T20920] random: crng reseeded on system resumption [ 200.438102][T20918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.628896][T20940] loop5: detected capacity change from 0 to 2048 [ 200.678572][T20940] loop5: p1 < > p4 [ 200.686306][T20940] loop5: p4 size 8388608 extends beyond EOD, truncated [ 200.843700][T20970] loop6: detected capacity change from 0 to 512 [ 200.850876][T20970] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 200.859633][T20970] EXT4-fs (loop6): invalid journal inode [ 200.865434][T20970] EXT4-fs (loop6): can't get journal size [ 200.877220][T20970] EXT4-fs (loop6): 1 truncate cleaned up [ 200.884723][T20970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.929452][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.972108][T21001] loop4: detected capacity change from 0 to 512 [ 201.015406][T21008] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6459'. [ 201.039494][T21001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.053483][T21001] ext4 filesystem being mounted at /1222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.095501][T21018] batadv_slave_1: entered promiscuous mode [ 201.114667][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.124021][T21015] batadv_slave_1: left promiscuous mode [ 201.159862][T21023] rtc_cmos 00:00: Alarms can be up to one day in the future [ 201.287326][T21043] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 201.319908][T21045] syz_tun: entered allmulticast mode [ 201.334943][T21045] pimreg: entered allmulticast mode [ 201.341166][T21045] validate_nla: 6 callbacks suppressed [ 201.341183][T21045] netlink: 'syz.6.6475': attribute type 39 has an invalid length. [ 201.359968][T21045] syz_tun (unregistering): left allmulticast mode [ 201.418907][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6480'. [ 201.427820][T21062] tipc: Enabling of bearer rejected, media not registered [ 201.451580][T21067] SELinux: failed to load policy [ 201.491827][T21069] loop4: detected capacity change from 0 to 2048 [ 201.523290][T21077] loop3: detected capacity change from 0 to 128 [ 201.528290][T21069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.558760][T21069] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 201.587675][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.898346][T21140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6513'. [ 201.963528][T21146] loop5: detected capacity change from 0 to 1024 [ 201.990786][T21152] loop6: detected capacity change from 0 to 164 [ 201.991395][T21146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.009649][T21152] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.035752][T21160] loop4: detected capacity change from 0 to 512 [ 202.061641][T21152] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.077392][T21160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.080208][T21152] Symlink component flag not implemented [ 202.090034][T21160] ext4 filesystem being mounted at /1237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.095559][T21152] Symlink component flag not implemented [ 202.123448][T21160] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 202.132418][T21152] Symlink component flag not implemented (7) [ 202.132879][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.139247][T21152] Symlink component flag not implemented (116) [ 202.158180][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.165719][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.173258][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.180975][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.188357][ T3384] rtc rtc0: __rtc_set_alarm: err=-22 [ 202.195682][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.280486][T21189] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 202.291740][T21190] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6532'. [ 202.383341][T21209] loop3: detected capacity change from 0 to 512 [ 202.399391][T21207] binfmt_misc: register: failed to install interpreter file ./file2 [ 202.409053][T21209] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.428745][T21209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 202.438939][T21214] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 202.442684][T21209] System zones: 1-12 [ 202.447187][T21214] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 202.451146][T21209] [ 202.462950][T21209] EXT4-fs (loop3): 1 truncate cleaned up [ 202.469164][T21209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.484661][T21209] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted [ 202.549400][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.584008][T21219] x_tables: duplicate underflow at hook 1 [ 202.665402][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6548'. [ 202.699493][T21239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.732115][T21241] loop3: detected capacity change from 0 to 1024 [ 202.745504][T21241] EXT4-fs: Ignoring removed orlov option [ 202.760070][T21241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.802765][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.927047][T21295] loop4: detected capacity change from 0 to 1024 [ 202.934371][T21295] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.945262][T21295] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 202.955584][T21295] JBD2: no valid journal superblock found [ 202.961442][T21295] EXT4-fs (loop4): Could not load journal inode [ 202.985286][T21295] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 203.133281][T21317] loop4: detected capacity change from 0 to 128 [ 203.313029][T21335] SELinux: ebitmap start bit (65535) is not a multiple of the map unit size (64) [ 203.322367][T21335] SELinux: failed to load policy [ 203.431948][T21349] netlink: 'syz.4.6581': attribute type 4 has an invalid length. [ 203.440631][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 203.440646][ T29] audit: type=1326 audit(1763054252.235:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.470420][ T29] audit: type=1326 audit(1763054252.235:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.507577][ T29] audit: type=1326 audit(1763054252.285:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.509996][T21351] __nla_validate_parse: 3 callbacks suppressed [ 203.510011][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6583'. [ 203.531034][ T29] audit: type=1326 audit(1763054252.285:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.569659][ T29] audit: type=1326 audit(1763054252.285:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.593327][ T29] audit: type=1326 audit(1763054252.285:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.616825][ T29] audit: type=1326 audit(1763054252.285:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.640480][ T29] audit: type=1326 audit(1763054252.295:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.664025][ T29] audit: type=1326 audit(1763054252.295:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.687624][ T29] audit: type=1326 audit(1763054252.295:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.3.6579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 203.802296][T21370] loop6: detected capacity change from 0 to 512 [ 203.809378][T21363] binfmt_misc: register: failed to install interpreter file ./file2 [ 203.829112][T21374] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 203.876018][T21370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.898341][T21370] ext4 filesystem being mounted at /1192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.914690][T21370] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.948366][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.961203][T21394] loop5: detected capacity change from 0 to 512 [ 203.970504][T21394] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 203.987619][T21394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 204.010021][T21394] System zones: 1-12 [ 204.018614][T21394] EXT4-fs (loop5): 1 truncate cleaned up [ 204.033674][T21394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.075979][T21394] EXT4-fs warning (device loop5): ext4_group_extend:1862: can't shrink FS - resize aborted [ 204.116408][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.818144][T21423] loop5: detected capacity change from 0 to 164 [ 204.827876][T21423] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 204.837336][T21423] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 204.846103][T21423] Symlink component flag not implemented [ 204.851782][T21423] Symlink component flag not implemented [ 204.857701][T21423] Symlink component flag not implemented (7) [ 204.863819][T21423] Symlink component flag not implemented (116) [ 205.111600][T21459] netlink: 'syz.5.6632': attribute type 3 has an invalid length. [ 205.139489][T21463] loop5: detected capacity change from 0 to 512 [ 205.150820][T21463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.163640][T21463] ext4 filesystem being mounted at /1189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.177411][T21463] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 205.197726][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.711413][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6626'. [ 205.781613][T21478] loop3: detected capacity change from 0 to 8192 [ 205.824601][T21483] loop3: detected capacity change from 0 to 256 [ 205.982938][T21502] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6635'. [ 206.001946][T21502] 0X: renamed from caif0 [ 206.009854][T21502] 0X: entered allmulticast mode [ 206.015123][T21502] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 206.268135][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6652'. [ 206.348275][T21560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 206.354875][T21560] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.362522][T21560] vhci_hcd vhci_hcd.0: Device attached [ 206.384105][T21562] vhci_hcd: connection closed [ 206.384248][ T6044] vhci_hcd: stop threads [ 206.393198][ T6044] vhci_hcd: release socket [ 206.397622][ T6044] vhci_hcd: disconnect device [ 206.419737][T21566] loop6: detected capacity change from 0 to 164 [ 206.429520][T21566] bio_check_eod: 17232 callbacks suppressed [ 206.429541][T21566] syz.6.6661: attempt to access beyond end of device [ 206.429541][T21566] loop6: rw=524288, sector=12280922252, nr_sectors = 20 limit=164 [ 206.452108][T21566] syz.6.6661: attempt to access beyond end of device [ 206.452108][T21566] loop6: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 206.467203][T21566] syz.6.6661: attempt to access beyond end of device [ 206.467203][T21566] loop6: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 206.481749][T21566] syz.6.6661: attempt to access beyond end of device [ 206.481749][T21566] loop6: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 206.497143][T21566] syz.6.6661: attempt to access beyond end of device [ 206.497143][T21566] loop6: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 206.565251][T21577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6665'. [ 206.574273][T21577] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6665'. [ 206.596646][T21577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6665'. [ 206.604842][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6666'. [ 206.606321][T21577] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6665'. [ 206.681957][T21587] loop5: detected capacity change from 0 to 512 [ 206.717671][T21587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.738195][T21587] ext4 filesystem being mounted at /1202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.758289][T21587] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.6670: corrupted inode contents [ 206.807971][T21587] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.6670: mark_inode_dirty error [ 206.829096][T21587] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.6670: corrupted inode contents [ 206.866069][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.290881][T21657] loop6: detected capacity change from 0 to 164 [ 207.308646][T21657] iso9660: Unknown parameter '' [ 207.406763][T21664] infiniband syz0: set active [ 207.411552][T21664] infiniband syz0: added bond_slave_0 [ 207.438413][T21664] RDS/IB: syz0: added [ 207.452524][T21664] smc: adding ib device syz0 with port count 1 [ 207.466590][T21664] smc: ib device syz0 port 1 has no pnetid [ 207.971777][T21701] loop6: detected capacity change from 0 to 4096 [ 208.013466][T21701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.074554][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.521259][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 208.521274][ T29] audit: type=1326 audit(1763054257.315:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21782 comm="syz.5.6740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.569643][ T29] audit: type=1326 audit(1763054257.315:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21782 comm="syz.5.6740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.593227][ T29] audit: type=1326 audit(1763054257.355:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21782 comm="syz.5.6740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.675250][T21789] vhci_hcd: invalid port number 23 [ 208.752693][ T29] audit: type=1400 audit(1763054257.535:6928): avc: denied { mount } for pid=21790 comm="syz.5.6744" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.779544][T21800] usb usb1: check_ctrlrecip: process 21800 (syz.5.6748) requesting ep 01 but needs 81 [ 208.806875][ T29] audit: type=1400 audit(1763054257.545:6929): avc: denied { bind } for pid=21797 comm="syz.6.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.810240][T21803] loop3: detected capacity change from 0 to 128 [ 208.848300][ T29] audit: type=1326 audit(1763054257.635:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.871901][ T29] audit: type=1326 audit(1763054257.635:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.895352][ T29] audit: type=1326 audit(1763054257.645:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 208.969976][T21803] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.998220][T21803] ext4 filesystem being mounted at /1034/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.028627][ T29] audit: type=1400 audit(1763054257.825:6933): avc: denied { setattr } for pid=21801 comm="syz.3.6749" path="/1034/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 209.071675][ T6948] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.815095][ T29] audit: type=1326 audit(1763054258.605:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 209.815175][T21848] loop5: detected capacity change from 0 to 128 [ 209.903859][T21853] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.061582][T21874] loop4: detected capacity change from 0 to 512 [ 210.092176][T21874] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 223 vs 220 free clusters [ 210.131087][T21874] EXT4-fs (loop4): Remounting filesystem read-only [ 210.139791][T21874] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 210.149971][T21874] EXT4-fs (loop4): 1 orphan inode deleted [ 210.157449][T21874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.209159][T21885] 9pnet: Unknown protocol version 9 [ 210.231978][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.493163][T21904] loop5: detected capacity change from 0 to 764 [ 210.521292][T21904] rock: directory entry would overflow storage [ 210.527610][T21904] rock: sig=0x4f50, size=4, remaining=3 [ 210.533192][T21904] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 210.552384][T21904] block device autoloading is deprecated and will be removed. [ 210.642923][T21920] loop5: detected capacity change from 0 to 512 [ 210.687185][T21920] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6805: bg 0: block 248: padding at end of block bitmap is not set [ 210.701803][T21920] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6805: Failed to acquire dquot type 1 [ 210.714297][T21920] EXT4-fs (loop5): 1 truncate cleaned up [ 210.720751][T21920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.733619][T21920] ext4 filesystem being mounted at /1240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.758071][T21920] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6805: Failed to acquire dquot type 1 [ 210.798380][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.201807][T21974] loop3: detected capacity change from 0 to 2048 [ 211.224291][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/0:3) [ 211.244522][T21974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.298439][T21974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 211.370201][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.403795][T21996] loop4: detected capacity change from 0 to 128 [ 211.494226][T22018] __nla_validate_parse: 2 callbacks suppressed [ 211.494243][T22018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6832'. [ 211.648291][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6843'. [ 211.966384][T22079] loop6: detected capacity change from 0 to 128 [ 212.027104][T22088] loop5: detected capacity change from 0 to 512 [ 212.038827][T22088] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.070734][T22088] EXT4-fs (loop5): 1 truncate cleaned up [ 212.076777][T22088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.145991][T22100] sd 0:0:1:0: device reset [ 212.179040][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.280253][T22120] random: crng reseeded on system resumption [ 212.295191][T22118] loop3: detected capacity change from 0 to 2048 [ 212.363341][T22125] loop5: detected capacity change from 0 to 1024 [ 212.380152][T22118] Alternate GPT is invalid, using primary GPT. [ 212.386578][T22118] loop3: p2 p3 p7 [ 212.411735][T22125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.442262][T22125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 212.461674][T22125] System zones: 0-1, 3-36 [ 212.474175][T22125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.515780][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.606111][T22149] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 212.675687][T22157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6889'. [ 212.706686][T22161] 9pnet_fd: Insufficient options for proto=fd [ 212.799364][T22179] macvtap0: refused to change device tx_queue_len [ 212.855911][T22187] loop3: detected capacity change from 0 to 512 [ 212.889204][T22187] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.6913: Failed to acquire dquot type 1 [ 212.930049][T22187] EXT4-fs (loop3): 1 truncate cleaned up [ 212.936197][T22187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.968794][T22187] ext4 filesystem being mounted at /1069/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.003715][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.037242][T22204] random: crng reseeded on system resumption [ 213.246611][T22215] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6910'. [ 213.256499][T22215] netlink: zone id is out of range [ 213.261664][T22215] netlink: zone id is out of range [ 213.275587][T22215] netlink: set zone limit has 8 unknown bytes [ 213.338998][T22221] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 213.496033][T22236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.518186][T22236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.538061][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 213.538100][ T29] audit: type=1400 audit(1763054262.325:7120): avc: denied { kexec_image_load } for pid=22240 comm="syz.3.6923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 213.568606][T22241] loop6: detected capacity change from 0 to 512 [ 213.608838][T22241] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 213.642106][T22241] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 159 vs 220 free clusters [ 213.656903][T22241] EXT4-fs (loop6): Remounting filesystem read-only [ 213.663619][T22241] EXT4-fs (loop6): 1 truncate cleaned up [ 213.669907][T22241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.695916][ T5678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.995456][T22250] loop6: detected capacity change from 0 to 1024 [ 214.002579][T22250] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 214.013536][T22250] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 214.024159][T22250] JBD2: no valid journal superblock found [ 214.029971][T22250] EXT4-fs (loop6): Could not load journal inode [ 214.041468][T22250] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 214.123549][ T29] audit: type=1400 audit(1763054262.915:7121): avc: denied { create } for pid=22261 comm="syz.4.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.188205][ T29] audit: type=1400 audit(1763054262.955:7122): avc: denied { write } for pid=22265 comm="syz.4.6928" path="socket:[57381]" dev="sockfs" ino=57381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.230974][ T29] audit: type=1326 audit(1763054263.025:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.254572][ T29] audit: type=1326 audit(1763054263.025:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.280847][ T29] audit: type=1326 audit(1763054263.075:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.304609][ T29] audit: type=1326 audit(1763054263.075:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.328297][ T29] audit: type=1326 audit(1763054263.075:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.355998][T22276] program syz.6.6934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.367974][ T29] audit: type=1326 audit(1763054263.155:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.435759][ T29] audit: type=1326 audit(1763054263.175:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22271 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091851f6c9 code=0x7ffc0000 [ 214.544429][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 214.617225][T22288] loop6: detected capacity change from 0 to 8192 [ 214.689317][T22303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.710731][T22305] netlink: 19 bytes leftover after parsing attributes in process `syz.4.6947'. [ 214.855983][T22323] loop5: detected capacity change from 0 to 164 [ 214.871932][T22323] syz.5.6954: attempt to access beyond end of device [ 214.871932][T22323] loop5: rw=524288, sector=12280922252, nr_sectors = 20 limit=164 [ 214.888722][T22323] syz.5.6954: attempt to access beyond end of device [ 214.888722][T22323] loop5: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 214.902727][T22323] syz.5.6954: attempt to access beyond end of device [ 214.902727][T22323] loop5: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 214.918299][T22323] syz.5.6954: attempt to access beyond end of device [ 214.918299][T22323] loop5: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 214.951731][T22323] syz.5.6954: attempt to access beyond end of device [ 214.951731][T22323] loop5: rw=0, sector=12280922252, nr_sectors = 8 limit=164 [ 215.023382][ T6004] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.033210][ T6004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.091376][ T6004] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.101302][ T6004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.189146][ T6004] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.199017][ T6004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.250635][ T6004] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.260505][ T6004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.298153][T22407] netlink: 'syz.5.6967': attribute type 4 has an invalid length. [ 215.341614][T22448] loop4: detected capacity change from 0 to 512 [ 215.359578][T22448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.378183][T22448] ext4 filesystem being mounted at /1361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.388690][ T6004] batadv2: left allmulticast mode [ 215.394444][ T6004] batadv2: left promiscuous mode [ 215.397046][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6972'. [ 215.399780][ T6004] bridge0: port 4(batadv2) entered disabled state [ 215.415476][ T6004] batadv1: left allmulticast mode [ 215.417466][T22448] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6970: corrupted inode contents [ 215.420562][ T6004] batadv1: left promiscuous mode [ 215.432709][T22448] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.6970: mark_inode_dirty error [ 215.437327][ T6004] bridge0: port 3(batadv1) entered disabled state [ 215.449019][T22448] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6970: corrupted inode contents [ 215.467235][ T6004] bridge_slave_1: left allmulticast mode [ 215.473068][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.481165][ T6004] bridge_slave_0: left allmulticast mode [ 215.486842][ T6004] bridge_slave_0: left promiscuous mode [ 215.492627][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.503498][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.552500][T22513] loop3: detected capacity change from 0 to 1024 [ 215.567364][T22519] loop5: detected capacity change from 0 to 128 [ 215.596006][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.622715][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.632244][ T6004] bond0 (unregistering): Released all slaves [ 215.656756][T22327] chnl_net:caif_netlink_parms(): no params data found [ 215.672575][T22528] syz_tun: entered allmulticast mode [ 215.697248][T22528] pimreg: entered allmulticast mode [ 215.727622][T22528] netlink: 'syz.4.6987': attribute type 39 has an invalid length. [ 215.783696][T22528] syz_tun (unregistering): left allmulticast mode [ 215.792158][T22569] IPVS: Error connecting to the multicast addr [ 215.803213][ T6004] hsr_slave_0: left promiscuous mode [ 215.820959][ T6004] hsr_slave_1: left promiscuous mode [ 215.826755][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.834341][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.872673][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 215.881749][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 215.922841][T22327] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.930162][T22327] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.947505][T22327] bridge_slave_0: entered allmulticast mode [ 215.958775][T22327] bridge_slave_0: entered promiscuous mode [ 215.973500][T22327] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.980796][T22327] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.983377][T22615] loop4: detected capacity change from 0 to 128 [ 215.988179][T22327] bridge_slave_1: entered allmulticast mode [ 216.000673][T22327] bridge_slave_1: entered promiscuous mode [ 216.028342][T22327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.048559][T22327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.060926][T22646] loop4: detected capacity change from 0 to 2048 [ 216.062328][T22648] loop5: detected capacity change from 0 to 512 [ 216.086161][T22327] team0: Port device team_slave_0 added [ 216.092887][T22327] team0: Port device team_slave_1 added [ 216.098513][T22648] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 216.118926][T22648] EXT4-fs (loop5): invalid journal inode [ 216.126413][T22648] EXT4-fs (loop5): can't get journal size [ 216.133494][T22327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.138664][T22646] loop4: p1 < > p4 [ 216.140567][T22327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.145099][T22646] loop4: p4 size 8388608 extends beyond EOD, [ 216.170228][T22327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.171394][T22327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.176317][T22646] truncated [ 216.196925][T22327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.222866][T22327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.232360][T22648] EXT4-fs (loop5): 1 truncate cleaned up [ 216.292948][T22327] hsr_slave_0: entered promiscuous mode [ 216.295617][T22744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.299178][T22327] hsr_slave_1: entered promiscuous mode [ 216.347122][T22765] syz_tun: entered allmulticast mode [ 216.360538][T22767] loop4: detected capacity change from 0 to 512 [ 216.373126][T22765] pimreg: entered allmulticast mode [ 216.378761][T22767] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 216.379696][T22788] loop6: detected capacity change from 0 to 128 [ 216.389021][T22765] netlink: 'syz.5.7001': attribute type 39 has an invalid length. [ 216.402310][T22767] EXT4-fs (loop4): invalid journal inode [ 216.408749][T22767] EXT4-fs (loop4): can't get journal size [ 216.416428][T22767] EXT4-fs (loop4): 1 truncate cleaned up [ 216.424838][T22765] syz_tun (unregistering): left allmulticast mode [ 216.476994][ T6004] IPVS: stop unused estimator thread 0... [ 216.522652][T22327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.535669][T22841] loop3: detected capacity change from 0 to 2048 [ 216.537407][T22327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.553650][T22327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.569066][T22841] loop3: p1 < > p4 [ 216.573246][T22327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.575104][T22841] loop3: p4 size 8388608 extends beyond EOD, truncated [ 216.638719][T22327] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.645792][T22327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.653112][T22327] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.660243][T22327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.704309][T22327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.715434][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.733048][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.761378][T22327] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.765804][T22877] netlink: 'syz.3.7014': attribute type 4 has an invalid length. [ 216.794221][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.801374][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.809748][T22879] loop5: detected capacity change from 0 to 8192 [ 216.820251][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.827431][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.864486][T22327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.874929][T22327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.925125][T22893] loop3: detected capacity change from 0 to 512 [ 216.936458][T22893] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.956330][T22893] EXT4-fs (loop3): invalid journal inode [ 216.962216][T22898] netlink: 19 bytes leftover after parsing attributes in process `syz.5.7021'. [ 216.975252][T22893] EXT4-fs (loop3): can't get journal size [ 216.997899][T22893] EXT4-fs (loop3): 1 truncate cleaned up [ 217.005003][T22327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.122728][T22327] veth0_vlan: entered promiscuous mode [ 217.130377][T22327] veth1_vlan: entered promiscuous mode [ 217.144567][T22327] veth0_macvtap: entered promiscuous mode [ 217.152863][T22327] veth1_macvtap: entered promiscuous mode [ 217.163987][T22327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.175174][T22327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.185843][ T6011] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.194728][ T6011] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.210510][ T6011] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.223092][ T6011] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.310775][T22926] loop7: detected capacity change from 0 to 128 [ 217.348801][T22928] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7023'. [ 217.369972][T22928] 0X: renamed from 61X [ 217.380244][T22928] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 217.406018][T22931] loop5: detected capacity change from 0 to 128 [ 217.418123][T22935] syz_tun: entered allmulticast mode [ 217.439187][T22935] pimreg: entered allmulticast mode [ 217.446270][T22935] netlink: 'syz.7.7025': attribute type 39 has an invalid length. [ 217.456328][T22935] syz_tun (unregistering): left allmulticast mode [ 218.831472][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 218.831489][ T29] audit: type=1400 audit(1763054267.625:7258): avc: denied { read } for pid=22946 comm="syz.5.7043" dev="nsfs" ino=4026533296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.859254][T22944] loop7: detected capacity change from 0 to 2048 [ 218.866022][ T29] audit: type=1400 audit(1763054267.625:7259): avc: denied { open } for pid=22946 comm="syz.5.7043" path="net:[4026533296]" dev="nsfs" ino=4026533296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.889424][ T29] audit: type=1400 audit(1763054267.625:7260): avc: denied { ioctl } for pid=22946 comm="syz.5.7043" path="socket:[59008]" dev="sockfs" ino=59008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.928540][T22944] loop7: p1 < > p4 [ 218.933078][T22944] loop7: p4 size 8388608 extends beyond EOD, truncated [ 218.963794][ T29] audit: type=1400 audit(1763054267.755:7261): avc: denied { read write } for pid=22956 comm="syz.3.7030" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 218.993544][T22960] loop3: detected capacity change from 0 to 512 [ 219.009248][ T29] audit: type=1400 audit(1763054267.755:7262): avc: denied { open } for pid=22956 comm="syz.3.7030" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 219.049667][T22960] ext4 filesystem being mounted at /1104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.062112][ T29] audit: type=1400 audit(1763054267.855:7263): avc: denied { setattr } for pid=22958 comm="syz.3.7031" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.085293][T22960] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7031: corrupted inode contents [ 219.097347][T22960] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.7031: mark_inode_dirty error [ 219.109063][T22960] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7031: corrupted inode contents [ 219.121884][ T29] audit: type=1400 audit(1763054267.915:7264): avc: denied { write open } for pid=22958 comm="syz.3.7031" path=2F313130342F6275732F233138202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.169801][ T29] audit: type=1400 audit(1763054267.945:7265): avc: denied { open } for pid=22975 comm="syz.4.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 219.189230][ T29] audit: type=1400 audit(1763054267.945:7266): avc: denied { kernel } for pid=22975 comm="syz.4.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 219.208767][ T29] audit: type=1400 audit(1763054267.945:7267): avc: denied { tracepoint } for pid=22975 comm="syz.4.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 231.944407][T23000] loop4: detected capacity change from 0 to 128 [ 231.946244][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 231.946259][ T29] audit: type=1400 audit(1763054280.735:7299): avc: denied { execmem } for pid=22998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 232.034924][ T29] audit: type=1400 audit(1763054280.815:7300): avc: denied { mounton } for pid=23008 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 232.056556][ T29] audit: type=1326 audit(1763054280.825:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23003 comm="syz.5.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 232.080222][ T29] audit: type=1326 audit(1763054280.825:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23003 comm="syz.5.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 232.103739][ T29] audit: type=1326 audit(1763054280.825:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23003 comm="syz.5.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 232.127458][ T29] audit: type=1326 audit(1763054280.825:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23003 comm="syz.5.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f85f6c9 code=0x7ffc0000 [ 232.190774][ T6019] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.201195][ T6019] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.231045][ T29] audit: type=1400 audit(1763054281.025:7305): avc: denied { name_bind } for pid=23050 comm="syz.5.7065" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 232.252926][ T29] audit: type=1400 audit(1763054281.025:7306): avc: denied { node_bind } for pid=23050 comm="syz.5.7065" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 232.275149][ T29] audit: type=1400 audit(1763054281.025:7307): avc: denied { create } for pid=23042 comm="syz.7.7053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.294992][ T29] audit: type=1400 audit(1763054281.025:7308): avc: denied { ioctl } for pid=23042 comm="syz.7.7053" path="socket:[58179]" dev="sockfs" ino=58179 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.323632][T23008] chnl_net:caif_netlink_parms(): no params data found [ 232.336663][ T6019] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.347081][ T6019] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.383540][T23165] loop7: detected capacity change from 0 to 512 [ 232.393532][T23165] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 232.403479][T23165] EXT4-fs (loop7): invalid journal inode [ 232.410074][T23165] EXT4-fs (loop7): can't get journal size [ 232.425631][T23165] EXT4-fs (loop7): 1 truncate cleaned up [ 232.434511][T23165] EXT4-fs mount: 10 callbacks suppressed [ 232.434524][T23165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.485241][T22327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.527519][ T6019] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.537855][ T6019] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.586989][T23008] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.594164][T23008] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.601675][T23008] bridge_slave_0: entered allmulticast mode [ 232.608337][T23008] bridge_slave_0: entered promiscuous mode [ 232.617548][T23008] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.617904][T23220] 9pnet_fd: Insufficient options for proto=fd [ 232.624652][T23008] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.637966][T23008] bridge_slave_1: entered allmulticast mode [ 232.644445][T23008] bridge_slave_1: entered promiscuous mode [ 232.648522][T23218] loop5: detected capacity change from 0 to 2048 [ 232.661780][T23218] EXT4-fs: Ignoring removed i_version option [ 232.677117][T23008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.679633][T23236] netlink: 'syz.7.7070': attribute type 1 has an invalid length. [ 232.687937][T23008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.705603][ T6019] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.715922][ T6019] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.723742][T23218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.756132][T23218] EXT4-fs (loop5): shut down requested (1) [ 232.756519][T23254] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.773203][T23008] team0: Port device team_slave_0 added [ 232.789001][T23008] team0: Port device team_slave_1 added [ 232.804666][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.834505][T23008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.841522][T23008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.867491][T23008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.878616][T23008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.885578][T23008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.911618][T23008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.941726][T23287] syzkaller1: entered promiscuous mode [ 232.947228][T23287] syzkaller1: entered allmulticast mode [ 232.978764][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7079'. [ 232.988306][ T6011] ================================================================== [ 232.996386][ T6011] BUG: KCSAN: data-race in alloc_pid / copy_process [ 233.002973][ T6011] [ 233.005275][ T6011] read-write to 0xffffffff8685ff98 of 4 bytes by task 6033 on cpu 1: [ 233.013316][ T6011] alloc_pid+0x539/0x720 [ 233.017544][ T6011] copy_process+0xe25/0x2000 [ 233.022124][ T6011] kernel_clone+0x16c/0x5c0 [ 233.026619][ T6011] user_mode_thread+0x7d/0xb0 [ 233.031287][ T6011] call_usermodehelper_exec_work+0x41/0x160 [ 233.037164][ T6011] process_scheduled_works+0x4ce/0x9d0 [ 233.042619][ T6011] worker_thread+0x582/0x770 [ 233.047193][ T6011] kthread+0x489/0x510 [ 233.051246][ T6011] ret_from_fork+0x122/0x1b0 [ 233.055822][ T6011] ret_from_fork_asm+0x1a/0x30 [ 233.060572][ T6011] [ 233.062874][ T6011] read to 0xffffffff8685ff98 of 4 bytes by task 6011 on cpu 0: [ 233.070393][ T6011] copy_process+0x17fc/0x2000 [ 233.075062][ T6011] kernel_clone+0x16c/0x5c0 [ 233.079556][ T6011] user_mode_thread+0x7d/0xb0 [ 233.084226][ T6011] call_usermodehelper_exec_work+0x41/0x160 [ 233.090101][ T6011] process_scheduled_works+0x4ce/0x9d0 [ 233.095557][ T6011] worker_thread+0x582/0x770 [ 233.100128][ T6011] kthread+0x489/0x510 [ 233.104182][ T6011] ret_from_fork+0x122/0x1b0 [ 233.108757][ T6011] ret_from_fork_asm+0x1a/0x30 [ 233.113510][ T6011] [ 233.115812][ T6011] value changed: 0x8000013d -> 0x8000013e [ 233.121506][ T6011] [ 233.123820][ T6011] Reported by Kernel Concurrency Sanitizer on: [ 233.129959][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: kworker/u8:29 Tainted: G W syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.141493][ T6011] Tainted: [W]=WARN [ 233.145281][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.155319][ T6011] Workqueue: events_unbound call_usermodehelper_exec_work [ 233.162416][ T6011] ================================================================== [ 233.268445][T23324] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 233.277815][T23324] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 233.343509][ T6019] batadv2: left allmulticast mode [ 233.348751][ T6019] batadv2: left promiscuous mode [ 233.353786][ T6019] bridge0: port 4(batadv2) entered disabled state [ 233.360847][ T6019] batadv1: left allmulticast mode [ 233.365864][ T6019] batadv1: left promiscuous mode [ 233.371089][ T6019] bridge0: port 3(batadv1) entered disabled state [ 233.378990][ T6019] bridge_slave_1: left allmulticast mode [ 233.384630][ T6019] bridge_slave_1: left promiscuous mode [ 233.390400][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.398112][ T6019] bridge_slave_0: left allmulticast mode [ 233.403799][ T6019] bridge_slave_0: left promiscuous mode [ 233.409505][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.490586][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.500717][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.510039][ T6019] bond0 (unregistering): Released all slaves [ 233.597259][ T6019] hsr_slave_0: left promiscuous mode [ 233.603574][ T6019] hsr_slave_1: left promiscuous mode [ 233.610187][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.617623][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.626566][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.634019][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.643365][ T6019] veth1_macvtap: left promiscuous mode [ 233.648844][ T6019] veth0_macvtap: left promiscuous mode [ 233.677516][ T6019] pimreg (unregistering): left allmulticast mode [ 233.698784][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 233.707751][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 234.102498][ T6019] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.170775][ T6019] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.240387][ T6019] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.290283][ T6019] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.371065][ T6019] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.429100][ T6019] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.478956][ T6019] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.519020][ T6019] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.600707][ T6019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.648986][ T6019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.698774][ T6019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.759110][ T6019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.831069][ T6019] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.840934][ T6019] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.889438][ T6019] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.899277][ T6019] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.939156][ T6019] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.948951][ T6019] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.989528][ T6019] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.999298][ T6019] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.051590][ T6019] bridge_slave_1: left allmulticast mode [ 235.057233][ T6019] bridge_slave_1: left promiscuous mode [ 235.062887][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.070444][ T6019] bridge_slave_0: left allmulticast mode [ 235.076103][ T6019] bridge_slave_0: left promiscuous mode [ 235.081852][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.089813][ T6019] bridge_slave_1: left allmulticast mode [ 235.095489][ T6019] bridge_slave_1: left promiscuous mode [ 235.101248][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.108892][ T6019] bridge_slave_0: left allmulticast mode [ 235.114508][ T6019] bridge_slave_0: left promiscuous mode [ 235.120127][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.128490][ T6019] batadv1: left allmulticast mode [ 235.133502][ T6019] batadv1: left promiscuous mode [ 235.138516][ T6019] bridge0: port 3(batadv1) entered disabled state [ 235.145545][ T6019] bridge_slave_1: left allmulticast mode [ 235.151192][ T6019] bridge_slave_1: left promiscuous mode [ 235.156913][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.164605][ T6019] bridge_slave_0: left allmulticast mode [ 235.170265][ T6019] bridge_slave_0: left promiscuous mode [ 235.175845][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.183885][ T6019] batadv1: left allmulticast mode [ 235.188920][ T6019] batadv1: left promiscuous mode [ 235.193952][ T6019] bridge0: port 3(batadv1) entered disabled state [ 235.200913][ T6019] bridge_slave_1: left allmulticast mode [ 235.206608][ T6019] bridge_slave_1: left promiscuous mode [ 235.212213][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.219939][ T6019] bridge_slave_0: left allmulticast mode [ 235.225582][ T6019] bridge_slave_0: left promiscuous mode [ 235.231208][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.239511][ T6019] batadv1: left allmulticast mode [ 235.244627][ T6019] batadv1: left promiscuous mode [ 235.249697][ T6019] bridge0: port 3(batadv1) entered disabled state [ 235.256567][ T6019] bridge_slave_1: left allmulticast mode [ 235.262223][ T6019] bridge_slave_1: left promiscuous mode [ 235.267827][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.275435][ T6019] bridge_slave_0: left allmulticast mode [ 235.281089][ T6019] bridge_slave_0: left promiscuous mode [ 235.286732][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.369313][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.378883][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.388156][ T6019] bond0 (unregistering): Released all slaves [ 235.440037][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.449808][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.459275][ T6019] bond0 (unregistering): Released all slaves [ 235.589506][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.598680][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.607544][ T6019] bond0 (unregistering): Released all slaves [ 235.659984][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.669295][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.678135][ T6019] bond0 (unregistering): Released all slaves [ 235.730168][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.739982][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.749401][ T6019] bond0 (unregistering): Released all slaves [ 235.759378][ T4972] syz0: Port: 1 Link DOWN [ 235.919059][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.926667][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.935500][ T6019] hsr_slave_0: left promiscuous mode [ 235.941055][ T6019] hsr_slave_1: left promiscuous mode [ 235.946557][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.954047][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.961660][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.969166][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.977260][ T6019] hsr_slave_0: left promiscuous mode [ 235.982924][ T6019] hsr_slave_1: left promiscuous mode [ 235.988463][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.995743][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.004636][ T6019] hsr_slave_0: left promiscuous mode [ 236.010228][ T6019] hsr_slave_1: left promiscuous mode [ 236.015761][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.023131][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.032094][ T6019] hsr_slave_0: left promiscuous mode [ 236.037562][ T6019] hsr_slave_1: left promiscuous mode [ 236.043070][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.050511][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.058064][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.065424][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.076840][ T6019] veth1_macvtap: left promiscuous mode [ 236.082340][ T6019] veth0_macvtap: left promiscuous mode [ 236.087809][ T6019] veth1_vlan: left promiscuous mode [ 236.093112][ T6019] veth0_vlan: left promiscuous mode [ 236.098684][ T6019] veth1_macvtap: left promiscuous mode [ 236.104137][ T6019] veth0_macvtap: left promiscuous mode [ 236.109616][ T6019] veth1_vlan: left promiscuous mode [ 236.114828][ T6019] veth0_vlan: left promiscuous mode [ 236.186416][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 236.196317][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 236.222824][ T6019] pimreg (unregistering): left allmulticast mode [ 236.249807][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 236.258922][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 236.285800][ T6019] pimreg (unregistering): left allmulticast mode [ 236.308722][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 236.317703][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 236.365431][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 236.374946][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 236.401175][ T6019] pimreg (unregistering): left allmulticast mode [ 236.427789][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 236.437120][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 236.448306][ T6011] smc: removing ib device syz0 [ 236.453714][ T6004] smc: removing ib device syz! [ 237.806936][ T6019] IPVS: stop unused estimator thread 0... [ 237.812937][ T6019] IPVS: stop unused estimator thread 0... [ 237.819007][ T6019] IPVS: stop unused estimator thread 0...