last executing test programs: 6.736569284s ago: executing program 1 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff2900000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="0800892f00040900"], 0xfce) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x7) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)=r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 5.368431544s ago: executing program 1 (id=617): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) open(0x0, 0x10080, 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="402226000000260a743743d3797c9da6ba0f6417814308e0b60bb53c6141fee2181757b26429e19ca3250be5"], &(0x7f0000000d80)=ANY=[], &(0x7f0000000400)=ANY=[@ANYBLOB="000f05000000050f05000018f364240163360ea69078ec70d433747b277773c9c4c35bdfc3353d76c13f3f15c4da5c2d2fce29dd36466d265203823b1a187d3f67723bfb2911b8378c617443a36749ca1615ff68efe939112d050ab29cdc10955944c42cf0757d50aa2e32802a2258374415f89f49e1187f9a23034015a306cd19895c0595969b939aa1339832b5b1eacfb3a20e17586d97ad62ba0f955ded5ade8541800e192d8c82f833d981cfe4059de9e6b9030709b5b5ee6b4a9a6f319381f2136024"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x2, "f0dc2cc5", "aba578b1"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xf, 0x6, 0x0, 0x5, 0x2}}}, &(0x7f0000001340)={0x84, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000340)=ANY=[@ANYBLOB="1a277ce3f5ae6e175704e848cba9b88f63d2b57b4b000461846eb75802d131bb7edcbb10c8523b7b4bcfd59af5d5ebf630d897c529a3e79ffc73d7141c942d62b3ee4c82a3fba8f5fd59c1df833a9246c891df867ce666bee29dc98eef5ec6b2d1b9ec86f6519121ea71fa934e2a7cc107e543e0d15f33cb968d5ae2097407c166e868ffb5637cafb13758cb3271acbedf4a053403b7e7"], &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "9fd7"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001140)={0x40, 0x13, 0x6}, &(0x7f0000001180)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "d704"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001280)={0x40, 0x1c, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xf8}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = eventfd2(0x3, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x10000000}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) close(0x3) acct(0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 3.509477465s ago: executing program 3 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000002c0)=@chain) 3.311937771s ago: executing program 3 (id=633): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_setup(0x7e, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) io_setup(0x30, &(0x7f0000000600)=0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000000c0)="01", 0x24}]) 3.257009896s ago: executing program 4 (id=635): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) 3.124234387s ago: executing program 1 (id=637): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x17, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() clock_getres(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10010, &(0x7f0000000100)={[{@debug}, {@mblk_io_submit}, {@minixdf}, {@lazytime}, {@discard}, {@oldalloc}], [{@seclabel}]}, 0x0, 0x45d, &(0x7f0000000a80)="$eJzs28+PE1UcAPDvtN3lp1IJ/uCHuopG/LXLLogcvGg08aCJiR7wWHcXghTWsGsihCgagydjSLwbjyb+BZ70YtSTiVe9GxJiuIB6qZntDNuWtm6hu4P280kG3pt57Xvfzrz2zXs7AYysifSfJGJrRPwaEdua2fYCE83/rl05N/vnlXOzSTQar/+RLJe7euXcbF40f92WPFOJKH2cxO4u9S6eOXuiVq/Pn87yU0sn35laPHP26eMna8fmj82fmjl8+OCB6WcPzTwzlDjTuK7uen9hz86X37z46uyRi2/9+HWSx98Rx5BM9Dv4aKMx5OqKdUdLOqkU2BAGUm520xhb7v/bohwrJ29bvPRRoY0D1lSj0Wjc0/vw+QbwP5ZE0S0AipH/0Kf3v/m2TkOP28Ll55s3QGnc17KteaQSpazMWMf97TBNRMSR8399kW6xNvMQAABtvk3HP09l47+2hZ9StM4L3ZmtoVQj4q6I2B4RhyJiR0TcHbFc9t6IuG/A+jsXSW4c/5QuDfiWA0nHf89la1vt47989BfVcsTf+XC5GmPJ0eP1+f3ZZ7Ivxjak+ek+dXz34i+f9TrWOv5Lt7T+fCyYteNSZUP7a+ZqS7VbibnV5Q8jdlW6xZ9cXwlIL4udEbGr57t8+ni/Oo4/8dWeXsf+Pf52462ZIawzNb6MeKx5/s9HR/y5pP/65NTGqM/vn8qvihv99POF13rVP2j8w5ae/81dr//r8VeT1vXaxcHruPDbJz3vaW72+h9P3mjb915taen0dMR48kqz0a37ZzrKzayUT+Pft7d7/98eK5/E7ohIL+L7I+KBiHgwa/tDEfFwROztE/8PLzzydvueZID411Ya/9xA538lMR6de7onyie+/6at0moMEH96/g8up/Zle1bz/beadt3c1QwAAAD/PaWI2BpJafJ6ulSanGz+Df+O2FyqLywuPXl04d1Tc81nBKoxVspnuprzwc350Onstj7Pz3TkD2Tzxp+XNy3nJ2cX6nNFBw8jbkuP/p/6vVx064A153ktGF36P4wu/R9Gl/4Po6tL/99URDuA9dft9/+DAtoBrL+O/m/ZD0aI+38YXfo/jC79H0bS4qY4UavXK6t7Wr5fYsMAT90PKbFxHeuS6EhEqbja8xmqwj+E7omNEXEbNOPWEgV/MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzJPwEAAP//03vjRA==") socket$inet6_tcp(0xa, 0x1, 0x0) 3.068919361s ago: executing program 3 (id=638): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x5, 0x3ff, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2.83157506s ago: executing program 3 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff2900000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.616604528s ago: executing program 1 (id=642): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) open(0x0, 0x10080, 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="402226000000260a743743d3797c9da6ba0f6417814308e0b60bb53c6141fee2181757b26429e19ca3250be5"], &(0x7f0000000d80)=ANY=[], &(0x7f0000000400)=ANY=[@ANYBLOB="000f05000000050f05000018f364240163360ea69078ec70d433747b277773c9c4c35bdfc3353d76c13f3f15c4da5c2d2fce29dd36466d265203823b1a187d3f67723bfb2911b8378c617443a36749ca1615ff68efe939112d050ab29cdc10955944c42cf0757d50aa2e32802a2258374415f89f49e1187f9a23034015a306cd19895c0595969b939aa1339832b5b1eacfb3a20e17586d97ad62ba0f955ded5ade8541800e192d8c82f833d981cfe4059de9e6b9030709b5b5ee6b4a9a6f319381f2136024"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x2, "f0dc2cc5", "aba578b1"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xf, 0x6, 0x0, 0x5, 0x2}}}, &(0x7f0000001340)={0x84, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000340)=ANY=[@ANYBLOB="1a277ce3f5ae6e175704e848cba9b88f63d2b57b4b000461846eb75802d131bb7edcbb10c8523b7b4bcfd59af5d5ebf630d897c529a3e79ffc73d7141c942d62b3ee4c82a3fba8f5fd59c1df833a9246c891df867ce666bee29dc98eef5ec6b2d1b9ec86f6519121ea71fa934e2a7cc107e543e0d15f33cb968d5ae2097407c166e868ffb5637cafb13758cb3271acbedf4a053403b7e7"], &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "9fd7"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001140)={0x40, 0x13, 0x6}, &(0x7f0000001180)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "d704"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001280)={0x40, 0x1c, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xf8}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = eventfd2(0x3, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x10000000}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) close(0x3) acct(0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r6, 0xffffffffffffffff, 0x0) 2.182159803s ago: executing program 4 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 2.042834794s ago: executing program 0 (id=646): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, r0, 0x4, r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80800) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) 2.026686835s ago: executing program 0 (id=648): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) open(0x0, 0x10080, 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="402226000000260a743743d3797c9da6ba0f6417814308e0b60bb53c6141fee2181757b26429e19ca3250be5"], &(0x7f0000000d80)=ANY=[], &(0x7f0000000400)=ANY=[@ANYBLOB="000f05000000050f05000018f364240163360ea69078ec70d433747b277773c9c4c35bdfc3353d76c13f3f15c4da5c2d2fce29dd36466d265203823b1a187d3f67723bfb2911b8378c617443a36749ca1615ff68efe939112d050ab29cdc10955944c42cf0757d50aa2e32802a2258374415f89f49e1187f9a23034015a306cd19895c0595969b939aa1339832b5b1eacfb3a20e17586d97ad62ba0f955ded5ade8541800e192d8c82f833d981cfe4059de9e6b9030709b5b5ee6b4a9a6f319381f2136024"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x2, "f0dc2cc5", "aba578b1"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0xf, 0x6, 0x0, 0x5, 0x2}}}, &(0x7f0000001340)={0x84, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000340)=ANY=[@ANYBLOB="1a277ce3f5ae6e175704e848cba9b88f63d2b57b4b000461846eb75802d131bb7edcbb10c8523b7b4bcfd59af5d5ebf630d897c529a3e79ffc73d7141c942d62b3ee4c82a3fba8f5fd59c1df833a9246c891df867ce666bee29dc98eef5ec6b2d1b9ec86f6519121ea71fa934e2a7cc107e543e0d15f33cb968d5ae2097407c166e868ffb5637cafb13758cb3271acbedf4a053403b7e7"], &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "9fd7"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001140)={0x40, 0x13, 0x6}, &(0x7f0000001180)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "d704"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001280)={0x40, 0x1c, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xf8}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = eventfd2(0x3, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x10000000}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) close(0x3) acct(0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 1.72324852s ago: executing program 4 (id=649): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) 1.501541628s ago: executing program 4 (id=653): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000edff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="240003"], 0x10e0}}, 0x0) 504.698719ms ago: executing program 0 (id=660): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r1) 169.975056ms ago: executing program 0 (id=663): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 97.953452ms ago: executing program 0 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000edff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r9, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r10, @ANYBLOB="240003"], 0x10e0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x2}]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r11, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 84.923803ms ago: executing program 1 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) 33.798257ms ago: executing program 2 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000640), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r2) 0s ago: executing program 2 (id=667): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000edff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x2}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r10, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 33.761254][ T29] audit: type=1400 audit(1754685805.585:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.762510][ T3291] cgroup: Unknown subsys name 'net' [ 33.786110][ T29] audit: type=1400 audit(1754685805.585:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.816176][ T29] audit: type=1400 audit(1754685805.625:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.958052][ T3291] cgroup: Unknown subsys name 'cpuset' [ 33.964595][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.155783][ T29] audit: type=1400 audit(1754685805.975:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.181122][ T29] audit: type=1400 audit(1754685805.975:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.201666][ T29] audit: type=1400 audit(1754685805.985:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.222364][ T29] audit: type=1400 audit(1754685805.985:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.243058][ T29] audit: type=1400 audit(1754685805.985:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.252093][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.268231][ T29] audit: type=1400 audit(1754685805.985:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.300350][ T29] audit: type=1400 audit(1754685806.095:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.327034][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.323288][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 36.403228][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.414944][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 36.443536][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.450833][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.458273][ T3303] bridge_slave_0: entered allmulticast mode [ 36.464995][ T3303] bridge_slave_0: entered promiscuous mode [ 36.475384][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.497501][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.504809][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.512746][ T3303] bridge_slave_1: entered allmulticast mode [ 36.519215][ T3303] bridge_slave_1: entered promiscuous mode [ 36.545932][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.575569][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.644380][ T3303] team0: Port device team_slave_0 added [ 36.650350][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.657581][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.665250][ T3306] bridge_slave_0: entered allmulticast mode [ 36.672166][ T3306] bridge_slave_0: entered promiscuous mode [ 36.678930][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.686549][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.693896][ T3308] bridge_slave_0: entered allmulticast mode [ 36.700500][ T3308] bridge_slave_0: entered promiscuous mode [ 36.710069][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.717227][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.724496][ T3308] bridge_slave_1: entered allmulticast mode [ 36.731201][ T3308] bridge_slave_1: entered promiscuous mode [ 36.740183][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 36.749688][ T3303] team0: Port device team_slave_1 added [ 36.758668][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.766085][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.773967][ T3306] bridge_slave_1: entered allmulticast mode [ 36.780849][ T3306] bridge_slave_1: entered promiscuous mode [ 36.826986][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.846950][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.854297][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.861922][ T3301] bridge_slave_0: entered allmulticast mode [ 36.868859][ T3301] bridge_slave_0: entered promiscuous mode [ 36.879157][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.888983][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.896039][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.922844][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.935133][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.944797][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.951924][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.977955][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.988824][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.996254][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.003647][ T3301] bridge_slave_1: entered allmulticast mode [ 37.010237][ T3301] bridge_slave_1: entered promiscuous mode [ 37.026005][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.072867][ T3308] team0: Port device team_slave_0 added [ 37.089950][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.104452][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.111799][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.119088][ T3310] bridge_slave_0: entered allmulticast mode [ 37.125954][ T3310] bridge_slave_0: entered promiscuous mode [ 37.133381][ T3308] team0: Port device team_slave_1 added [ 37.140128][ T3306] team0: Port device team_slave_0 added [ 37.152281][ T3303] hsr_slave_0: entered promiscuous mode [ 37.158736][ T3303] hsr_slave_1: entered promiscuous mode [ 37.166308][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.175783][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.183266][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.190827][ T3310] bridge_slave_1: entered allmulticast mode [ 37.197666][ T3310] bridge_slave_1: entered promiscuous mode [ 37.210078][ T3306] team0: Port device team_slave_1 added [ 37.226916][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.234235][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.260849][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.288827][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.299479][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.309225][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.316639][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.342781][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.362219][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.369429][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.395983][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.431485][ T3301] team0: Port device team_slave_0 added [ 37.438656][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.445988][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.472861][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.488108][ T3310] team0: Port device team_slave_0 added [ 37.502642][ T3301] team0: Port device team_slave_1 added [ 37.515115][ T3310] team0: Port device team_slave_1 added [ 37.539167][ T3306] hsr_slave_0: entered promiscuous mode [ 37.545784][ T3306] hsr_slave_1: entered promiscuous mode [ 37.552466][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.558607][ T3306] Cannot create hsr debugfs directory [ 37.591134][ T3308] hsr_slave_0: entered promiscuous mode [ 37.597609][ T3308] hsr_slave_1: entered promiscuous mode [ 37.603506][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 37.609367][ T3308] Cannot create hsr debugfs directory [ 37.615394][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.622682][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.649753][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.664555][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.671662][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.699037][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.710495][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.717751][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.744021][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.756583][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.763656][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790890][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.865740][ T3310] hsr_slave_0: entered promiscuous mode [ 37.871911][ T3310] hsr_slave_1: entered promiscuous mode [ 37.878000][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 37.884010][ T3310] Cannot create hsr debugfs directory [ 37.894817][ T3301] hsr_slave_0: entered promiscuous mode [ 37.901535][ T3301] hsr_slave_1: entered promiscuous mode [ 37.907573][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.913498][ T3301] Cannot create hsr debugfs directory [ 38.093664][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.103227][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.114483][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.126923][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.148245][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.159775][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.175840][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.189269][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.199724][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.208954][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.220360][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.234850][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.272441][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.283511][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.292605][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.308962][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.339769][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.351064][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.365684][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.382577][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.396447][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.435051][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.455565][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.463005][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.474168][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.481368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.505998][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.532638][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.542958][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.573236][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.581122][ T1829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.592930][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.608554][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.625224][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.632522][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.642414][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.649655][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.659781][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.667574][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.708159][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.723226][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.745088][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.767580][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.778982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.786503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.796588][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.816839][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.824348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.834726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.842090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.852304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.859467][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.883002][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.906168][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.951558][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.962659][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.065914][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.100065][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.131798][ T3303] veth0_vlan: entered promiscuous mode [ 39.148321][ T3303] veth1_vlan: entered promiscuous mode [ 39.185798][ T3306] veth0_vlan: entered promiscuous mode [ 39.203453][ T3303] veth0_macvtap: entered promiscuous mode [ 39.212746][ T3301] veth0_vlan: entered promiscuous mode [ 39.224010][ T3306] veth1_vlan: entered promiscuous mode [ 39.233570][ T3303] veth1_macvtap: entered promiscuous mode [ 39.255842][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.265738][ T3301] veth1_vlan: entered promiscuous mode [ 39.288280][ T3306] veth0_macvtap: entered promiscuous mode [ 39.299782][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.309804][ T3306] veth1_macvtap: entered promiscuous mode [ 39.319821][ T3308] veth0_vlan: entered promiscuous mode [ 39.332277][ T3301] veth0_macvtap: entered promiscuous mode [ 39.340942][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.356928][ T3308] veth1_vlan: entered promiscuous mode [ 39.365769][ T3310] veth0_vlan: entered promiscuous mode [ 39.375741][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.385622][ T3310] veth1_vlan: entered promiscuous mode [ 39.398835][ T3301] veth1_macvtap: entered promiscuous mode [ 39.405918][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.422210][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.429970][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.451996][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.452036][ T29] audit: type=1400 audit(1754685811.275:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.3I89le/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.469794][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.484615][ T29] audit: type=1400 audit(1754685811.275:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.499365][ T3310] veth0_macvtap: entered promiscuous mode [ 39.512730][ T29] audit: type=1400 audit(1754685811.275:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.3I89le/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.521071][ T3310] veth1_macvtap: entered promiscuous mode [ 39.543840][ T29] audit: type=1400 audit(1754685811.275:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.557253][ T3308] veth0_macvtap: entered promiscuous mode [ 39.571523][ T29] audit: type=1400 audit(1754685811.275:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.3I89le/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.584380][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.604380][ T29] audit: type=1400 audit(1754685811.275:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.3I89le/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.633276][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.640214][ T29] audit: type=1400 audit(1754685811.275:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.647674][ T3438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.679235][ T29] audit: type=1400 audit(1754685811.385:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.704325][ T29] audit: type=1400 audit(1754685811.385:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.732355][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.733513][ T3308] veth1_macvtap: entered promiscuous mode [ 39.754977][ T3438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.765409][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.776206][ T29] audit: type=1400 audit(1754685811.595:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.810143][ T3438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.824812][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.838882][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.850442][ T3438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861396][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.884171][ T3472] bridge_slave_0: left allmulticast mode [ 39.889932][ T3472] bridge_slave_0: left promiscuous mode [ 39.895682][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.904822][ T3472] bridge_slave_1: left allmulticast mode [ 39.910877][ T3472] bridge_slave_1: left promiscuous mode [ 39.916589][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.925857][ T3472] bond0: (slave bond_slave_0): Releasing backup interface [ 39.935347][ T3472] bond0: (slave bond_slave_1): Releasing backup interface [ 39.946714][ T3472] team0: Port device team_slave_0 removed [ 39.955316][ T3472] team0: Port device team_slave_1 removed [ 39.962117][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.971211][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.980423][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.988207][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.003412][ T3438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.051350][ T3438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.075310][ T3438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118722][ T3438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.130421][ T3476] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.140130][ T3478] loop9: detected capacity change from 0 to 7 [ 40.145372][ T3438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.155378][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.198117][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.206363][ T3292] loop9: unable to read partition table [ 40.226331][ T3478] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.236240][ T3478] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.244355][ T3478] loop9: unable to read partition table [ 40.251137][ T3478] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 40.251137][ T3478] ) failed (rc=-5) [ 40.265104][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.279442][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.290146][ T3438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.305055][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.338709][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.360382][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.370425][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.395715][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.414917][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.430090][ T3487] loop2: detected capacity change from 0 to 512 [ 40.467413][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471968][ T3487] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.482996][ T3487] EXT4-fs: Ignoring removed oldalloc option [ 40.507421][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.548965][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.562754][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.576703][ T3487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.588728][ T3495] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10'. [ 40.600453][ T3497] tipc: Started in network mode [ 40.605641][ T3497] tipc: Node identity f27ee671951f, cluster identity 4711 [ 40.613456][ T3497] tipc: Enabled bearer , priority 0 [ 40.646905][ T3497] tipc: Disabling bearer [ 40.656460][ T3487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 40.672867][ T3487] System zones: 1-12 [ 40.712018][ T3487] EXT4-fs (loop2): 1 truncate cleaned up [ 40.727819][ T3487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.805373][ C0] hrtimer: interrupt took 38949 ns [ 40.856584][ T3509] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 40.865014][ T3509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.881540][ T3513] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 40.894490][ T3513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 40.924211][ T3509] dummy0: entered promiscuous mode [ 40.953476][ T3509] bridge0: port 3(dummy0) entered blocking state [ 40.961275][ T3509] bridge0: port 3(dummy0) entered disabled state [ 40.972063][ T3515] loop9: detected capacity change from 0 to 7 [ 40.979588][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.989913][ T3515] loop9: unable to read partition table [ 40.995948][ T3515] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 40.995948][ T3515] ) failed (rc=-5) [ 41.030793][ T3509] dummy0: entered allmulticast mode [ 41.057913][ T3509] bridge0: port 3(dummy0) entered blocking state [ 41.065062][ T3509] bridge0: port 3(dummy0) entered forwarding state [ 41.096230][ T3513] dummy0: entered promiscuous mode [ 41.113201][ T3513] bridge0: port 3(dummy0) entered blocking state [ 41.121457][ T3513] bridge0: port 3(dummy0) entered disabled state [ 41.143074][ T3509] syz.3.14 (3509) used greatest stack depth: 10632 bytes left [ 41.152071][ T3513] dummy0: entered allmulticast mode [ 41.215364][ T3513] bridge0: port 3(dummy0) entered blocking state [ 41.223115][ T3513] bridge0: port 3(dummy0) entered forwarding state [ 41.346653][ T3519] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 41.355832][ T3519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.701756][ T3531] dummy0: left allmulticast mode [ 41.709847][ T3532] loop1: detected capacity change from 0 to 512 [ 41.719767][ T3531] bridge0: port 3(dummy0) entered disabled state [ 41.729926][ T3532] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.736542][ T3532] EXT4-fs: Ignoring removed oldalloc option [ 41.763937][ T3531] bridge_slave_0: left allmulticast mode [ 41.769691][ T3531] bridge_slave_0: left promiscuous mode [ 41.775710][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.793428][ T3532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.804005][ T3526] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 41.841346][ T3532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 41.870452][ T3532] System zones: 1-12 [ 41.875827][ T3532] EXT4-fs (loop1): 1 truncate cleaned up [ 41.876464][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.885583][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.906711][ T3531] bridge_slave_1: left allmulticast mode [ 41.912958][ T3531] bridge_slave_1: left promiscuous mode [ 41.919010][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.943958][ T3531] bond0: (slave bond_slave_0): Releasing backup interface [ 41.958095][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 41.980928][ T3531] bond0: (slave bond_slave_1): Releasing backup interface [ 42.001383][ T3531] team0: Port device team_slave_0 removed [ 42.013572][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.026499][ T3531] team0: Port device team_slave_1 removed [ 42.068453][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.076663][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.130595][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.138374][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.365464][ T3562] loop9: detected capacity change from 0 to 7 [ 42.410768][ T3292] loop9: unable to read partition table [ 42.421587][ T3562] loop9: unable to read partition table [ 42.432897][ T3562] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 42.432897][ T3562] ) failed (rc=-5) [ 42.873316][ T3575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 43.001986][ T3579] dummy0: left allmulticast mode [ 43.041466][ T3579] bridge0: port 3(dummy0) entered disabled state [ 43.066947][ T3579] bridge_slave_0: left allmulticast mode [ 43.073061][ T3579] bridge_slave_0: left promiscuous mode [ 43.078912][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.093954][ T3579] bridge_slave_1: left allmulticast mode [ 43.099813][ T3579] bridge_slave_1: left promiscuous mode [ 43.105832][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.119722][ T3579] bond0: (slave bond_slave_0): Releasing backup interface [ 43.140063][ T3579] bond0: (slave bond_slave_1): Releasing backup interface [ 43.150744][ T3584] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 43.161454][ T3584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36'. [ 43.177719][ T3579] team0: Port device team_slave_0 removed [ 43.186121][ T3586] loop2: detected capacity change from 0 to 1024 [ 43.194391][ T3586] ======================================================= [ 43.194391][ T3586] WARNING: The mand mount option has been deprecated and [ 43.194391][ T3586] and is ignored by this kernel. Remove the mand [ 43.194391][ T3586] option from the mount to silence this warning. [ 43.194391][ T3586] ======================================================= [ 43.231742][ T3579] team0: Port device team_slave_1 removed [ 43.245921][ T3586] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.258327][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.265763][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.275161][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.283065][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.306567][ T3586] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.37: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.323651][ T3586] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.37: Failed to acquire dquot type 0 [ 43.329631][ T3584] dummy0: entered promiscuous mode [ 43.343333][ T3586] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.37: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.405310][ T3584] bridge0: port 1(dummy0) entered blocking state [ 43.413359][ T3584] bridge0: port 1(dummy0) entered disabled state [ 43.427585][ T3586] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.37: Invalid inode bitmap blk 0 in block_group 0 [ 43.448577][ T3584] dummy0: entered allmulticast mode [ 43.454997][ T3438] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.470703][ T3586] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 43.489394][ T3438] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 43.512539][ T3586] EXT4-fs (loop2): 1 orphan inode deleted [ 43.518857][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.551546][ T3584] bridge0: port 1(dummy0) entered blocking state [ 43.559618][ T3584] bridge0: port 1(dummy0) entered forwarding state [ 43.598431][ T3586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.708376][ T3600] bridge_slave_0: left allmulticast mode [ 43.714347][ T3600] bridge_slave_0: left promiscuous mode [ 43.720375][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.742516][ T3600] bridge_slave_1: left allmulticast mode [ 43.748501][ T3600] bridge_slave_1: left promiscuous mode [ 43.754500][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.766146][ T3600] bond0: (slave bond_slave_0): Releasing backup interface [ 43.781874][ T3600] bond0: (slave bond_slave_1): Releasing backup interface [ 43.905703][ T3600] team0: Port device team_slave_0 removed [ 43.938275][ T3600] team0: Port device team_slave_1 removed [ 43.952229][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.959829][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.970376][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.978313][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.025716][ T3625] random: crng reseeded on system resumption [ 44.045280][ T3608] dummy0: left allmulticast mode [ 44.050691][ T3608] bridge0: port 1(dummy0) entered disabled state [ 44.206740][ T3632] loop1: detected capacity change from 0 to 512 [ 44.217602][ T3632] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.224563][ T3632] EXT4-fs: Ignoring removed oldalloc option [ 44.244273][ T3632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.261899][ T3635] loop4: detected capacity change from 0 to 8192 [ 44.273335][ T3632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 44.289684][ T3632] System zones: 1-12 [ 44.304950][ T3632] EXT4-fs (loop1): 1 truncate cleaned up [ 44.312020][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.376642][ T3638] netlink: 96 bytes leftover after parsing attributes in process `syz.2.49'. [ 44.402052][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.473219][ T3642] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 44.483651][ T3642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 44.493777][ T3642] dummy0: entered promiscuous mode [ 44.510950][ T3642] bridge0: port 1(dummy0) entered blocking state [ 44.542689][ T3642] bridge0: port 1(dummy0) entered disabled state [ 44.552616][ T3642] dummy0: entered allmulticast mode [ 44.583023][ T3642] bridge0: port 1(dummy0) entered blocking state [ 44.591570][ T3642] bridge0: port 1(dummy0) entered forwarding state [ 44.814049][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 44.814065][ T29] audit: type=1400 audit(1754685816.635:787): avc: denied { ioctl } for pid=3653 comm="+}[@" path="socket:[4833]" dev="sockfs" ino=4833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.916922][ T29] audit: type=1400 audit(1754685816.665:788): avc: denied { create } for pid=3657 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.937260][ T29] audit: type=1326 audit(1754685816.685:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 44.961109][ T29] audit: type=1326 audit(1754685816.685:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 44.985232][ T29] audit: type=1326 audit(1754685816.685:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 45.008620][ T29] audit: type=1326 audit(1754685816.685:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 45.032387][ T29] audit: type=1326 audit(1754685816.685:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 45.055937][ T29] audit: type=1326 audit(1754685816.685:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 45.081513][ T29] audit: type=1400 audit(1754685816.695:795): avc: denied { bind } for pid=3653 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.101070][ T29] audit: type=1400 audit(1754685816.695:796): avc: denied { write } for pid=3653 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.159404][ T3662] loop0: detected capacity change from 0 to 512 [ 45.174526][ T3662] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.181623][ T3662] EXT4-fs: Ignoring removed oldalloc option [ 45.255231][ T3661] __nla_validate_parse: 3 callbacks suppressed [ 45.255250][ T3661] netlink: 96 bytes leftover after parsing attributes in process `syz.2.59'. [ 45.270632][ T3662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.444006][ T3671] random: crng reseeded on system resumption [ 45.453751][ T3662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 45.462232][ T3662] System zones: 1-12 [ 45.470345][ T3662] EXT4-fs (loop0): 1 truncate cleaned up [ 45.477869][ T3662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.523277][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.076951][ T3688] random: crng reseeded on system resumption [ 46.136813][ T3692] process 'syz.3.66' launched '/dev/fd/8' with NULL argv: empty string added [ 46.195829][ T3690] loop0: detected capacity change from 0 to 512 [ 46.207967][ T3690] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.214557][ T3690] EXT4-fs: Ignoring removed oldalloc option [ 46.222084][ T3690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.233226][ T3690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 46.241329][ T3690] System zones: 1-12 [ 46.245943][ T3690] EXT4-fs (loop0): 1 truncate cleaned up [ 46.252553][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.291045][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.300044][ T3698] netlink: 'syz.3.68': attribute type 3 has an invalid length. [ 46.391564][ T3708] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 46.401998][ T3708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 46.413337][ T3711] syz.0.69 uses obsolete (PF_INET,SOCK_PACKET) [ 46.415735][ T3708] bridge0: port 1(dummy0) entered blocking state [ 46.428884][ T3708] bridge0: port 1(dummy0) entered disabled state [ 46.438252][ T3708] dummy0: entered allmulticast mode [ 46.451925][ T3708] bridge0: port 1(dummy0) entered blocking state [ 46.458907][ T3708] bridge0: port 1(dummy0) entered forwarding state [ 46.521396][ T3717] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 46.532969][ T3717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.589472][ T3722] netlink: 96 bytes leftover after parsing attributes in process `syz.3.79'. [ 46.631101][ T3720] bridge_slave_0: left allmulticast mode [ 46.636917][ T3720] bridge_slave_0: left promiscuous mode [ 46.642994][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.652934][ T3724] loop3: detected capacity change from 0 to 512 [ 46.661522][ T3720] bridge_slave_1: left allmulticast mode [ 46.667476][ T3720] bridge_slave_1: left promiscuous mode [ 46.673486][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.675844][ T3724] ext4: Unknown parameter 'subj_user' [ 46.691171][ T3720] bond0: (slave bond_slave_0): Releasing backup interface [ 46.713007][ T3720] bond0: (slave bond_slave_1): Releasing backup interface [ 46.729149][ T3720] team0: Port device team_slave_0 removed [ 46.738083][ T3720] team0: Port device team_slave_1 removed [ 46.744989][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.752976][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.762654][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.770321][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.771441][ T3730] ALSA: seq fatal error: cannot create timer (-19) [ 46.818100][ T3729] dummy0: left allmulticast mode [ 46.836987][ T3729] bridge0: port 1(dummy0) entered disabled state [ 46.944412][ T3743] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 46.962141][ T3743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.87'. [ 46.974716][ T3743] bridge0: port 1(dummy0) entered blocking state [ 46.982860][ T3743] bridge0: port 1(dummy0) entered disabled state [ 46.994398][ T3743] dummy0: entered allmulticast mode [ 47.010168][ T3743] bridge0: port 1(dummy0) entered blocking state [ 47.017471][ T3743] bridge0: port 1(dummy0) entered forwarding state [ 47.034332][ T3745] netlink: 96 bytes leftover after parsing attributes in process `syz.2.88'. [ 47.057132][ T3748] netlink: 'syz.3.83': attribute type 21 has an invalid length. [ 47.065195][ T3748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.83'. [ 47.158734][ T3753] loop4: detected capacity change from 0 to 512 [ 47.179784][ T3757] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 47.183779][ T3753] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.188904][ T3757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.92'. [ 47.194878][ T3753] EXT4-fs: Ignoring removed oldalloc option [ 47.196583][ T3753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.228184][ T3753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 47.236532][ T3753] System zones: 1-12 [ 47.243309][ T3753] EXT4-fs (loop4): 1 truncate cleaned up [ 47.250229][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.262534][ T3757] dummy0: entered promiscuous mode [ 47.284144][ T3757] bridge0: port 1(dummy0) entered blocking state [ 47.291619][ T3757] bridge0: port 1(dummy0) entered disabled state [ 47.329278][ T3757] dummy0: entered allmulticast mode [ 47.346983][ T3763] netlink: 'syz.2.94': attribute type 10 has an invalid length. [ 47.355602][ T3763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.94'. [ 47.378718][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.388492][ T3757] bridge0: port 1(dummy0) entered blocking state [ 47.396144][ T3757] bridge0: port 1(dummy0) entered forwarding state [ 47.412797][ T3765] loop4: detected capacity change from 0 to 256 [ 47.427136][ T3765] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.443167][ T3763] bridge0: port 1(dummy0) entered blocking state [ 47.451687][ T3763] bridge0: port 1(dummy0) entered disabled state [ 47.463752][ T3763] dummy0: entered allmulticast mode [ 47.494266][ T3763] bridge0: port 1(dummy0) entered blocking state [ 47.495133][ T3767] loop0: detected capacity change from 0 to 512 [ 47.502546][ T3763] bridge0: port 1(dummy0) entered forwarding state [ 47.510287][ T3767] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.521153][ T3767] EXT4-fs: Ignoring removed oldalloc option [ 47.527867][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 47.539214][ T3767] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.553675][ T3767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 47.562567][ T3767] System zones: 1-12 [ 47.568290][ T3767] EXT4-fs (loop0): 1 truncate cleaned up [ 47.576646][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.591155][ T3765] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 47.648774][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.721277][ T3778] random: crng reseeded on system resumption [ 47.774102][ T3771] loop9: detected capacity change from 0 to 7 [ 47.803890][ T3771] buffer_io_error: 25 callbacks suppressed [ 47.803908][ T3771] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.819193][ T3771] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.827185][ T3771] loop9: unable to read partition table [ 47.864345][ T3771] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 47.864345][ T3771] ) failed (rc=-5) [ 47.880021][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.896874][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.915269][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.946145][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.973987][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.029028][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.049772][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.069757][ T3792] loop2: detected capacity change from 0 to 512 [ 48.076404][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.084627][ T3794] dummy0: left allmulticast mode [ 48.098141][ T3792] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.104696][ T3792] EXT4-fs: Ignoring removed oldalloc option [ 48.117314][ T3794] bridge0: port 1(dummy0) entered disabled state [ 48.134988][ T3792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.166923][ T3792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 48.189093][ T3792] System zones: 1-12 [ 48.204482][ T3792] EXT4-fs (loop2): 1 truncate cleaned up [ 48.216943][ T3802] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 48.228415][ T3792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.301550][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.363888][ T3813] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 48.410761][ T3815] netlink: 'syz.3.114': attribute type 10 has an invalid length. [ 48.423426][ T3809] loop9: detected capacity change from 0 to 7 [ 48.434879][ T3809] loop9: unable to read partition table [ 48.450622][ T3809] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 48.450622][ T3809] ) failed (rc=-5) [ 48.570714][ T3827] loop4: detected capacity change from 0 to 512 [ 48.591126][ T3827] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.598004][ T3827] EXT4-fs: Ignoring removed oldalloc option [ 48.666452][ T3827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.680172][ T3827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 48.690052][ T3827] System zones: 1-12 [ 48.694814][ T3827] EXT4-fs (loop4): 1 truncate cleaned up [ 48.701302][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.011320][ T29] kauditd_printk_skb: 841 callbacks suppressed [ 50.011347][ T29] audit: type=1400 audit(1754685821.465:1638): avc: denied { mount } for pid=3826 comm="syz.4.119" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.040307][ T29] audit: type=1326 audit(1754685821.465:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc731e8d550 code=0x7ffc0000 [ 50.064048][ T29] audit: type=1326 audit(1754685821.465:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc731e8d550 code=0x7ffc0000 [ 50.087664][ T29] audit: type=1326 audit(1754685821.465:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 50.111572][ T29] audit: type=1326 audit(1754685821.465:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 50.340566][ T29] audit: type=1326 audit(1754685822.165:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 50.394472][ T29] audit: type=1326 audit(1754685822.185:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 50.418606][ T29] audit: type=1326 audit(1754685822.185:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 50.456487][ T3841] __nla_validate_parse: 8 callbacks suppressed [ 50.456503][ T3841] netlink: 96 bytes leftover after parsing attributes in process `syz.3.122'. [ 50.481501][ T3843] loop9: detected capacity change from 0 to 7 [ 50.491001][ T3843] loop9: unable to read partition table [ 50.496825][ T3843] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 50.496825][ T3843] ) failed (rc=-5) [ 50.550211][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.609894][ T3845] dummy0: left allmulticast mode [ 50.623541][ T29] audit: type=1400 audit(1754685822.295:1646): avc: denied { create } for pid=3842 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.644095][ T29] audit: type=1326 audit(1754685822.355:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c7e5ebe9 code=0x7ffc0000 [ 50.673132][ T3845] bridge0: port 1(dummy0) entered disabled state [ 50.736026][ T3849] 9pnet_fd: Insufficient options for proto=fd [ 50.746525][ T3847] loop9: detected capacity change from 0 to 7 [ 50.753571][ T3847] loop9: unable to read partition table [ 50.764356][ T3847] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 50.764356][ T3847] ) failed (rc=-5) [ 50.929612][ T3852] loop0: detected capacity change from 0 to 512 [ 51.034753][ T3852] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.041509][ T3852] EXT4-fs: Ignoring removed oldalloc option [ 51.099327][ T3860] random: crng reseeded on system resumption [ 51.493161][ T3870] loop9: detected capacity change from 0 to 7 [ 51.529148][ T3870] loop9: unable to read partition table [ 51.759148][ T3870] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 51.759148][ T3870] ) failed (rc=-5) [ 51.824797][ T3873] loop2: detected capacity change from 0 to 512 [ 51.852413][ T3852] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.882335][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.896634][ T3852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 51.906468][ T3852] System zones: 1-12 [ 51.947493][ T3873] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.963130][ T3852] EXT4-fs (loop0): 1 truncate cleaned up [ 51.974562][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.113256][ T3884] loop3: detected capacity change from 0 to 1764 [ 52.124508][ T3883] netlink: 64 bytes leftover after parsing attributes in process `syz.4.136'. [ 52.133613][ T3883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 52.153694][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.224974][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.289363][ T3894] loop2: detected capacity change from 0 to 512 [ 52.317179][ T3894] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.323798][ T3894] EXT4-fs: Ignoring removed oldalloc option [ 52.332391][ T3896] loop9: detected capacity change from 0 to 7 [ 52.338968][ T3896] loop9: unable to read partition table [ 52.345292][ T3896] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 52.345292][ T3896] ) failed (rc=-5) [ 52.363204][ T3891] loop0: detected capacity change from 0 to 8192 [ 52.373823][ T3894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.402107][ T3894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 52.413334][ T3894] System zones: 1-12 [ 52.419059][ T3894] EXT4-fs (loop2): 1 truncate cleaned up [ 52.425556][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.499313][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.563654][ T3911] loop9: detected capacity change from 0 to 7 [ 52.598229][ T3292] loop9: unable to read partition table [ 52.751682][ T3911] loop9: unable to read partition table [ 52.795512][ T3911] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 52.795512][ T3911] ) failed (rc=-5) [ 52.972008][ T3921] netlink: 64 bytes leftover after parsing attributes in process `syz.3.151'. [ 52.981064][ T3921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 53.258775][ T3932] random: crng reseeded on system resumption [ 53.309372][ T3934] loop3: detected capacity change from 0 to 512 [ 53.323912][ T3934] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.330576][ T3934] EXT4-fs: Ignoring removed oldalloc option [ 53.360938][ T3934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.388768][ T3934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 53.402246][ T3934] System zones: 1-12 [ 53.407352][ T3934] EXT4-fs (loop3): 1 truncate cleaned up [ 53.414397][ T3934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.446077][ T3940] loop0: detected capacity change from 0 to 512 [ 53.454735][ T3940] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.461372][ T3940] EXT4-fs: Ignoring removed oldalloc option [ 53.476677][ T3940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.487714][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.539145][ T3940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 53.549235][ T3940] System zones: 1-12 [ 53.559775][ T3940] EXT4-fs (loop0): 1 truncate cleaned up [ 53.566276][ T3940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.675197][ T3955] netlink: 96 bytes leftover after parsing attributes in process `syz.1.163'. [ 53.700538][ T3944] loop9: detected capacity change from 0 to 7 [ 53.707612][ T3292] buffer_io_error: 51 callbacks suppressed [ 53.707626][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.732367][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.740385][ T3292] loop9: unable to read partition table [ 54.155431][ T3944] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.163633][ T3944] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.171716][ T3944] loop9: unable to read partition table [ 54.172958][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.177612][ T3944] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 54.177612][ T3944] ) failed (rc=-5) [ 54.200970][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.222744][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.234671][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.245184][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.253623][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.348332][ T3958] loop4: detected capacity change from 0 to 512 [ 54.417213][ T3958] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.423794][ T3958] EXT4-fs: Ignoring removed oldalloc option [ 54.441265][ T3958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.542244][ T3958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 54.557248][ T3958] System zones: 1-12 [ 54.564282][ T3958] EXT4-fs (loop4): 1 truncate cleaned up [ 54.580611][ T3958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.611316][ T3973] loop9: detected capacity change from 0 to 7 [ 54.618903][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.636889][ T3292] loop9: unable to read partition table [ 54.643012][ T3973] loop9: unable to read partition table [ 54.643487][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.651556][ T3973] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 54.651556][ T3973] ) failed (rc=-5) [ 54.709164][ T3985] random: crng reseeded on system resumption [ 54.744763][ T3991] validate_nla: 1 callbacks suppressed [ 54.744804][ T3991] netlink: 'syz.3.175': attribute type 10 has an invalid length. [ 54.760602][ T3991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'. [ 54.826389][ T3995] netlink: 96 bytes leftover after parsing attributes in process `syz.4.177'. [ 54.849856][ T3997] netlink: 96 bytes leftover after parsing attributes in process `syz.3.178'. [ 54.974603][ T4012] random: crng reseeded on system resumption [ 55.006247][ T4014] random: crng reseeded on system resumption [ 55.021339][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 55.021356][ T29] audit: type=1326 audit(1754685826.845:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 55.052240][ T4009] loop9: detected capacity change from 0 to 7 [ 55.063398][ T29] audit: type=1326 audit(1754685826.885:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 55.081928][ T4009] loop9: unable to read partition table [ 55.087334][ T29] audit: type=1326 audit(1754685826.885:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 55.117269][ T29] audit: type=1326 audit(1754685826.885:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.123948][ T4009] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 55.123948][ T4009] ) failed (rc=-5) [ 55.141359][ T29] audit: type=1326 audit(1754685826.885:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.178181][ T29] audit: type=1326 audit(1754685826.885:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.202469][ T29] audit: type=1326 audit(1754685826.885:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.230455][ T29] audit: type=1326 audit(1754685826.985:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.254254][ T29] audit: type=1326 audit(1754685826.985:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.278023][ T29] audit: type=1326 audit(1754685826.995:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 55.345330][ T4025] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 55.356058][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 55.371488][ T4025] bridge0: port 1(dummy0) entered blocking state [ 55.380125][ T4025] bridge0: port 1(dummy0) entered disabled state [ 55.392139][ T4025] dummy0: entered allmulticast mode [ 55.463425][ T4025] bridge0: port 1(dummy0) entered blocking state [ 55.471670][ T4025] bridge0: port 1(dummy0) entered forwarding state [ 55.508563][ T4028] __nla_validate_parse: 2 callbacks suppressed [ 55.508583][ T4028] netlink: 96 bytes leftover after parsing attributes in process `syz.3.191'. [ 55.585098][ T4049] loop2: detected capacity change from 0 to 512 [ 55.639624][ T4049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.734125][ T4049] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.749430][ T4051] loop9: detected capacity change from 0 to 7 [ 55.756400][ T3292] loop9: unable to read partition table [ 55.768216][ T4051] loop9: unable to read partition table [ 55.775107][ T4051] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 55.775107][ T4051] ) failed (rc=-5) [ 55.801519][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.870337][ T4067] netlink: 64 bytes leftover after parsing attributes in process `syz.0.206'. [ 55.879609][ T4067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 55.896183][ T4065] netlink: 'syz.1.202': attribute type 21 has an invalid length. [ 55.904379][ T4065] netlink: 156 bytes leftover after parsing attributes in process `syz.1.202'. [ 55.983817][ T4077] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 55.992633][ T4077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.210'. [ 56.005338][ T4077] bridge0: port 1(dummy0) entered blocking state [ 56.013827][ T4077] bridge0: port 1(dummy0) entered disabled state [ 56.030959][ T4077] dummy0: entered allmulticast mode [ 56.055965][ T4077] bridge0: port 1(dummy0) entered blocking state [ 56.063484][ T4077] bridge0: port 1(dummy0) entered forwarding state [ 56.134222][ T4088] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 56.147402][ T4088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 57.392323][ T4129] loop9: detected capacity change from 0 to 7 [ 57.450334][ T3855] loop9: unable to read partition table [ 57.458197][ T4129] loop9: unable to read partition table [ 57.464342][ T4129] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 57.464342][ T4129] ) failed (rc=-5) [ 57.546127][ T4138] loop9: detected capacity change from 0 to 7 [ 57.574961][ T4138] loop9: unable to read partition table [ 57.593202][ T4138] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 57.593202][ T4138] ) failed (rc=-5) [ 57.705111][ T4144] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 57.713371][ T4144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.236'. [ 57.771143][ T4144] bridge0: port 1(dummy0) entered blocking state [ 57.781604][ T4144] bridge0: port 1(dummy0) entered disabled state [ 57.819331][ T4144] dummy0: entered allmulticast mode [ 57.878424][ T4144] bridge0: port 1(dummy0) entered blocking state [ 57.886697][ T4144] bridge0: port 1(dummy0) entered forwarding state [ 57.996326][ T4163] loop3: detected capacity change from 0 to 512 [ 57.998105][ T4165] random: crng reseeded on system resumption [ 58.005905][ T4163] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.015624][ T4163] EXT4-fs: Ignoring removed oldalloc option [ 58.039108][ T4157] loop9: detected capacity change from 0 to 7 [ 58.052188][ T4163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.057575][ T4157] loop9: unable to read partition table [ 58.083358][ T4163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 58.088112][ T4157] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 58.088112][ T4157] ) failed (rc=-5) [ 58.114620][ T4163] System zones: 1-12 [ 58.119528][ T4167] loop1: detected capacity change from 0 to 8192 [ 58.131396][ T4163] EXT4-fs (loop3): 1 truncate cleaned up [ 58.148850][ T4163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.232876][ T4171] loop2: detected capacity change from 0 to 512 [ 58.247238][ T4171] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.253993][ T4171] EXT4-fs: Ignoring removed oldalloc option [ 58.273837][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.290315][ T4171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.531353][ T4171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 58.577660][ T4171] System zones: 1-12 [ 58.581904][ T4171] EXT4-fs (loop2): 1 truncate cleaned up [ 58.592524][ T4192] random: crng reseeded on system resumption [ 58.617698][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.753776][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.889524][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 58.980863][ T4203] netlink: 'syz.0.259': attribute type 21 has an invalid length. [ 58.989064][ T4203] netlink: 156 bytes leftover after parsing attributes in process `syz.0.259'. [ 59.048812][ T4204] 9pnet_fd: Insufficient options for proto=fd [ 59.271978][ T4210] loop2: detected capacity change from 0 to 512 [ 59.287977][ T4210] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.294692][ T4210] EXT4-fs: Ignoring removed oldalloc option [ 59.312741][ T4210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.339188][ T4210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 59.351907][ T4210] System zones: 1-12 [ 59.356434][ T4210] EXT4-fs (loop2): 1 truncate cleaned up [ 59.375550][ T4210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.406914][ T4211] loop9: detected capacity change from 0 to 7 [ 59.413952][ T4211] buffer_io_error: 67 callbacks suppressed [ 59.413969][ T4211] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.428753][ T4211] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.436714][ T4211] loop9: unable to read partition table [ 59.442976][ T4211] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 59.442976][ T4211] ) failed (rc=-5) [ 59.549743][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.632824][ T4224] random: crng reseeded on system resumption [ 59.769820][ T4236] loop9: detected capacity change from 0 to 7 [ 59.776876][ T4229] loop0: detected capacity change from 0 to 512 [ 59.788668][ T4236] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.792777][ T4229] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.803527][ T4229] EXT4-fs: Ignoring removed oldalloc option [ 59.810967][ T4236] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.818894][ T4236] loop9: unable to read partition table [ 59.827306][ T4236] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 59.827306][ T4236] ) failed (rc=-5) [ 59.841909][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.853827][ T4229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.867726][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.879857][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.888861][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.891853][ T4229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 59.912126][ T4241] random: crng reseeded on system resumption [ 59.915265][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.037154][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 60.037185][ T29] audit: type=1326 audit(1754685831.855:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c7e5ebe9 code=0x7ffc0000 [ 60.123100][ T29] audit: type=1400 audit(1754685831.945:3122): avc: denied { listen } for pid=4250 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.157101][ T29] audit: type=1400 audit(1754685831.945:3123): avc: denied { connect } for pid=4250 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.176941][ T29] audit: type=1400 audit(1754685831.945:3124): avc: denied { shutdown } for pid=4250 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.196640][ T29] audit: type=1400 audit(1754685831.945:3125): avc: denied { execmem } for pid=4250 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.216086][ T4229] System zones: 1-12 [ 60.231103][ T4229] EXT4-fs (loop0): 1 truncate cleaned up [ 60.253381][ T29] audit: type=1326 audit(1754685832.055:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c7e5ebe9 code=0x7ffc0000 [ 60.257572][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.277117][ T29] audit: type=1326 audit(1754685832.065:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 60.313478][ T29] audit: type=1326 audit(1754685832.065:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 60.337521][ T29] audit: type=1326 audit(1754685832.065:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 60.361070][ T29] audit: type=1326 audit(1754685832.065:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 60.488383][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.575978][ T4263] random: crng reseeded on system resumption [ 60.838779][ T4277] random: crng reseeded on system resumption [ 61.011782][ T4290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.294'. [ 61.076321][ T4294] loop9: detected capacity change from 0 to 7 [ 61.117385][ T4294] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.140802][ T4294] loop9: unable to read partition table [ 61.167200][ T4294] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 61.167200][ T4294] ) failed (rc=-5) [ 61.324250][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.795926][ T4331] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 61.804201][ T4331] netlink: 156 bytes leftover after parsing attributes in process `syz.1.306'. [ 61.891949][ T4336] loop9: detected capacity change from 0 to 7 [ 61.944348][ T4336] loop9: unable to read partition table [ 61.971863][ T4336] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 61.971863][ T4336] ) failed (rc=-5) [ 62.048052][ T4340] netlink: 'syz.4.314': attribute type 21 has an invalid length. [ 62.056033][ T4340] netlink: 156 bytes leftover after parsing attributes in process `syz.4.314'. [ 62.120832][ T4342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 62.131811][ T4344] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 62.140587][ T4344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 62.860735][ T4368] loop9: detected capacity change from 0 to 7 [ 62.881774][ T4362] loop3: detected capacity change from 0 to 8192 [ 62.903033][ T4366] loop1: detected capacity change from 0 to 512 [ 62.922810][ T4368] loop9: unable to read partition table [ 62.958915][ T4366] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.965582][ T4366] EXT4-fs: Ignoring removed oldalloc option [ 62.966380][ T4368] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 62.966380][ T4368] ) failed (rc=-5) [ 63.050368][ T4365] loop2: detected capacity change from 0 to 8192 [ 63.058048][ T4366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.081437][ T4366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 63.089914][ T4366] System zones: 1-12 [ 63.101619][ T4366] EXT4-fs (loop1): 1 truncate cleaned up [ 63.122672][ T4366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.228661][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.265396][ T4382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.330'. [ 63.422932][ T4389] random: crng reseeded on system resumption [ 63.599378][ T4403] 9pnet_fd: Insufficient options for proto=fd [ 63.720082][ T4403] dummy0: left allmulticast mode [ 63.725899][ T4403] bridge0: port 1(dummy0) entered disabled state [ 63.859686][ T4413] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 63.870637][ T4413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'. [ 64.220678][ T4419] loop9: detected capacity change from 0 to 7 [ 64.229087][ T4413] bridge0: port 1(dummy0) entered blocking state [ 64.237026][ T4413] bridge0: port 1(dummy0) entered disabled state [ 64.249655][ T3292] loop9: unable to read partition table [ 64.256958][ T4419] loop9: unable to read partition table [ 64.264686][ T4413] dummy0: entered allmulticast mode [ 64.275406][ T4419] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 64.275406][ T4419] ) failed (rc=-5) [ 64.338677][ T4413] bridge0: port 1(dummy0) entered blocking state [ 64.345903][ T4413] bridge0: port 1(dummy0) entered forwarding state [ 64.439936][ T4431] netlink: 96 bytes leftover after parsing attributes in process `syz.1.350'. [ 64.530580][ T4438] 9pnet_fd: Insufficient options for proto=fd [ 64.564319][ T4438] dummy0: left allmulticast mode [ 64.570659][ T4438] bridge0: port 1(dummy0) entered disabled state [ 64.666265][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 64.725257][ T4458] loop0: detected capacity change from 0 to 512 [ 64.783741][ T4458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.797342][ T4458] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.942825][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.034673][ T4490] dummy0: left allmulticast mode [ 65.040361][ T4490] bridge0: port 1(dummy0) entered disabled state [ 65.051926][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 65.051956][ T29] audit: type=1326 audit(1754685836.875:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 65.196395][ T29] audit: type=1326 audit(1754685836.875:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 65.220538][ T29] audit: type=1326 audit(1754685837.015:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaeb8bebe9 code=0x7ffc0000 [ 65.244214][ T29] audit: type=1326 audit(1754685837.015:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaeb8bebe9 code=0x7ffc0000 [ 65.376058][ T29] audit: type=1326 audit(1754685837.095:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.399977][ T29] audit: type=1326 audit(1754685837.095:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.424000][ T29] audit: type=1326 audit(1754685837.095:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.448025][ T29] audit: type=1326 audit(1754685837.095:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.471829][ T29] audit: type=1326 audit(1754685837.095:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.495875][ T29] audit: type=1326 audit(1754685837.095:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 65.646416][ T4514] loop3: detected capacity change from 0 to 512 [ 65.659881][ T4514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.678602][ T4514] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.711720][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.944657][ T4537] loop3: detected capacity change from 0 to 8192 [ 66.037320][ T4543] __nla_validate_parse: 5 callbacks suppressed [ 66.037338][ T4543] netlink: 96 bytes leftover after parsing attributes in process `syz.0.393'. [ 66.106921][ T4552] netlink: 64 bytes leftover after parsing attributes in process `syz.0.395'. [ 66.116337][ T4552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 67.405818][ T4593] loop9: detected capacity change from 0 to 7 [ 67.412716][ T4593] buffer_io_error: 29 callbacks suppressed [ 67.412729][ T4593] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.427444][ T4593] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.435487][ T4593] loop9: unable to read partition table [ 67.459855][ T4593] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 67.459855][ T4593] ) failed (rc=-5) [ 67.462988][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.656468][ T4602] loop1: detected capacity change from 0 to 512 [ 67.671645][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.701751][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.737461][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.745565][ T3855] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.822708][ T4602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.857183][ T4602] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.926696][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.083426][ T4622] random: crng reseeded on system resumption [ 68.235136][ T4620] netlink: 96 bytes leftover after parsing attributes in process `syz.3.420'. [ 68.509141][ T4628] loop9: detected capacity change from 0 to 7 [ 68.576792][ T4628] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.593967][ T4628] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.602164][ T4628] loop9: unable to read partition table [ 68.608319][ T4628] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 68.608319][ T4628] ) failed (rc=-5) [ 68.609887][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.641637][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 68.869850][ T4644] loop2: detected capacity change from 0 to 8192 [ 69.071281][ T4658] loop9: detected capacity change from 0 to 7 [ 69.095500][ T4658] loop9: unable to read partition table [ 69.122457][ T4658] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 69.122457][ T4658] ) failed (rc=-5) [ 69.500799][ T4676] loop0: detected capacity change from 0 to 512 [ 69.512061][ T4677] 9pnet_fd: Insufficient options for proto=fd [ 69.526819][ T4676] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.533378][ T4676] EXT4-fs: Ignoring removed oldalloc option [ 69.551659][ T4676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.587829][ T4676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 69.596186][ T4675] dummy0: left allmulticast mode [ 69.602363][ T4676] System zones: 1-12 [ 69.616135][ T4675] bridge0: port 1(dummy0) entered disabled state [ 70.067009][ T4676] EXT4-fs (loop0): 1 truncate cleaned up [ 70.083656][ T4676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.115581][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 70.115600][ T29] audit: type=1326 audit(1754685841.935:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.145610][ T29] audit: type=1326 audit(1754685841.935:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.169003][ T29] audit: type=1326 audit(1754685841.935:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.192669][ T29] audit: type=1326 audit(1754685841.935:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.216727][ T29] audit: type=1326 audit(1754685841.935:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.240636][ T29] audit: type=1326 audit(1754685841.935:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.264406][ T29] audit: type=1326 audit(1754685841.935:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.288496][ T29] audit: type=1326 audit(1754685841.935:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.312251][ T29] audit: type=1326 audit(1754685841.935:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.335965][ T29] audit: type=1326 audit(1754685841.935:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 70.456926][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.741073][ T4715] loop0: detected capacity change from 0 to 512 [ 70.773795][ T4718] loop4: detected capacity change from 0 to 512 [ 70.782857][ T4718] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.789439][ T4718] EXT4-fs: Ignoring removed oldalloc option [ 70.798763][ T4715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.812145][ T4715] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.838899][ T4718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.872495][ T4718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 70.881942][ T4718] System zones: 1-12 [ 70.886398][ T4718] EXT4-fs (loop4): 1 truncate cleaned up [ 70.893218][ T4718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.910257][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.066286][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.186642][ T4732] Zero length message leads to an empty skb [ 71.503584][ T4751] loop9: detected capacity change from 0 to 7 [ 71.514549][ T4751] loop9: unable to read partition table [ 71.521119][ T4751] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 71.521119][ T4751] ) failed (rc=-5) [ 71.551517][ T4747] loop2: detected capacity change from 0 to 8192 [ 71.780761][ T4757] loop0: detected capacity change from 0 to 8192 [ 71.977830][ T4767] loop1: detected capacity change from 0 to 8192 [ 72.024760][ T4781] random: crng reseeded on system resumption [ 72.132118][ T4786] netlink: 64 bytes leftover after parsing attributes in process `syz.4.481'. [ 72.141909][ T4786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 72.171088][ T4787] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 72.179330][ T4787] netlink: 156 bytes leftover after parsing attributes in process `syz.3.479'. [ 72.667217][ T4799] 9pnet_fd: Insufficient options for proto=fd [ 72.998398][ T4812] netlink: 'syz.3.487': attribute type 21 has an invalid length. [ 73.006199][ T4812] netlink: 156 bytes leftover after parsing attributes in process `syz.3.487'. [ 73.292234][ T4835] 9pnet_fd: Insufficient options for proto=fd [ 73.774478][ T4850] netlink: 96 bytes leftover after parsing attributes in process `syz.0.505'. [ 73.893234][ T4855] random: crng reseeded on system resumption [ 73.910682][ T4840] loop1: detected capacity change from 0 to 8192 [ 74.166352][ T4870] loop3: detected capacity change from 0 to 8192 [ 74.178927][ T4863] loop2: detected capacity change from 0 to 8192 [ 74.246480][ T4873] random: crng reseeded on system resumption [ 75.172151][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 75.172171][ T29] audit: type=1326 audit(1754685846.985:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.202133][ T29] audit: type=1326 audit(1754685846.985:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.225882][ T29] audit: type=1326 audit(1754685846.985:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.239839][ T4891] netlink: 96 bytes leftover after parsing attributes in process `syz.4.519'. [ 75.250300][ T29] audit: type=1326 audit(1754685846.985:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.283268][ T29] audit: type=1326 audit(1754685846.985:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.307135][ T29] audit: type=1326 audit(1754685846.985:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.331633][ T29] audit: type=1326 audit(1754685846.995:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.355732][ T29] audit: type=1326 audit(1754685846.995:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.439090][ T29] audit: type=1326 audit(1754685847.185:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.476601][ T29] audit: type=1326 audit(1754685847.295:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb280c7ebe9 code=0x7ffc0000 [ 75.606697][ T4898] loop1: detected capacity change from 0 to 8192 [ 75.647893][ T4910] loop3: detected capacity change from 0 to 512 [ 75.657010][ T4910] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.663944][ T4910] EXT4-fs: Ignoring removed oldalloc option [ 75.682007][ T4910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.698792][ T4910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 75.720714][ T4910] System zones: 1-12 [ 75.729740][ T4910] EXT4-fs (loop3): 1 truncate cleaned up [ 75.736814][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.751531][ T4907] loop0: detected capacity change from 0 to 8192 [ 75.895011][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.915727][ T4917] random: crng reseeded on system resumption [ 76.572532][ T4931] loop4: detected capacity change from 0 to 8192 [ 76.744296][ T4935] netlink: 96 bytes leftover after parsing attributes in process `syz.2.536'. [ 77.234126][ T4947] random: crng reseeded on system resumption [ 77.638866][ T4958] loop0: detected capacity change from 0 to 8192 [ 77.681632][ T4961] netlink: 96 bytes leftover after parsing attributes in process `syz.1.547'. [ 78.330131][ T4978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.553'. [ 78.414257][ T4984] loop3: detected capacity change from 0 to 512 [ 78.426860][ T4984] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.433594][ T4984] EXT4-fs: Ignoring removed oldalloc option [ 78.471701][ T4984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.552345][ T4993] loop9: detected capacity change from 0 to 7 [ 78.564895][ T4984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 78.585696][ T4993] buffer_io_error: 18 callbacks suppressed [ 78.585712][ T4993] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.601538][ T4994] random: crng reseeded on system resumption [ 78.611134][ T4993] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.619387][ T4993] loop9: unable to read partition table [ 78.625755][ T4993] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 78.625755][ T4993] ) failed (rc=-5) [ 78.682362][ T4984] System zones: 1-12 [ 78.686992][ T4984] EXT4-fs (loop3): 1 truncate cleaned up [ 78.693665][ T4984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.817222][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.947010][ T5016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 79.015881][ T5021] 9pnet_fd: Insufficient options for proto=fd [ 79.035615][ T5021] dummy0: left allmulticast mode [ 79.043670][ T5021] bridge0: port 1(dummy0) entered disabled state [ 79.111644][ T5023] netlink: 'syz.4.569': attribute type 21 has an invalid length. [ 79.119790][ T5023] netlink: 156 bytes leftover after parsing attributes in process `syz.4.569'. [ 79.248893][ T5026] loop2: detected capacity change from 0 to 512 [ 79.260555][ T5026] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.267351][ T5026] EXT4-fs: Ignoring removed oldalloc option [ 79.329594][ T5026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.421716][ T5026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 79.450982][ T5026] System zones: 1-12 [ 79.471109][ T5026] EXT4-fs (loop2): 1 truncate cleaned up [ 79.483197][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.689990][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.026645][ T5040] loop4: detected capacity change from 0 to 512 [ 80.033999][ T5040] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.040882][ T5040] EXT4-fs: Ignoring removed oldalloc option [ 80.054419][ T5040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.086396][ T5040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 80.105459][ T5040] System zones: 1-12 [ 80.122968][ T5040] EXT4-fs (loop4): 1 truncate cleaned up [ 80.154643][ T5040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.219992][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 80.220010][ T29] audit: type=1326 audit(1754685852.045:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc731e8d550 code=0x7ffc0000 [ 80.307624][ T29] audit: type=1326 audit(1754685852.075:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc731e8d550 code=0x7ffc0000 [ 80.331461][ T29] audit: type=1326 audit(1754685852.075:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.355401][ T29] audit: type=1326 audit(1754685852.075:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.379126][ T29] audit: type=1326 audit(1754685852.085:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.381534][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.403562][ T29] audit: type=1326 audit(1754685852.085:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.436885][ T29] audit: type=1326 audit(1754685852.085:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.559182][ T5052] loop0: detected capacity change from 0 to 8192 [ 80.583087][ T29] audit: type=1326 audit(1754685852.395:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.607562][ T29] audit: type=1326 audit(1754685852.395:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.631902][ T29] audit: type=1326 audit(1754685852.395:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc731e8ebe9 code=0x7ffc0000 [ 80.718582][ T5065] 9pnet_fd: Insufficient options for proto=fd [ 80.772907][ T5067] netlink: 'syz.3.585': attribute type 21 has an invalid length. [ 80.781373][ T5067] netlink: 156 bytes leftover after parsing attributes in process `syz.3.585'. [ 80.817840][ T5073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 80.933560][ T5089] random: crng reseeded on system resumption [ 81.006884][ T5083] loop2: detected capacity change from 0 to 8192 [ 82.271457][ T5137] loop1: detected capacity change from 0 to 8192 [ 82.304525][ T5141] netlink: 'syz.0.616': attribute type 21 has an invalid length. [ 82.312630][ T5141] netlink: 156 bytes leftover after parsing attributes in process `syz.0.616'. [ 82.653791][ T5157] loop3: detected capacity change from 0 to 8192 [ 83.227555][ T5170] loop0: detected capacity change from 0 to 512 [ 83.316167][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.322937][ T5170] EXT4-fs: Ignoring removed oldalloc option [ 83.503211][ T5170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.721861][ T5170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 83.752299][ T5170] System zones: 1-12 [ 83.770911][ T5170] EXT4-fs (loop0): 1 truncate cleaned up [ 83.795811][ T5170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.974874][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.006001][ T5174] loop2: detected capacity change from 0 to 8192 [ 84.485028][ T5188] loop4: detected capacity change from 0 to 8192 [ 84.555213][ T5192] loop9: detected capacity change from 0 to 7 [ 84.584920][ T5192] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.613417][ T5192] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.621476][ T5192] loop9: unable to read partition table [ 84.680609][ T5194] loop1: detected capacity change from 0 to 512 [ 84.688415][ T5192] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 84.688415][ T5192] ) failed (rc=-5) [ 84.723016][ T5194] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.729917][ T5194] EXT4-fs: Ignoring removed oldalloc option [ 84.742428][ T5194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.877257][ T5194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c098, mo2=0002] [ 84.885471][ T5194] System zones: 1-12 [ 84.891260][ T5194] EXT4-fs (loop1): 1 truncate cleaned up [ 84.897621][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.979911][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.468918][ T5207] loop1: detected capacity change from 0 to 8192 [ 85.523181][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 85.523244][ T29] audit: type=1326 audit(1754685857.345:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaeb8bebe9 code=0x7ffc0000 [ 85.615712][ T29] audit: type=1326 audit(1754685857.345:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaeb8bebe9 code=0x7ffc0000 [ 85.639725][ T29] audit: type=1326 audit(1754685857.365:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.664043][ T29] audit: type=1326 audit(1754685857.365:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.688258][ T29] audit: type=1326 audit(1754685857.365:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.711968][ T29] audit: type=1326 audit(1754685857.365:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.735899][ T29] audit: type=1326 audit(1754685857.365:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.759751][ T29] audit: type=1326 audit(1754685857.365:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.783886][ T29] audit: type=1326 audit(1754685857.365:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.807950][ T29] audit: type=1326 audit(1754685857.385:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35307ebe9 code=0x7ffc0000 [ 85.865812][ T5218] loop0: detected capacity change from 0 to 8192 [ 85.946356][ T5223] 9pnet_fd: Insufficient options for proto=fd [ 86.049547][ T5229] random: crng reseeded on system resumption [ 86.293457][ T5238] loop3: detected capacity change from 0 to 8192 [ 86.673906][ T5244] loop4: detected capacity change from 0 to 8192 [ 87.611881][ T5244] ================================================================== [ 87.620274][ T5244] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 87.627631][ T5244] [ 87.629967][ T5244] write to 0xffff888104869bf4 of 2 bytes by task 5251 on cpu 1: [ 87.637601][ T5244] fat16_ent_put+0x28/0x60 [ 87.642177][ T5244] fat_alloc_clusters+0x4d1/0xa80 [ 87.647401][ T5244] fat_get_block+0x258/0x5e0 [ 87.652178][ T5244] __block_write_begin_int+0x3fd/0xf90 [ 87.657692][ T5244] cont_write_begin+0x5fc/0x970 [ 87.662673][ T5244] fat_write_begin+0x4f/0xe0 [ 87.667379][ T5244] generic_perform_write+0x181/0x490 [ 87.672697][ T5244] __generic_file_write_iter+0x9e/0x120 [ 87.678296][ T5244] generic_file_write_iter+0x8d/0x2f0 [ 87.683687][ T5244] vfs_write+0x4a0/0x8e0 [ 87.687947][ T5244] ksys_write+0xda/0x1a0 [ 87.692324][ T5244] __x64_sys_write+0x40/0x50 [ 87.697015][ T5244] x64_sys_call+0x27fe/0x2ff0 [ 87.701728][ T5244] do_syscall_64+0xd2/0x200 [ 87.706435][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.712344][ T5244] [ 87.714885][ T5244] read to 0xffff888104869a00 of 512 bytes by task 5244 on cpu 0: [ 87.722633][ T5244] fat_mirror_bhs+0x1df/0x320 [ 87.727369][ T5244] fat_alloc_clusters+0x98b/0xa80 [ 87.732435][ T5244] fat_get_block+0x258/0x5e0 [ 87.737219][ T5244] __block_write_begin_int+0x3fd/0xf90 [ 87.743308][ T5244] cont_write_begin+0x5fc/0x970 [ 87.748212][ T5244] fat_write_begin+0x4f/0xe0 [ 87.752901][ T5244] generic_perform_write+0x181/0x490 [ 87.758228][ T5244] __generic_file_write_iter+0x9e/0x120 [ 87.764051][ T5244] generic_file_write_iter+0x8d/0x2f0 [ 87.769442][ T5244] vfs_write+0x4a0/0x8e0 [ 87.773696][ T5244] ksys_write+0xda/0x1a0 [ 87.777956][ T5244] __x64_sys_write+0x40/0x50 [ 87.782732][ T5244] x64_sys_call+0x27fe/0x2ff0 [ 87.787433][ T5244] do_syscall_64+0xd2/0x200 [ 87.794303][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.800369][ T5244] [ 87.802789][ T5244] Reported by Kernel Concurrency Sanitizer on: [ 87.808972][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz.4.658 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 87.821059][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.831224][ T5244] ================================================================== [ 87.909192][ T5280] netlink: 'syz.0.664': attribute type 21 has an invalid length. [ 87.917000][ T5280] netlink: 156 bytes leftover after parsing attributes in process `syz.0.664'. [ 87.946802][ T5282] netlink: 'syz.2.667': attribute type 21 has an invalid length. [ 87.954845][ T5282] netlink: 156 bytes leftover after parsing attributes in process `syz.2.667'. [ 87.968445][ T5244] syz.4.658 (5244) used greatest stack depth: 10536 bytes left