last executing test programs: 3.290590934s ago: executing program 3 (id=411): syz_emit_ethernet(0x1c8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) 2.96090675s ago: executing program 3 (id=423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000a00)=0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf251500000008000100", @ANYRES32=r4, @ANYBLOB="08001100", @ANYRES32=r4, @ANYBLOB="090014"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4090) 2.750622057s ago: executing program 3 (id=429): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.690046632s ago: executing program 3 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2.668642014s ago: executing program 3 (id=434): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2.579285361s ago: executing program 3 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 2.10026218s ago: executing program 2 (id=460): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 2.010190017s ago: executing program 2 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.902454926s ago: executing program 4 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x30408, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) close(r2) 1.862630429s ago: executing program 4 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.778542436s ago: executing program 4 (id=472): creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.72798683s ago: executing program 4 (id=473): unshare(0x4020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r3, 0x0, 0x2000}, 0x18) setns(r1, 0x24020000) 1.638438577s ago: executing program 4 (id=475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) 1.394190657s ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0xfff8, 0x20b0, 0x0, 0x100000, 0x0}) 1.186248144s ago: executing program 0 (id=480): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r1, &(0x7f0000000780)="32627d70573aa59bb673dd", 0xb, 0xfecc) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0'}, 0xb) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.141659108s ago: executing program 0 (id=481): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 486.924601ms ago: executing program 1 (id=485): openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 413.292487ms ago: executing program 1 (id=486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000dc0)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@block_validity}, {@errors_remount}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 358.850751ms ago: executing program 1 (id=487): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 320.133385ms ago: executing program 1 (id=488): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000032) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 247.53025ms ago: executing program 2 (id=489): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 247.27955ms ago: executing program 0 (id=490): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 178.546296ms ago: executing program 0 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 178.275996ms ago: executing program 2 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) 166.352907ms ago: executing program 2 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@nobh}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") chdir(&(0x7f00000001c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) 121.131531ms ago: executing program 0 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 26.609908ms ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r4 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) 26.387628ms ago: executing program 0 (id=496): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 26.184308ms ago: executing program 2 (id=497): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r2, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x5, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 0s ago: executing program 1 (id=498): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x8000c62) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x100000800000009) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 33.285699][ T29] audit: type=1400 audit(1753874246.574:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.286907][ T3290] cgroup: Unknown subsys name 'net' [ 33.309317][ T29] audit: type=1400 audit(1753874246.574:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.337957][ T29] audit: type=1400 audit(1753874246.614:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.598001][ T3290] cgroup: Unknown subsys name 'cpuset' [ 33.605483][ T3290] cgroup: Unknown subsys name 'rlimit' [ 33.735696][ T29] audit: type=1400 audit(1753874247.024:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.763532][ T29] audit: type=1400 audit(1753874247.024:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.784108][ T29] audit: type=1400 audit(1753874247.034:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.792819][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.804501][ T29] audit: type=1400 audit(1753874247.034:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.834366][ T29] audit: type=1400 audit(1753874247.034:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.864358][ T29] audit: type=1400 audit(1753874247.034:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.881291][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.889465][ T29] audit: type=1400 audit(1753874247.114:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.175005][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.238634][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.266718][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.275703][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.307650][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.315035][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.322639][ T3304] bridge_slave_0: entered allmulticast mode [ 35.329432][ T3304] bridge_slave_0: entered promiscuous mode [ 35.353762][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.361106][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.368404][ T3304] bridge_slave_1: entered allmulticast mode [ 35.374880][ T3304] bridge_slave_1: entered promiscuous mode [ 35.416493][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.423904][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.431134][ T3299] bridge_slave_0: entered allmulticast mode [ 35.437677][ T3299] bridge_slave_0: entered promiscuous mode [ 35.450705][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.464822][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.472090][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.479393][ T3299] bridge_slave_1: entered allmulticast mode [ 35.485737][ T3299] bridge_slave_1: entered promiscuous mode [ 35.500670][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.534857][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.549201][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.558006][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.565207][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.572570][ T3303] bridge_slave_0: entered allmulticast mode [ 35.579136][ T3303] bridge_slave_0: entered promiscuous mode [ 35.591653][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.601830][ T3304] team0: Port device team_slave_0 added [ 35.614858][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.622041][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.629522][ T3303] bridge_slave_1: entered allmulticast mode [ 35.636205][ T3303] bridge_slave_1: entered promiscuous mode [ 35.654338][ T3304] team0: Port device team_slave_1 added [ 35.660380][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.667579][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.674826][ T3308] bridge_slave_0: entered allmulticast mode [ 35.681493][ T3308] bridge_slave_0: entered promiscuous mode [ 35.691135][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.698369][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.705786][ T3308] bridge_slave_1: entered allmulticast mode [ 35.712577][ T3308] bridge_slave_1: entered promiscuous mode [ 35.729887][ T3299] team0: Port device team_slave_0 added [ 35.761109][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.770802][ T3299] team0: Port device team_slave_1 added [ 35.785173][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.795219][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.814438][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.821459][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.849188][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.863543][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.871059][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.897429][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.909185][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.948375][ T3303] team0: Port device team_slave_0 added [ 35.954464][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.961626][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.988020][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.010828][ T3308] team0: Port device team_slave_0 added [ 36.018046][ T3308] team0: Port device team_slave_1 added [ 36.024735][ T3303] team0: Port device team_slave_1 added [ 36.031115][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.038276][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.065998][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.079882][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.087035][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.094383][ T3300] bridge_slave_0: entered allmulticast mode [ 36.100935][ T3300] bridge_slave_0: entered promiscuous mode [ 36.131838][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.139572][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.148555][ T3300] bridge_slave_1: entered allmulticast mode [ 36.155895][ T3300] bridge_slave_1: entered promiscuous mode [ 36.165996][ T3304] hsr_slave_0: entered promiscuous mode [ 36.172280][ T3304] hsr_slave_1: entered promiscuous mode [ 36.184428][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.192764][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.222504][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.253106][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.260455][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.286726][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.297852][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.304993][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.332191][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.349975][ T3299] hsr_slave_0: entered promiscuous mode [ 36.356156][ T3299] hsr_slave_1: entered promiscuous mode [ 36.362379][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.368526][ T3299] Cannot create hsr debugfs directory [ 36.379432][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.386457][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.413051][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.442416][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.470404][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.515576][ T3303] hsr_slave_0: entered promiscuous mode [ 36.523899][ T3303] hsr_slave_1: entered promiscuous mode [ 36.531256][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.537360][ T3303] Cannot create hsr debugfs directory [ 36.550333][ T3308] hsr_slave_0: entered promiscuous mode [ 36.556469][ T3308] hsr_slave_1: entered promiscuous mode [ 36.563530][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.569428][ T3308] Cannot create hsr debugfs directory [ 36.585988][ T3300] team0: Port device team_slave_0 added [ 36.592961][ T3300] team0: Port device team_slave_1 added [ 36.643005][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.651170][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678113][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.700571][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.707687][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.735254][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.828136][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.845397][ T3300] hsr_slave_0: entered promiscuous mode [ 36.852560][ T3300] hsr_slave_1: entered promiscuous mode [ 36.858733][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.864467][ T3300] Cannot create hsr debugfs directory [ 36.874267][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.897601][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.916370][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.941814][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.954867][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.965281][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.980230][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.029356][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.038632][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.047697][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.056669][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.103136][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.125584][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.141779][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.149127][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.159552][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.183543][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.195893][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.210092][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.226952][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.235475][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.243655][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.262608][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.269778][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.294966][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.303167][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.324682][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.347418][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.361732][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.371808][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.378927][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.411374][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.418740][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.430691][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.458602][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.466377][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.478351][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.490964][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.505249][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.517166][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.524357][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.540086][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.558001][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.572306][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.579960][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.589963][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.597059][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.613576][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.620802][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.636996][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.644400][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.692812][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.796350][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.811692][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.842503][ T3299] veth0_vlan: entered promiscuous mode [ 37.854255][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.874434][ T3299] veth1_vlan: entered promiscuous mode [ 37.887419][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.933969][ T3299] veth0_macvtap: entered promiscuous mode [ 37.944472][ T3299] veth1_macvtap: entered promiscuous mode [ 37.978500][ T3308] veth0_vlan: entered promiscuous mode [ 38.010047][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.018561][ T3308] veth1_vlan: entered promiscuous mode [ 38.033773][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.049681][ T3304] veth0_vlan: entered promiscuous mode [ 38.057367][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.066183][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.075131][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.084157][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.105460][ T3304] veth1_vlan: entered promiscuous mode [ 38.120753][ T3308] veth0_macvtap: entered promiscuous mode [ 38.137796][ T3308] veth1_macvtap: entered promiscuous mode [ 38.144052][ T3300] veth0_vlan: entered promiscuous mode [ 38.155642][ T3304] veth0_macvtap: entered promiscuous mode [ 38.167787][ T3304] veth1_macvtap: entered promiscuous mode [ 38.187777][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.202806][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.211112][ T3300] veth1_vlan: entered promiscuous mode [ 38.222072][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.239015][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.239424][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.247931][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.272376][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.281588][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.301205][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.313886][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.323203][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.332346][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.341253][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.358618][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 38.358637][ T29] audit: type=1400 audit(1753874251.654:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.370753][ T3300] veth0_macvtap: entered promiscuous mode [ 38.389103][ T29] audit: type=1400 audit(1753874251.654:91): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.399410][ T3300] veth1_macvtap: entered promiscuous mode [ 38.418859][ T29] audit: type=1400 audit(1753874251.654:92): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.503482][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.516957][ T3303] veth0_vlan: entered promiscuous mode [ 38.547076][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.557110][ T3303] veth1_vlan: entered promiscuous mode [ 38.580800][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.589689][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.598529][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.607427][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.620226][ T29] audit: type=1400 audit(1753874251.914:93): avc: denied { map_create } for pid=3480 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.639201][ T29] audit: type=1400 audit(1753874251.914:94): avc: denied { map_read map_write } for pid=3480 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.663279][ T29] audit: type=1400 audit(1753874251.954:95): avc: denied { prog_load } for pid=3480 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.682164][ T29] audit: type=1400 audit(1753874251.954:96): avc: denied { bpf } for pid=3480 comm="syz.2.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.690051][ T3303] veth0_macvtap: entered promiscuous mode [ 38.702278][ T29] audit: type=1400 audit(1753874251.954:97): avc: denied { perfmon } for pid=3480 comm="syz.2.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.729165][ T29] audit: type=1400 audit(1753874251.954:98): avc: denied { prog_run } for pid=3480 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.755844][ T3303] veth1_macvtap: entered promiscuous mode [ 38.763721][ T3488] loop3: detected capacity change from 0 to 512 [ 38.780665][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.811237][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.819481][ T3488] journal_path: Lookup failure for './file0/../file0' [ 38.826457][ T3488] EXT4-fs: error: could not find journal device path [ 38.839093][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.848001][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.856766][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.865736][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.888366][ T3482] IPv6: addrconf: prefix option has invalid lifetime [ 38.912483][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 38.935913][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 39.053124][ T29] audit: type=1400 audit(1753874252.344:99): avc: denied { create } for pid=3501 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.360178][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.367742][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.457910][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.482943][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.569402][ T3528] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.578489][ T3528] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.587533][ T3528] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.596546][ T3528] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.776003][ T3541] syzkaller0: entered promiscuous mode [ 39.781790][ T3541] syzkaller0: entered allmulticast mode [ 39.811386][ T3528] syz.1.20 (3528) used greatest stack depth: 10824 bytes left [ 40.354397][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.362160][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.520300][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.568493][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.688383][ T3572] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.697558][ T3572] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.706631][ T3572] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.716160][ T3572] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.891866][ C0] hrtimer: interrupt took 28667 ns [ 41.413488][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.421298][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.465094][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 41.490071][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 41.556018][ T3631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.564099][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.587026][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.682123][ T3622] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.691499][ T3622] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.700800][ T3622] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.710028][ T3622] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.996999][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.036561][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.388091][ T3654] loop0: detected capacity change from 0 to 164 [ 42.435184][ T3654] process 'syz.0.71' launched '/dev/fd/6' with NULL argv: empty string added [ 42.461026][ T3659] netlink: 276 bytes leftover after parsing attributes in process `syz.2.73'. [ 42.477280][ T3654] syz.0.71: attempt to access beyond end of device [ 42.477280][ T3654] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 42.492531][ T3654] syz.0.71: attempt to access beyond end of device [ 42.492531][ T3654] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.507033][ T3657] Falling back ldisc for ttyS3. [ 42.559033][ T3665] loop4: detected capacity change from 0 to 128 [ 42.638059][ T3665] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.676494][ T3677] Zero length message leads to an empty skb [ 42.703443][ T3665] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.745783][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.862145][ T3689] loop0: detected capacity change from 0 to 1024 [ 42.895715][ T3689] ======================================================= [ 42.895715][ T3689] WARNING: The mand mount option has been deprecated and [ 42.895715][ T3689] and is ignored by this kernel. Remove the mand [ 42.895715][ T3689] option from the mount to silence this warning. [ 42.895715][ T3689] ======================================================= [ 42.997898][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.022023][ T3693] 9pnet: Could not find request transport: 0xffffffffffffffff [ 43.042237][ T3689] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.84: Allocating blocks 385-513 which overlap fs metadata [ 43.103215][ T3689] EXT4-fs (loop0): pa ffff888106e49000: logic 16, phys. 129, len 24 [ 43.111576][ T3689] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 43.171063][ T3689] syz.0.84 (3689) used greatest stack depth: 10120 bytes left [ 43.180272][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.333817][ T3720] loop2: detected capacity change from 0 to 1024 [ 43.357161][ T3724] loop1: detected capacity change from 0 to 1024 [ 43.376326][ T3720] EXT4-fs: Ignoring removed bh option [ 43.378356][ T3724] EXT4-fs: Ignoring removed orlov option [ 43.416099][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.419017][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.475719][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 43.475734][ T29] audit: type=1400 audit(1753874256.764:212): avc: denied { map } for pid=3717 comm="syz.2.96" path="/31/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.504794][ T29] audit: type=1400 audit(1753874256.764:213): avc: denied { execute } for pid=3717 comm="syz.2.96" path="/31/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.538959][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.584570][ T29] audit: type=1400 audit(1753874256.854:214): avc: denied { append } for pid=3717 comm="syz.2.96" path="/31/file1/blkio.bfq.io_queued" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.608789][ T29] audit: type=1400 audit(1753874256.874:215): avc: denied { read } for pid=3734 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.622139][ T3720] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.96: Allocating blocks 497-513 which overlap fs metadata [ 43.671630][ T29] audit: type=1400 audit(1753874256.954:216): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.701519][ T3720] EXT4-fs (loop2): Remounting filesystem read-only [ 43.722816][ T29] audit: type=1400 audit(1753874257.014:217): avc: denied { create } for pid=3740 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.743316][ T29] audit: type=1400 audit(1753874257.014:218): avc: denied { connect } for pid=3740 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.763857][ T29] audit: type=1400 audit(1753874257.014:219): avc: denied { read } for pid=3738 comm="syz.4.103" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.787230][ T29] audit: type=1400 audit(1753874257.014:220): avc: denied { open } for pid=3738 comm="syz.4.103" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.811028][ T29] audit: type=1400 audit(1753874257.014:221): avc: denied { ioctl } for pid=3738 comm="syz.4.103" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.839582][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.967014][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 44.169726][ T3779] 9pnet: p9_errstr2errno: server reported unknown error [ 44.450781][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 44.583444][ T3801] syzkaller1: entered promiscuous mode [ 44.589428][ T3801] syzkaller1: entered allmulticast mode [ 44.851869][ T3819] netlink: 212 bytes leftover after parsing attributes in process `syz.3.136'. [ 44.853726][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 45.015052][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 45.529911][ T3843] loop2: detected capacity change from 0 to 1024 [ 45.562636][ T3843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.621093][ T3843] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 45.633598][ T3843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.633598][ T3843] [ 45.643355][ T3843] EXT4-fs (loop2): Total free blocks count 0 [ 45.649869][ T3843] EXT4-fs (loop2): Free/Dirty block details [ 45.655911][ T3843] EXT4-fs (loop2): free_blocks=0 [ 45.660957][ T3843] EXT4-fs (loop2): dirty_blocks=0 [ 45.666266][ T3843] EXT4-fs (loop2): Block reservation details [ 45.672487][ T3843] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 45.729077][ T3850] wg2: entered promiscuous mode [ 45.734504][ T3850] wg2: entered allmulticast mode [ 45.759916][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.784278][ T3855] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 45.796135][ T3855] team0: Port device dummy0 added [ 45.843141][ T3855] wÞ£ÿ (3855) used greatest stack depth: 9568 bytes left [ 45.872621][ T3860] loop4: detected capacity change from 0 to 8192 [ 45.884766][ T3860] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.953538][ T3869] loop2: detected capacity change from 0 to 2048 [ 45.992138][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 46.003753][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.079870][ T3299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 46.100825][ T3299] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 46.116414][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.197035][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 46.218923][ T3888] vlan2: entered allmulticast mode [ 46.224263][ T3888] dummy0: entered allmulticast mode [ 46.505090][ T3911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 46.704671][ T3935] loop4: detected capacity change from 0 to 512 [ 46.738144][ T3935] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #15: comm syz.4.186: corrupted in-inode xattr: e_value size too large [ 46.798506][ T3935] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.186: couldn't read orphan inode 15 (err -117) [ 46.836798][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.861133][ T3945] tipc: Started in network mode [ 46.866107][ T3945] tipc: Node identity ac14140f, cluster identity 4711 [ 46.892779][ T3945] tipc: New replicast peer: 255.255.255.83 [ 46.898812][ T3945] tipc: Enabled bearer , priority 10 [ 46.908965][ T3950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 47.006244][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.023645][ T3957] loop2: detected capacity change from 0 to 1024 [ 47.037826][ T3957] EXT4-fs: Ignoring removed nobh option [ 47.043557][ T3957] EXT4-fs: Ignoring removed bh option [ 47.089377][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.118396][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.187572][ T3976] loop0: detected capacity change from 0 to 512 [ 47.198835][ T3976] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.216739][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 47.269689][ T3976] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 47.280099][ T3976] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.291794][ T3976] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.203: corrupted inode contents [ 47.320634][ T3976] EXT4-fs (loop0): Remounting filesystem read-only [ 47.329710][ T3976] EXT4-fs (loop0): 1 truncate cleaned up [ 47.335587][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.346469][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.368403][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.379086][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.392171][ T3976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.566903][ T4010] loop1: detected capacity change from 0 to 128 [ 47.627236][ T4010] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.730349][ T4010] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.746923][ T4021] loop0: detected capacity change from 0 to 512 [ 47.802391][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.837363][ T4021] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.860159][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.919059][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.990690][ T4035] syz.0.229 uses obsolete (PF_INET,SOCK_PACKET) [ 48.002075][ T4037] loop1: detected capacity change from 0 to 512 [ 48.017327][ T36] tipc: Node number set to 2886997007 [ 48.031685][ T4037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.050491][ T4037] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.076491][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.097708][ T4045] sd 0:0:1:0: device reset [ 48.125179][ T4047] pim6reg1: entered promiscuous mode [ 48.131266][ T4047] pim6reg1: entered allmulticast mode [ 48.215042][ T4060] program syz.3.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.351118][ T4077] binfmt_misc: register: failed to install interpreter file ./file2 [ 48.449120][ T4084] loop1: detected capacity change from 0 to 1024 [ 48.457746][ T4084] EXT4-fs: Ignoring removed nobh option [ 48.463379][ T4084] EXT4-fs: Ignoring removed bh option [ 48.503720][ T4084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.523674][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 48.523693][ T29] audit: type=1326 audit(1753874261.814:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34bb94d310 code=0x7ffc0000 [ 48.555831][ T29] audit: type=1326 audit(1753874261.814:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f34bb94d6f7 code=0x7ffc0000 [ 48.579160][ T29] audit: type=1326 audit(1753874261.814:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34bb94d310 code=0x7ffc0000 [ 48.602602][ T29] audit: type=1326 audit(1753874261.814:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bb94e9a9 code=0x7ffc0000 [ 48.627305][ T29] audit: type=1326 audit(1753874261.814:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f34bb94e9a9 code=0x7ffc0000 [ 48.650692][ T29] audit: type=1326 audit(1753874261.814:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bb94e9a9 code=0x7ffc0000 [ 48.674961][ T29] audit: type=1326 audit(1753874261.814:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34bb9508c7 code=0x7ffc0000 [ 48.698381][ T29] audit: type=1326 audit(1753874261.814:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f34bb95083c code=0x7ffc0000 [ 48.722208][ T29] audit: type=1326 audit(1753874261.814:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f34bb950774 code=0x7ffc0000 [ 48.745826][ T29] audit: type=1326 audit(1753874261.814:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f34bb950774 code=0x7ffc0000 [ 48.839031][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.879566][ T4103] capability: warning: `syz.3.257' uses deprecated v2 capabilities in a way that may be insecure [ 48.964847][ T4112] loop4: detected capacity change from 0 to 128 [ 48.985495][ T4101] hub 9-0:1.0: USB hub found [ 48.995042][ T4101] hub 9-0:1.0: 8 ports detected [ 49.033045][ T4112] syz.4.261: attempt to access beyond end of device [ 49.033045][ T4112] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 49.072901][ T4120] __nla_validate_parse: 4 callbacks suppressed [ 49.072921][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 49.169900][ T4128] tipc: Started in network mode [ 49.174953][ T4128] tipc: Node identity ac14140f, cluster identity 4711 [ 49.182408][ T4128] tipc: New replicast peer: 255.255.255.255 [ 49.188842][ T4128] tipc: Enabled bearer , priority 10 [ 49.582906][ T4172] syzkaller1: entered promiscuous mode [ 49.588674][ T4172] syzkaller1: entered allmulticast mode [ 49.725266][ T10] hid (null): invalid report_size -1413666444 [ 49.731764][ T10] hid (null): unknown global tag 0xd [ 49.731839][ T10] hid (null): report_id 2222385494 is invalid [ 49.731860][ T10] hid (null): global environment stack underflow [ 49.731885][ T10] hid (null): unknown global tag 0xf4 [ 49.731992][ T10] hid (null): unknown global tag 0x1c [ 49.732081][ T10] hid (null): unknown global tag 0xe [ 49.732106][ T10] hid (null): unknown global tag 0xc [ 49.732131][ T10] hid (null): unknown global tag 0xd [ 49.732178][ T10] hid (null): unknown global tag 0xe [ 49.732222][ T10] hid (null): unknown global tag 0x9f [ 49.788068][ T10] hid (null): unknown global tag 0xe [ 49.788097][ T10] hid (null): unknown global tag 0xe [ 49.788111][ T10] hid (null): unknown global tag 0xe [ 49.788138][ T10] hid (null): unknown global tag 0xc [ 49.788171][ T10] hid (null): unknown global tag 0xe [ 49.788223][ T10] hid (null): bogus close delimiter [ 49.788240][ T10] hid (null): unknown global tag 0xc [ 49.792778][ T10] hid (null): invalid report_count 32141 [ 49.831867][ T10] hid (null): unknown global tag 0xd [ 49.837586][ T10] hid (null): unknown global tag 0xe [ 49.842960][ T10] hid (null): unknown global tag 0xc [ 49.853361][ T10] hid (null): unknown global tag 0xc [ 49.859803][ T10] hid (null): unknown global tag 0xe [ 49.865885][ T10] hid (null): unknown global tag 0xc [ 49.871383][ T10] hid (null): unknown global tag 0xc [ 49.876858][ T10] hid (null): unknown global tag 0xc [ 49.886226][ T10] hid (null): unknown global tag 0xd [ 49.891610][ T10] hid (null): unknown global tag 0x3d [ 49.897061][ T10] hid (null): unknown global tag 0xe [ 49.902429][ T10] hid (null): invalid report_count 52049 [ 49.908243][ T10] hid (null): unknown global tag 0xc [ 49.914024][ T10] hid (null): invalid report_size 1527839594 [ 49.920053][ T10] hid (null): unknown global tag 0xe [ 49.925451][ T10] hid (null): report_id 0 is invalid [ 49.931070][ T10] hid (null): invalid report_count -190267900 [ 49.937293][ T10] hid (null): unknown global tag 0xd [ 49.942639][ T10] hid (null): unknown global tag 0x76 [ 49.948092][ T10] hid (null): unknown global tag 0xd [ 49.953582][ T10] hid (null): report_id 32568 is invalid [ 49.960400][ T10] hid-generic 0006:0098:0009.0001: collection stack underflow [ 49.968118][ T10] hid-generic 0006:0098:0009.0001: item 0 0 0 12 parsing failed [ 49.976328][ T10] hid-generic 0006:0098:0009.0001: probe with driver hid-generic failed with error -22 [ 50.162510][ T4196] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.176333][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 50.304587][ T4201] loop3: detected capacity change from 0 to 8192 [ 50.307985][ T3391] tipc: Node number set to 2886997007 [ 50.423339][ T4223] netlink: 'syz.2.302': attribute type 4 has an invalid length. [ 50.571782][ T4236] Driver unsupported XDP return value 0 on prog (id 246) dev N/A, expect packet loss! [ 50.630581][ T4243] pim6reg: entered allmulticast mode [ 50.640034][ T4242] pim6reg: left allmulticast mode [ 50.696737][ T4250] loop2: detected capacity change from 0 to 512 [ 50.715201][ T4250] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.729411][ T4250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.314: bg 0: block 248: padding at end of block bitmap is not set [ 50.746317][ T4250] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.314: Failed to acquire dquot type 1 [ 50.770943][ T4250] EXT4-fs (loop2): 1 truncate cleaned up [ 50.778613][ T4250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.799034][ T4258] program syz.4.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.833102][ T4261] syzkaller1: entered promiscuous mode [ 50.838874][ T4261] syzkaller1: entered allmulticast mode [ 50.861209][ T4250] syz.2.314 (4250) used greatest stack depth: 9176 bytes left [ 50.890596][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.185136][ T4293] loop1: detected capacity change from 0 to 1024 [ 51.199190][ T4293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.214356][ T4293] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 51.234880][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.273197][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.331167][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.411181][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.462213][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.539826][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 51.591994][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.599203][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.606891][ T4303] bridge_slave_0: entered allmulticast mode [ 51.613785][ T4303] bridge_slave_0: entered promiscuous mode [ 51.620963][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.628301][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.643187][ T4303] bridge_slave_1: entered allmulticast mode [ 51.661516][ T4303] bridge_slave_1: entered promiscuous mode [ 51.663427][ T4332] hub 9-0:1.0: USB hub found [ 51.672518][ T4332] hub 9-0:1.0: 8 ports detected [ 51.705855][ T31] bridge_slave_1: left allmulticast mode [ 51.711751][ T31] bridge_slave_1: left promiscuous mode [ 51.717723][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.727044][ T31] bridge_slave_0: left allmulticast mode [ 51.733297][ T31] bridge_slave_0: left promiscuous mode [ 51.739147][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.840010][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.849946][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.860711][ T31] bond0 (unregistering): Released all slaves [ 51.871334][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.888228][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.927918][ T31] hsr_slave_0: left promiscuous mode [ 51.944422][ T31] hsr_slave_1: left promiscuous mode [ 51.957462][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.965177][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.983280][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.991025][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.010362][ T4345] loop4: detected capacity change from 0 to 1024 [ 52.030855][ T31] veth1_macvtap: left promiscuous mode [ 52.043456][ T31] veth0_macvtap: left promiscuous mode [ 52.051939][ T4345] ext3: Bad value for 'errors' [ 52.054873][ T31] veth1_vlan: left promiscuous mode [ 52.069529][ T31] veth0_vlan: left promiscuous mode [ 52.352332][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 52.368258][ T31] team0 (unregistering): Port device team_slave_1 removed [ 52.380291][ T31] team0 (unregistering): Port device team_slave_0 removed [ 52.451767][ T4303] team0: Port device team_slave_0 added [ 52.478508][ T4303] team0: Port device team_slave_1 added [ 52.509488][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.516604][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.542807][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.565243][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.572533][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.598581][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.651098][ T4303] hsr_slave_0: entered promiscuous mode [ 52.658468][ T4303] hsr_slave_1: entered promiscuous mode [ 52.664619][ T4303] debugfs: 'hsr0' already exists in 'hsr' [ 52.670483][ T4303] Cannot create hsr debugfs directory [ 52.765579][ T4406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.364'. [ 52.771369][ T4415] loop0: detected capacity change from 0 to 512 [ 52.781126][ T4413] Cannot find del_set index 0 as target [ 52.794363][ T4415] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.815635][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 52.852671][ T4420] loop1: detected capacity change from 0 to 512 [ 52.890620][ T4420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.925037][ T4420] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.947282][ T4425] hub 6-0:1.0: USB hub found [ 52.967675][ T4425] hub 6-0:1.0: 8 ports detected [ 53.037563][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.135231][ T4448] syzkaller1: entered promiscuous mode [ 53.140967][ T4448] syzkaller1: entered allmulticast mode [ 53.167509][ T4457] netlink: 128 bytes leftover after parsing attributes in process `syz.4.378'. [ 53.198155][ T4460] loop4: detected capacity change from 0 to 512 [ 53.220202][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.237516][ T4460] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.294235][ T4303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.313070][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.313576][ T4303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.331504][ T4303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.346521][ T4303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.372415][ T4473] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 53.379027][ T4473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.386937][ T4473] vhci_hcd vhci_hcd.0: Device attached [ 53.395415][ T4480] vhci_hcd: connection closed [ 53.395656][ T3418] vhci_hcd: stop threads [ 53.404821][ T3418] vhci_hcd: release socket [ 53.409382][ T3418] vhci_hcd: disconnect device [ 53.437144][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.480888][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.494192][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.501397][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.518183][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.525580][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.552789][ T4303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.563426][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.570955][ T4496] SELinux: ebitmap: truncated map [ 53.574552][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 53.574570][ T29] audit: type=1400 audit(1753874266.864:547): avc: denied { load_policy } for pid=4495 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.581824][ T4496] SELinux: failed to load policy [ 53.671588][ T29] audit: type=1400 audit(1753874266.964:548): avc: denied { read write } for pid=4503 comm="syz.3.384" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.709140][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.734930][ T29] audit: type=1400 audit(1753874266.964:549): avc: denied { open } for pid=4503 comm="syz.3.384" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.880809][ T4303] veth0_vlan: entered promiscuous mode [ 53.890467][ T4303] veth1_vlan: entered promiscuous mode [ 53.920159][ T4303] veth0_macvtap: entered promiscuous mode [ 53.963382][ T4303] veth1_macvtap: entered promiscuous mode [ 53.989742][ T29] audit: type=1400 audit(1753874267.274:550): avc: denied { setopt } for pid=4537 comm="syz.4.390" lport=35633 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.029909][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.051537][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.075757][ T4303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.084630][ T4303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.093501][ T4303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.097069][ T4550] loop1: detected capacity change from 0 to 512 [ 54.102284][ T4303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.124825][ T4554] capability: warning: `syz.3.391' uses 32-bit capabilities (legacy support in use) [ 54.185660][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.186648][ T29] audit: type=1400 audit(1753874267.474:551): avc: denied { mount } for pid=4303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.211603][ T4550] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.268209][ T29] audit: type=1400 audit(1753874267.524:552): avc: denied { mounton } for pid=4303 comm="syz-executor" path="/root/syzkaller.Fxj0R3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.351582][ T4566] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 54.366609][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.422206][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 54.432520][ T4574] bridge_slave_1: left allmulticast mode [ 54.438257][ T4574] bridge_slave_1: left promiscuous mode [ 54.444192][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.454219][ T4574] bridge_slave_0: left allmulticast mode [ 54.460030][ T4574] bridge_slave_0: left promiscuous mode [ 54.465785][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.641373][ T4577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.401'. [ 54.683376][ T4579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 54.712715][ T29] audit: type=1400 audit(1753874268.004:553): avc: denied { sqpoll } for pid=4582 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.790585][ T29] audit: type=1400 audit(1753874268.024:554): avc: denied { bind } for pid=4571 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.810721][ T29] audit: type=1400 audit(1753874268.054:555): avc: denied { write } for pid=4582 comm="syz.0.403" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.835010][ T29] audit: type=1400 audit(1753874268.054:556): avc: denied { ioctl } for pid=4582 comm="syz.0.403" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.893569][ T4596] syzkaller1: entered promiscuous mode [ 54.899292][ T4596] syzkaller1: entered allmulticast mode [ 55.305985][ T4628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.422'. [ 55.349848][ T4632] netlink: 14 bytes leftover after parsing attributes in process `syz.0.425'. [ 55.352527][ T4612] netlink: 256 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.369752][ T4612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.381543][ T4632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.398263][ T4632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.441241][ T4632] bond0 (unregistering): Released all slaves [ 55.465251][ T4636] netlink: 'syz.3.423': attribute type 17 has an invalid length. [ 55.666463][ T4662] loop0: detected capacity change from 0 to 1024 [ 55.686243][ T4662] EXT4-fs: Ignoring removed orlov option [ 55.692064][ T4662] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.701489][ T4662] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.731570][ T4662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.777142][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.812476][ T4678] loop1: detected capacity change from 0 to 512 [ 55.855072][ T4678] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.444: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.874821][ T4678] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.444: Bad quota inode: 3, type: 0 [ 55.887011][ T4678] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.902063][ T4678] EXT4-fs (loop1): mount failed [ 56.134177][ T4713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.458'. [ 56.256793][ T4725] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.330232][ T4732] loop1: detected capacity change from 0 to 128 [ 56.343299][ T4732] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.356823][ T4732] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.396333][ T4732] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.467: No space for directory leaf checksum. Please run e2fsck -D. [ 56.411902][ T4732] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.467: checksumming directory block 0 [ 56.443059][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.586484][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 56.594510][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.603005][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.611768][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.619953][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.627595][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.635448][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.643055][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.650572][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.658085][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.665521][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.673122][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.680737][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.688300][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.696556][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.704146][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.712090][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.720273][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.727843][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.735628][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.743784][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.751465][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.758954][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.766516][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.773988][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.781498][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.788952][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.796365][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.803817][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.811339][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.818768][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.826192][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.833638][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.841179][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 56.849661][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.922238][ T4754] fido_id[4754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.064734][ T4763] loop0: detected capacity change from 0 to 128 [ 57.071887][ T4763] EXT4-fs: Ignoring removed nobh option [ 57.080554][ T4763] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.094751][ T4763] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.125641][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.469650][ T4769] loop1: detected capacity change from 0 to 1024 [ 57.490570][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.502811][ T4769] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.516735][ T4769] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.482: lblock 3 mapped to illegal pblock 3 (length 3) [ 57.531237][ T4769] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 57.543618][ T4769] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.543618][ T4769] [ 57.557007][ T4769] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.582014][ T37] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 3) [ 57.596270][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 57.609892][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.609892][ T37] [ 57.620214][ T37] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 57.636691][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 57.651046][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.651046][ T37] [ 57.662025][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.757596][ T3391] usb usb8-port4: attempt power cycle [ 57.789272][ T4778] tipc: Enabling of bearer rejected, already enabled [ 57.817419][ T4780] loop1: detected capacity change from 0 to 1024 [ 57.824389][ T4780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.839697][ T4780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.907381][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.059350][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 58.113917][ T4798] loop2: detected capacity change from 0 to 1024 [ 58.124181][ T4798] EXT4-fs: Ignoring removed nobh option [ 58.130017][ T4798] EXT4-fs: Ignoring removed nobh option [ 58.135732][ T4798] EXT4-fs: Ignoring removed bh option [ 58.170772][ T4798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.215096][ T4303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.237258][ T4807] loop0: detected capacity change from 0 to 1024 [ 58.244864][ T4807] EXT4-fs: Ignoring removed orlov option [ 58.267850][ T4807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.289709][ T4812] loop1: detected capacity change from 0 to 1024 [ 58.308815][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.324519][ T4815] netlink: 'syz.2.497': attribute type 5 has an invalid length. [ 58.334761][ T4812] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.498: Allocating blocks 385-513 which overlap fs metadata [ 58.351462][ T4812] EXT4-fs (loop1): pa ffff888106e490e0: logic 16, phys. 129, len 24 [ 58.359953][ T4812] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 58.374047][ T4807] ================================================================== [ 58.382238][ T4807] BUG: KCSAN: data-race in filemap_read / filemap_read [ 58.389131][ T4807] [ 58.391478][ T4807] read to 0xffff8881183a4a68 of 8 bytes by task 4816 on cpu 0: [ 58.399038][ T4807] filemap_read+0x6f/0xa00 [ 58.403657][ T4807] generic_file_read_iter+0x79/0x330 [ 58.409993][ T4807] ext4_file_read_iter+0x1cc/0x290 [ 58.415686][ T4807] copy_splice_read+0x3c4/0x5f0 [ 58.420571][ T4807] splice_direct_to_actor+0x290/0x680 [ 58.426063][ T4807] do_splice_direct+0xda/0x150 [ 58.430968][ T4807] do_sendfile+0x380/0x650 [ 58.435852][ T4807] __x64_sys_sendfile64+0x105/0x150 [ 58.441188][ T4807] x64_sys_call+0x2bb0/0x2ff0 [ 58.445920][ T4807] do_syscall_64+0xd2/0x200 [ 58.450594][ T4807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.457003][ T4807] [ 58.459479][ T4807] write to 0xffff8881183a4a68 of 8 bytes by task 4807 on cpu 1: [ 58.467411][ T4807] filemap_read+0x974/0xa00 [ 58.471947][ T4807] generic_file_read_iter+0x79/0x330 [ 58.477359][ T4807] ext4_file_read_iter+0x1cc/0x290 [ 58.482526][ T4807] copy_splice_read+0x3c4/0x5f0 [ 58.487862][ T4807] splice_direct_to_actor+0x290/0x680 [ 58.494130][ T4807] do_splice_direct+0xda/0x150 [ 58.499360][ T4807] do_sendfile+0x380/0x650 [ 58.503927][ T4807] __x64_sys_sendfile64+0x105/0x150 [ 58.509341][ T4807] x64_sys_call+0x2bb0/0x2ff0 [ 58.514689][ T4807] do_syscall_64+0xd2/0x200 [ 58.519415][ T4807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.525455][ T4807] [ 58.528243][ T4807] value changed: 0x0000000000000181 -> 0x0000000000000182 [ 58.540927][ T4807] [ 58.544385][ T4807] Reported by Kernel Concurrency Sanitizer on: [ 58.552445][ T4807] CPU: 1 UID: 0 PID: 4807 Comm: syz.0.496 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 58.566732][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.576851][ T4807] ================================================================== [ 58.616749][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.743592][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.727429][ T3391] usb usb8-port4: unable to enumerate USB device [ 61.587440][ T3391] usb usb8-port4: attempt power cycle [ 63.417500][ T3391] usb usb8-port4: unable to enumerate USB device