last executing test programs: 43.884281912s ago: executing program 3 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 43.613053076s ago: executing program 3 (id=38): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 43.414084609s ago: executing program 3 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "d15cdc", 0x44, 0x2f, 0x1, @local, @private0, {[], {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x7, 0x3, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 43.175134692s ago: executing program 3 (id=52): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.095911853s ago: executing program 3 (id=54): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 42.332853664s ago: executing program 3 (id=78): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 42.321900524s ago: executing program 32 (id=78): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 23.389181516s ago: executing program 0 (id=600): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") creat(0x0, 0x182) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 22.679378166s ago: executing program 0 (id=605): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 21.861678668s ago: executing program 33 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 14.292289056s ago: executing program 5 (id=777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/119, 0x77}], 0x1}, 0x0) 13.425784848s ago: executing program 5 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 13.392327479s ago: executing program 5 (id=794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 13.29704523s ago: executing program 5 (id=797): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 13.099655813s ago: executing program 5 (id=800): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="40d291d5b8a093e651", 0x9}], 0x1) 10.823496106s ago: executing program 5 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 10.823401646s ago: executing program 34 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 1.987124772s ago: executing program 1 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000ff850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x18) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.872247014s ago: executing program 1 (id=1131): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) write$UHID_CREATE(r0, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) 1.298196312s ago: executing program 4 (id=1137): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r2}, 0x50) 1.265642103s ago: executing program 4 (id=1138): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x68f}], 0x1, 0x23, 0x0) 1.216500393s ago: executing program 4 (id=1141): iopl(0x3) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 1.000860186s ago: executing program 1 (id=1155): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/119, 0x77}], 0x1}, 0x2000) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 414.725665ms ago: executing program 2 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 391.434825ms ago: executing program 1 (id=1176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r3, r2, 0x0) 380.894395ms ago: executing program 7 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 361.137466ms ago: executing program 2 (id=1178): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 354.280566ms ago: executing program 1 (id=1179): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 323.594976ms ago: executing program 6 (id=1180): r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x138) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db15", 0x12) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendfile(r0, r1, 0x0, 0xe065) 323.434216ms ago: executing program 7 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) creat(&(0x7f0000000600)='./file0\x00', 0xe5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 323.302866ms ago: executing program 4 (id=1184): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0xf, 0x0, 0x83, 0xffffffff}) getdents(r2, 0x0, 0x0) 323.095816ms ago: executing program 2 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 315.835016ms ago: executing program 1 (id=1186): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x8001}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x803, 0x0) 272.564757ms ago: executing program 7 (id=1187): syz_open_dev$vcsn(&(0x7f0000000000), 0x79, 0x141041) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) poll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x4) 261.662397ms ago: executing program 2 (id=1188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x70, 0x98, 0x0, {0x0, 0x5803}}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 216.457328ms ago: executing program 7 (id=1189): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 52.48615ms ago: executing program 6 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 0s ago: executing program 6 (id=1194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): 36.596124][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.628617][ T3310] hsr_slave_0: entered promiscuous mode [ 36.634629][ T3310] hsr_slave_1: entered promiscuous mode [ 36.640456][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.648050][ T3310] Cannot create hsr debugfs directory [ 36.667174][ T3315] hsr_slave_0: entered promiscuous mode [ 36.673212][ T3315] hsr_slave_1: entered promiscuous mode [ 36.679055][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.686648][ T3315] Cannot create hsr debugfs directory [ 36.716233][ T3312] hsr_slave_0: entered promiscuous mode [ 36.722580][ T3312] hsr_slave_1: entered promiscuous mode [ 36.728562][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.736208][ T3312] Cannot create hsr debugfs directory [ 36.829150][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.839952][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.868869][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.891679][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.933923][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.942718][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.954602][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.967017][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.990424][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.001734][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.010804][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.025917][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.062528][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.079550][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.088734][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.098242][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.141924][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.155608][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.186391][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.193649][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.204553][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.211739][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.220173][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.227298][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.245179][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.264948][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.276598][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.286848][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.301767][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.316163][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.323335][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.332690][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.339778][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.350976][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.377490][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.384615][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.395836][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.402997][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.433156][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.454339][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.476124][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.509776][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.525160][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.532385][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.542947][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.550087][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.570904][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.622235][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.641317][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.648989][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.658424][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.665556][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.689785][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.700343][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.720535][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.743901][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.790326][ T3307] veth0_vlan: entered promiscuous mode [ 37.808132][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.819460][ T3307] veth1_vlan: entered promiscuous mode [ 37.844961][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.881019][ T3307] veth0_macvtap: entered promiscuous mode [ 37.892883][ T3307] veth1_macvtap: entered promiscuous mode [ 37.903780][ T3310] veth0_vlan: entered promiscuous mode [ 37.919533][ T3310] veth1_vlan: entered promiscuous mode [ 37.930141][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.949554][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.958724][ T3310] veth0_macvtap: entered promiscuous mode [ 37.968694][ T3310] veth1_macvtap: entered promiscuous mode [ 37.993931][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.002812][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.011727][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.020619][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.039809][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.052232][ T3315] veth0_vlan: entered promiscuous mode [ 38.068105][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.076234][ T3305] veth0_vlan: entered promiscuous mode [ 38.092619][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.101432][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110154][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.118941][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.129091][ T3315] veth1_vlan: entered promiscuous mode [ 38.136223][ T3305] veth1_vlan: entered promiscuous mode [ 38.151426][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.168874][ T3312] veth0_vlan: entered promiscuous mode [ 38.185917][ T3312] veth1_vlan: entered promiscuous mode [ 38.220618][ T3305] veth0_macvtap: entered promiscuous mode [ 38.230247][ T3305] veth1_macvtap: entered promiscuous mode [ 38.239817][ T3315] veth0_macvtap: entered promiscuous mode [ 38.248693][ T3315] veth1_macvtap: entered promiscuous mode [ 38.268831][ T3312] veth0_macvtap: entered promiscuous mode [ 38.277127][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.289375][ T3480] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.290727][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.306678][ T3480] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 38.315467][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.331276][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.340147][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349002][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357751][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.376368][ T3312] veth1_macvtap: entered promiscuous mode [ 38.387669][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.397115][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.411692][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.419381][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.428266][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.437190][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.446035][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.476960][ T3485] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 38.486688][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.495600][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.504589][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.513441][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.655743][ T3498] loop0: detected capacity change from 0 to 164 [ 38.677608][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 38.677625][ T29] audit: type=1400 audit(1752050390.313:126): avc: denied { connect } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.678842][ T3500] vlan2: entered allmulticast mode [ 38.683853][ T29] audit: type=1400 audit(1752050390.313:127): avc: denied { create } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.705410][ T3499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.708403][ T29] audit: type=1400 audit(1752050390.313:128): avc: denied { write } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.757949][ T29] audit: type=1400 audit(1752050390.313:129): avc: denied { read } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.792597][ T3498] Unable to read rock-ridge attributes [ 38.798920][ T29] audit: type=1400 audit(1752050390.433:130): avc: denied { mount } for pid=3494 comm="syz.0.9" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.824909][ T3498] Unable to read rock-ridge attributes [ 38.894869][ T29] audit: type=1400 audit(1752050390.463:131): avc: denied { tracepoint } for pid=3494 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.914456][ T29] audit: type=1400 audit(1752050390.463:132): avc: denied { create } for pid=3494 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.933702][ T29] audit: type=1400 audit(1752050390.503:133): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.011659][ T29] audit: type=1400 audit(1752050390.603:134): avc: denied { create } for pid=3507 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.031229][ T29] audit: type=1400 audit(1752050390.623:135): avc: denied { read } for pid=3507 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.056775][ T3515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.065760][ T3515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.199793][ T3531] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 39.199793][ T3531] program syz.3.23 not setting count and/or reply_len properly [ 39.364213][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 39.723866][ T3567] loop4: detected capacity change from 0 to 1024 [ 39.763060][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.810399][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.848636][ T3572] loop4: detected capacity change from 0 to 128 [ 39.870893][ T3572] EXT4-fs: Ignoring removed nobh option [ 39.883611][ T3572] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.896862][ T3572] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.998754][ T3409] kernel write not supported for file /ppp (pid: 3409 comm: kworker/1:5) [ 40.059651][ T3585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 40.128424][ T3589] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 40.172820][ T3589] syz_tun: entered promiscuous mode [ 40.192781][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.206286][ T3589] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.224492][ T3596] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 40.237551][ T3596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.250433][ T3596] team0: Port device bond0 added [ 40.267727][ T3600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.298455][ T3596] syz.3.43 (3596) used greatest stack depth: 10680 bytes left [ 40.450466][ T3310] bond0: (slave syz_tun): Releasing backup interface [ 40.506708][ T3624] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 40.514606][ T3624] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 40.522387][ T3624] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.57'. [ 40.569764][ T3627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.666112][ T3631] loop4: detected capacity change from 0 to 512 [ 40.685702][ T3631] EXT4-fs: Ignoring removed bh option [ 40.693949][ T3631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.707229][ T3631] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.716555][ T3631] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 40.735905][ T3631] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 40.758969][ T3631] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 40.784063][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.817792][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.963703][ T3652] pimreg: entered allmulticast mode [ 40.971569][ T3652] pimreg: left allmulticast mode [ 41.150769][ T3668] serio: Serial port ptm0 [ 41.164851][ T157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.204484][ T157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.247378][ T157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.262767][ T3678] netlink: 96 bytes leftover after parsing attributes in process `syz.2.81'. [ 41.313731][ T157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.401701][ T3673] chnl_net:caif_netlink_parms(): no params data found [ 41.413548][ T157] bridge_slave_1: left allmulticast mode [ 41.419256][ T157] bridge_slave_1: left promiscuous mode [ 41.425136][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.433706][ T157] bridge_slave_0: left promiscuous mode [ 41.439392][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.514589][ T157] team0: Port device bond0 removed [ 41.521491][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.532340][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.542319][ T157] bond0 (unregistering): Released all slaves [ 41.564781][ T3627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.587133][ T157] hsr_slave_0: left promiscuous mode [ 41.593456][ T157] hsr_slave_1: left promiscuous mode [ 41.599236][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.606804][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.614553][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.622182][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.643155][ T157] veth1_macvtap: left promiscuous mode [ 41.651545][ T157] veth0_macvtap: left promiscuous mode [ 41.657152][ T157] veth1_vlan: left promiscuous mode [ 41.664178][ T157] veth0_vlan: left promiscuous mode [ 41.742165][ T157] team0 (unregistering): Port device team_slave_1 removed [ 41.752154][ T157] team0 (unregistering): Port device team_slave_0 removed [ 41.799327][ T3627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.834593][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.841981][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.849659][ T3673] bridge_slave_0: entered allmulticast mode [ 41.857864][ T3673] bridge_slave_0: entered promiscuous mode [ 41.873274][ T3627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.895871][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.903112][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.917379][ T3673] bridge_slave_1: entered allmulticast mode [ 41.936933][ T3673] bridge_slave_1: entered promiscuous mode [ 41.966817][ T3673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.986957][ T3627] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.008288][ T3673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.023797][ T3627] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.070731][ T3627] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.082174][ T3673] team0: Port device team_slave_0 added [ 42.088862][ T3673] team0: Port device team_slave_1 added [ 42.107004][ T3627] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.139172][ T3727] process 'syz.4.85' launched './file0' with NULL argv: empty string added [ 42.181883][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.188962][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.215102][ T3673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.260101][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.267202][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.293283][ T3673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.354746][ T3738] vhci_hcd: invalid port number 11 [ 42.359915][ T3738] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 42.381216][ T3673] hsr_slave_0: entered promiscuous mode [ 42.392581][ T3673] hsr_slave_1: entered promiscuous mode [ 42.398505][ T3673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.415263][ T3673] Cannot create hsr debugfs directory [ 42.675380][ T3673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.703440][ T3673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.726586][ T3673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.751578][ T3673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.881729][ T3797] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.881729][ T3797] program syz.0.104 not setting count and/or reply_len properly [ 42.900373][ T3673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.914664][ T3673] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.938904][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.946074][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.979730][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.986881][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.186868][ T3673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.216629][ T3843] netlink: 340 bytes leftover after parsing attributes in process `syz.1.110'. [ 43.248770][ T3843] netlink: 48 bytes leftover after parsing attributes in process `syz.1.110'. [ 43.498635][ T3894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.115'. [ 43.513355][ T3673] veth0_vlan: entered promiscuous mode [ 43.530005][ T3673] veth1_vlan: entered promiscuous mode [ 43.560689][ T3673] veth0_macvtap: entered promiscuous mode [ 43.603574][ T3673] veth1_macvtap: entered promiscuous mode [ 43.633181][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.654787][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.680686][ T3673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.689530][ T3673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.698308][ T3673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.707071][ T3673] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.781073][ T3906] loop1: detected capacity change from 0 to 8192 [ 43.805556][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 43.805574][ T29] audit: type=1400 audit(1752050395.443:303): avc: denied { mounton } for pid=3673 comm="syz-executor" path="/root/syzkaller.ZxVk5s/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.842650][ T3927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 43.842939][ T29] audit: type=1400 audit(1752050395.453:304): avc: denied { mount } for pid=3905 comm="syz.1.117" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.878805][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 43.887736][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 43.908046][ T29] audit: type=1400 audit(1752050395.543:305): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.004760][ T29] audit: type=1326 audit(1752050395.613:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.028834][ T29] audit: type=1326 audit(1752050395.613:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.052621][ T29] audit: type=1326 audit(1752050395.613:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.076249][ T29] audit: type=1326 audit(1752050395.613:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.099618][ T29] audit: type=1326 audit(1752050395.613:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.123054][ T29] audit: type=1326 audit(1752050395.613:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.146495][ T29] audit: type=1326 audit(1752050395.613:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab86ee929 code=0x7ffc0000 [ 44.318963][ T3982] SELinux: syz.2.131 (3982) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 44.676518][ T4035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.145'. [ 44.680801][ T4036] loop2: detected capacity change from 0 to 1024 [ 44.686101][ T4038] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 44.719050][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.837679][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.248588][ T4105] loop0: detected capacity change from 0 to 4096 [ 45.296530][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.514334][ T4132] uprobe: syz.1.168:4132 failed to unregister, leaking uprobe [ 45.685795][ T4151] loop2: detected capacity change from 0 to 1024 [ 45.700457][ T4151] ======================================================= [ 45.700457][ T4151] WARNING: The mand mount option has been deprecated and [ 45.700457][ T4151] and is ignored by this kernel. Remove the mand [ 45.700457][ T4151] option from the mount to silence this warning. [ 45.700457][ T4151] ======================================================= [ 45.836979][ T4151] EXT4-fs: Ignoring removed nobh option [ 45.842778][ T4151] EXT4-fs: inline encryption not supported [ 45.864606][ T4174] loop4: detected capacity change from 0 to 256 [ 45.883906][ T4174] vfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 45.904793][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.915645][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.941208][ T4151] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.173: Allocating blocks 385-513 which overlap fs metadata [ 45.962340][ T4151] EXT4-fs (loop2): pa ffff888106a13070: logic 16, phys. 129, len 24 [ 45.970397][ T4151] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 46.018059][ T4183] smc: net device bond0 applied user defined pnetid SYZ2 [ 46.019296][ T4151] syz.2.173 (4151) used greatest stack depth: 9576 bytes left [ 46.025621][ T4183] smc: net device bond0 erased user defined pnetid SYZ2 [ 46.042925][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.314902][ T4209] capability: warning: `syz.5.193' uses 32-bit capabilities (legacy support in use) [ 46.510884][ T4228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 46.520450][ T4228] veth0_macvtap: left promiscuous mode [ 46.619749][ T4230] Invalid ELF header magic: != ELF [ 46.729493][ T4244] loop1: detected capacity change from 0 to 512 [ 46.751198][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.784643][ T4244] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.811551][ T4244] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.209: corrupted inode contents [ 46.825731][ T4244] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.209: mark_inode_dirty error [ 46.849463][ T4244] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.209: corrupted inode contents [ 46.875395][ T4244] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.209: mark_inode_dirty error [ 46.904978][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.931390][ T4253] Falling back ldisc for ttyS3. [ 47.140703][ T4294] loop0: detected capacity change from 0 to 164 [ 47.150791][ T4294] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.165642][ T4294] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.177272][ T4294] Symlink component flag not implemented [ 47.183055][ T4294] Symlink component flag not implemented [ 47.190002][ T4294] Symlink component flag not implemented (7) [ 47.196243][ T4294] Symlink component flag not implemented (116) [ 47.260385][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 47.296976][ T4304] erspan0: entered promiscuous mode [ 47.310383][ T4304] macvtap1: entered promiscuous mode [ 47.315919][ T4304] macvtap1: entered allmulticast mode [ 47.321358][ T4304] erspan0: entered allmulticast mode [ 47.341238][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 47.377397][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.236'. [ 47.474297][ T4317] netlink: 'syz.5.237': attribute type 21 has an invalid length. [ 47.482246][ T4317] netlink: 156 bytes leftover after parsing attributes in process `syz.5.237'. [ 47.509481][ T4320] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 47.517315][ T4320] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 47.525091][ T4320] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.240'. [ 47.572962][ T4322] ip6tnl1: entered promiscuous mode [ 47.578245][ T4322] ip6tnl1: entered allmulticast mode [ 47.664168][ T4332] loop2: detected capacity change from 0 to 2048 [ 47.732350][ T4332] loop2: p1 < > p4 [ 47.737174][ T4332] loop2: p4 size 8388608 extends beyond EOD, truncated [ 47.818372][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.915993][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 48.055776][ T4360] loop2: detected capacity change from 0 to 512 [ 48.088301][ T4360] EXT4-fs (loop2): too many log groups per flexible block group [ 48.096162][ T4360] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 48.107639][ T4360] EXT4-fs (loop2): mount failed [ 48.252346][ T4386] loop1: detected capacity change from 0 to 128 [ 48.266876][ T4388] 0ªX¹¦À: renamed from caif0 [ 48.277019][ T4388] 0ªX¹¦À: entered allmulticast mode [ 48.282316][ T4388] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 48.300096][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.307622][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.315147][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.322738][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.330184][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.337679][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.345166][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.352661][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.360320][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.367976][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.375601][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.383180][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.390696][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.398239][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.405701][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.413281][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.420802][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.428391][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.435840][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.443368][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.450972][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.458450][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.465900][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.473383][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.480857][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.488348][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.495768][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.503270][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.510708][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.518233][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.525689][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.533242][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.540711][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.548542][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.556102][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.563629][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.571049][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.578506][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.585955][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.593393][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.600910][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.608402][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.615959][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.623415][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.630841][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.638319][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.645793][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.653281][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.660714][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.668222][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.675670][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.683123][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.690639][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 48.700345][ T10] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 48.814368][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 48.814393][ T29] audit: type=1400 audit(1752050400.453:428): avc: denied { write } for pid=4406 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.900340][ T29] audit: type=1400 audit(1752050400.533:429): avc: denied { sqpoll } for pid=4412 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.900416][ T4411] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 48.900416][ T4411] program syz.5.275 not setting count and/or reply_len properly [ 48.954455][ T29] audit: type=1400 audit(1752050400.573:430): avc: denied { create } for pid=4412 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.974056][ T29] audit: type=1400 audit(1752050400.573:431): avc: denied { bind } for pid=4412 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.993323][ T29] audit: type=1400 audit(1752050400.573:432): avc: denied { listen } for pid=4412 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.064794][ T4417] bond1: entered promiscuous mode [ 49.069893][ T4417] bond1: entered allmulticast mode [ 49.075420][ T4417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.085878][ T4417] bond1 (unregistering): Released all slaves [ 49.096627][ T4422] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 49.106311][ T4424] __nla_validate_parse: 10 callbacks suppressed [ 49.106329][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.280'. [ 49.107362][ T29] audit: type=1400 audit(1752050400.743:433): avc: denied { connect } for pid=4423 comm="syz.0.281" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.142256][ T29] audit: type=1400 audit(1752050400.753:434): avc: denied { write } for pid=4423 comm="syz.0.281" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.175247][ T29] audit: type=1400 audit(1752050400.813:435): avc: denied { create } for pid=4427 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.198310][ T4426] pim6reg: entered allmulticast mode [ 49.250350][ T29] audit: type=1400 audit(1752050400.883:436): avc: denied { execute } for pid=4429 comm="syz.5.284" path="/41/cpu.stat" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.420791][ T29] audit: type=1400 audit(1752050401.053:437): avc: denied { execute_no_trans } for pid=4448 comm="syz.1.292" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.580004][ T4459] ALSA: seq fatal error: cannot create timer (-19) [ 49.618611][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 50.002162][ T4507] netlink: 'syz.0.317': attribute type 7 has an invalid length. [ 50.009865][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 50.050143][ T4511] SELinux: failed to load policy [ 50.099688][ T4517] vlan2: entered allmulticast mode [ 50.130117][ T4521] bond0: entered promiscuous mode [ 50.135336][ T4521] bond_slave_0: entered promiscuous mode [ 50.141344][ T4521] bond_slave_1: entered promiscuous mode [ 50.149711][ T4521] batadv0: entered promiscuous mode [ 50.155956][ T4521] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 50.165348][ T4521] bond0: left promiscuous mode [ 50.170200][ T4521] bond_slave_0: left promiscuous mode [ 50.175797][ T4521] bond_slave_1: left promiscuous mode [ 50.181781][ T4521] batadv0: left promiscuous mode [ 50.267906][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 50.305997][ T4530] bridge0: port 3(macvlan2) entered blocking state [ 50.312828][ T4530] bridge0: port 3(macvlan2) entered disabled state [ 50.341403][ T4530] macvlan2: entered allmulticast mode [ 50.346845][ T4530] bridge0: entered allmulticast mode [ 50.363926][ T4530] macvlan2: left allmulticast mode [ 50.369119][ T4530] bridge0: left allmulticast mode [ 50.381621][ T4543] loop8: detected capacity change from 0 to 16385 [ 50.384790][ T4539] geneve2: entered promiscuous mode [ 50.494143][ T4550] loop1: detected capacity change from 0 to 1024 [ 50.501118][ T4550] EXT4-fs: Ignoring removed orlov option [ 50.517278][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.943420][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.996983][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 51.268802][ T4589] loop0: detected capacity change from 0 to 164 [ 51.279036][ T4589] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.290844][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.298349][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.311333][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.318882][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.325620][ T4589] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.326338][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.341971][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.349473][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.356922][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.359627][ T4589] Symlink component flag not implemented [ 51.364355][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.364386][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.370011][ T4589] Symlink component flag not implemented [ 51.377403][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.377432][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.418521][ T4589] Symlink component flag not implemented (7) [ 51.424687][ T4589] Symlink component flag not implemented (116) [ 51.435796][ T4596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 51.438176][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.444784][ T4596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 51.452194][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.461020][ T4596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 51.468500][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.468529][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.468561][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.499883][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.500028][ T4596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 51.507296][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.507338][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.516245][ T4596] netlink: 'syz.4.356': attribute type 6 has an invalid length. [ 51.523617][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.546152][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.553616][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.561143][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.568566][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.576724][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.584639][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.661341][ T1038] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.691580][ T4607] fido_id[4607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.884962][ T4634] syz.1.374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.937000][ T4642] loop4: detected capacity change from 0 to 164 [ 52.197352][ T4668] loop0: detected capacity change from 0 to 256 [ 52.228873][ T4668] vfat: Bad value for 'fmask' [ 52.236708][ T4670] loop4: detected capacity change from 0 to 512 [ 52.310632][ T4670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.337526][ T4670] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.354239][ T4679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.394'. [ 52.389489][ T4670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.402699][ T4681] 9pnet: p9_errstr2errno: server reported unknown error [ 52.420173][ T4670] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.462956][ T4684] syzkaller1: entered promiscuous mode [ 52.468578][ T4684] syzkaller1: entered allmulticast mode [ 52.475036][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.525577][ T4690] loop2: detected capacity change from 0 to 512 [ 52.581821][ T4698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4698 comm=syz.5.402 [ 52.598983][ T4690] EXT4-fs (loop2): 1 orphan inode deleted [ 52.614631][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 52.629886][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.643671][ T4690] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.660462][ C0] hrtimer: interrupt took 45943 ns [ 52.725562][ T4707] mmap: syz.1.406 (4707) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.741557][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.898205][ T4724] wg2: entered promiscuous mode [ 52.903225][ T4724] wg2: entered allmulticast mode [ 52.971789][ T4734] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.984127][ T4734] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 53.060732][ T4751] loop5: detected capacity change from 0 to 1024 [ 53.085246][ T4751] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.117627][ T4751] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 53.125974][ T4751] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.134539][ T4751] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.420: bg 0: block 10: padding at end of block bitmap is not set [ 53.149252][ T4751] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.420: Failed to acquire dquot type 0 [ 53.161854][ T4751] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.420: Failed to acquire dquot type 0 [ 53.206883][ T4751] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.420: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.228347][ T4761] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 53.243032][ T4758] IPVS: stopping master sync thread 4761 ... [ 53.271409][ T4751] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.420: Failed to acquire dquot type 0 [ 53.302744][ T4751] EXT4-fs (loop5): 1 orphan inode deleted [ 53.309551][ T4751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.336118][ T4751] syz.5.420 (4751) used greatest stack depth: 9344 bytes left [ 53.352309][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.457095][ T4772] loop1: detected capacity change from 0 to 512 [ 53.487006][ T4772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.514991][ T4772] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.555122][ T4772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.648780][ T4789] hub 9-0:1.0: USB hub found [ 53.656880][ T4789] hub 9-0:1.0: 8 ports detected [ 53.794897][ T4807] loop9: detected capacity change from 0 to 7 [ 53.803062][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.811026][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.818920][ T4214] loop9: unable to read partition table [ 53.826101][ T4807] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.837980][ T4807] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.845992][ T4807] loop9: unable to read partition table [ 53.858205][ T4807] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 53.858205][ T4807] ) failed (rc=-5) [ 53.872073][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.881790][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.896187][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.932524][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.955262][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.969790][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 53.969809][ T29] audit: type=1400 audit(1752050405.603:556): avc: denied { write } for pid=4814 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.996068][ T29] audit: type=1400 audit(1752050405.603:557): avc: denied { nlmsg_write } for pid=4814 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.063092][ T29] audit: type=1326 audit(1752050405.613:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.086436][ T29] audit: type=1326 audit(1752050405.613:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.109855][ T29] audit: type=1326 audit(1752050405.613:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.133392][ T29] audit: type=1326 audit(1752050405.613:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.156768][ T29] audit: type=1326 audit(1752050405.613:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.180231][ T29] audit: type=1326 audit(1752050405.613:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.203609][ T29] audit: type=1326 audit(1752050405.613:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.227090][ T29] audit: type=1326 audit(1752050405.613:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3943ace929 code=0x7ffc0000 [ 54.257574][ T4827] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.499614][ T4873] loop9: detected capacity change from 0 to 7 [ 54.511264][ T4214] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.524966][ T4214] loop9: unable to read partition table [ 54.535611][ T4873] loop9: unable to read partition table [ 54.542580][ T4873] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 54.542580][ T4873] ) failed (rc=-5) [ 55.205863][ T4945] netlink: 'syz.4.479': attribute type 3 has an invalid length. [ 55.236692][ T4946] loop0: detected capacity change from 0 to 1024 [ 55.258978][ T4946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.293467][ T4946] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.370190][ T4946] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.480: lblock 3 mapped to illegal pblock 3 (length 13) [ 55.442705][ T4946] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 55.446603][ T4954] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 55.455218][ T4946] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.455218][ T4946] [ 55.462993][ T4954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.483'. [ 55.481185][ T4954] dummy0: entered promiscuous mode [ 55.490137][ T4954] bridge0: port 3(dummy0) entered blocking state [ 55.496659][ T4954] bridge0: port 3(dummy0) entered disabled state [ 55.508765][ T4954] dummy0: entered allmulticast mode [ 55.515163][ T4954] bridge0: port 3(dummy0) entered blocking state [ 55.521594][ T4954] bridge0: port 3(dummy0) entered forwarding state [ 55.556207][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.600384][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 55.648219][ T4969] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.487'. [ 55.672613][ T4962] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.487'. [ 55.727558][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 55.825290][ T4988] loop5: detected capacity change from 0 to 512 [ 55.871062][ T4988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.874506][ T4996] loop9: detected capacity change from 0 to 7 [ 55.899898][ T4996] loop9: unable to read partition table [ 55.906042][ T4996] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 55.906042][ T4996] ) failed (rc=-5) [ 55.924107][ T4988] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.000272][ T5003] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.503'. [ 56.000606][ T5000] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.503'. [ 56.032405][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.079362][ T5009] loop1: detected capacity change from 0 to 512 [ 56.093361][ T5010] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 56.101205][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 56.123160][ T5010] dummy0: entered promiscuous mode [ 56.131995][ T5010] bridge0: port 3(dummy0) entered blocking state [ 56.138416][ T5010] bridge0: port 3(dummy0) entered disabled state [ 56.158548][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.164520][ T5010] dummy0: entered allmulticast mode [ 56.181509][ T5009] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.211935][ T5010] bridge0: port 3(dummy0) entered blocking state [ 56.218451][ T5010] bridge0: port 3(dummy0) entered forwarding state [ 56.246465][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.876943][ T5049] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 56.884883][ T5049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.523'. [ 56.952249][ T5049] dummy0: entered promiscuous mode [ 56.958122][ T5049] bridge0: port 3(dummy0) entered blocking state [ 56.964659][ T5049] bridge0: port 3(dummy0) entered disabled state [ 56.981359][ T5049] dummy0: entered allmulticast mode [ 56.987321][ T5049] bridge0: port 3(dummy0) entered blocking state [ 56.993795][ T5049] bridge0: port 3(dummy0) entered forwarding state [ 57.246792][ T5059] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.280165][ T5059] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 58.346272][ T5110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 58.476311][ T5114] loop5: detected capacity change from 0 to 164 [ 58.504973][ T5114] Unable to read rock-ridge attributes [ 58.515591][ T5114] Unable to read rock-ridge attributes [ 58.928949][ T5142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5142 comm=syz.2.562 [ 59.027907][ T5153] loop5: detected capacity change from 0 to 512 [ 59.040835][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 59.040858][ T29] audit: type=1400 audit(1752050410.673:799): avc: denied { bind } for pid=5155 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.066443][ T29] audit: type=1400 audit(1752050410.673:800): avc: denied { name_bind } for pid=5155 comm="syz.1.569" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 59.086905][ T29] audit: type=1400 audit(1752050410.673:801): avc: denied { node_bind } for pid=5155 comm="syz.1.569" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 59.175938][ T5153] EXT4-fs (loop5): 1 orphan inode deleted [ 59.198183][ T4898] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.208150][ T4898] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 1 [ 59.241192][ T29] audit: type=1326 audit(1752050410.823:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.264523][ T29] audit: type=1326 audit(1752050410.823:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.288065][ T29] audit: type=1326 audit(1752050410.833:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.311346][ T29] audit: type=1326 audit(1752050410.833:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.334825][ T29] audit: type=1326 audit(1752050410.833:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.338695][ T5153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.358209][ T29] audit: type=1326 audit(1752050410.833:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 59.412984][ T5153] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.483058][ T5180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5180 comm=syz.0.578 [ 59.521436][ T5185] syzkaller1: entered promiscuous mode [ 59.526987][ T5185] syzkaller1: entered allmulticast mode [ 59.552069][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.564879][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.576762][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.977539][ T5204] loop1: detected capacity change from 0 to 1024 [ 60.054822][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.109960][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.125853][ T5208] loop0: detected capacity change from 0 to 128 [ 60.152260][ T5208] EXT4-fs: Ignoring removed nobh option [ 60.190291][ T5208] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.213155][ T5213] loop2: detected capacity change from 0 to 512 [ 60.261884][ T5208] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.281261][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.339340][ T5213] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.357183][ T5213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.421653][ T5213] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.464499][ T5223] loop4: detected capacity change from 0 to 256 [ 60.492743][ T5223] vfat: Bad value for 'fmask' [ 60.532971][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.598270][ T5229] loop4: detected capacity change from 0 to 512 [ 60.607190][ T5228] syzkaller1: entered promiscuous mode [ 60.612866][ T5228] syzkaller1: entered allmulticast mode [ 60.659368][ T5229] EXT4-fs (loop4): 1 orphan inode deleted [ 60.672007][ T4882] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 1 [ 60.681836][ T5229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.696403][ T5229] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.763247][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.785332][ T5238] 9pnet: p9_errstr2errno: server reported unknown error [ 60.829114][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.254674][ T5256] loop2: detected capacity change from 0 to 256 [ 61.261911][ T5258] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 61.272702][ T5257] loop5: detected capacity change from 0 to 512 [ 61.281820][ T5258] syz_tun: entered promiscuous mode [ 61.289458][ T5256] vfat: Bad value for 'fmask' [ 61.296744][ T5258] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.314518][ T5257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.324973][ T5258] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 61.338190][ T5258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.346078][ T5258] team0: Port device bond0 added [ 61.369831][ T5257] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.388001][ T5257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.410965][ T5257] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.435288][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.489146][ T5275] loop1: detected capacity change from 0 to 512 [ 61.530060][ T5280] loop2: detected capacity change from 0 to 512 [ 61.543778][ T5275] EXT4-fs (loop1): 1 orphan inode deleted [ 61.550147][ T5280] EXT4-fs: Ignoring removed bh option [ 61.556532][ T5275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.570718][ T5275] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.581339][ T5094] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:68: Failed to release dquot type 1 [ 61.594187][ T5280] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.603353][ T5280] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 61.620564][ T4898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.636884][ T5280] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 61.655556][ T5280] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 61.664755][ T5280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.694979][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.749596][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.759845][ T4898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.824737][ T4898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.878271][ T5307] __nla_validate_parse: 2 callbacks suppressed [ 61.878290][ T5307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.631'. [ 61.903047][ T5312] serio: Serial port ptm0 [ 61.910929][ T4898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.945261][ T5316] netlink: 96 bytes leftover after parsing attributes in process `syz.5.633'. [ 62.026472][ T4898] dummy0: left allmulticast mode [ 62.037536][ T4898] bridge0: port 3(dummy0) entered disabled state [ 62.044709][ T4898] bridge_slave_1: left allmulticast mode [ 62.050372][ T4898] bridge_slave_1: left promiscuous mode [ 62.056316][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.064422][ T4898] bridge_slave_0: left allmulticast mode [ 62.070090][ T4898] bridge_slave_0: left promiscuous mode [ 62.075897][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.214374][ T4898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.224614][ T4898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.235054][ T4898] bond0 (unregistering): Released all slaves [ 62.266252][ T5289] chnl_net:caif_netlink_parms(): no params data found [ 62.282429][ T4898] hsr_slave_0: left promiscuous mode [ 62.287994][ T4898] hsr_slave_1: left promiscuous mode [ 62.293652][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.301050][ T4898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.308584][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.316020][ T4898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.325875][ T4898] veth1_macvtap: left promiscuous mode [ 62.331501][ T4898] veth1_vlan: left promiscuous mode [ 62.336724][ T4898] veth0_vlan: left promiscuous mode [ 62.375169][ T4898] pim6reg (unregistering): left allmulticast mode [ 62.404040][ T4898] team0 (unregistering): Port device team_slave_1 removed [ 62.413745][ T4898] team0 (unregistering): Port device team_slave_0 removed [ 62.466832][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.474052][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.481386][ T5289] bridge_slave_0: entered allmulticast mode [ 62.487897][ T5289] bridge_slave_0: entered promiscuous mode [ 62.494819][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.501950][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.509116][ T5289] bridge_slave_1: entered allmulticast mode [ 62.515707][ T5289] bridge_slave_1: entered promiscuous mode [ 62.532625][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.543249][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.562610][ T5289] team0: Port device team_slave_0 added [ 62.569287][ T5289] team0: Port device team_slave_1 added [ 62.585057][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.592071][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.618151][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.629947][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.636970][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.662938][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.689168][ T5289] hsr_slave_0: entered promiscuous mode [ 62.695151][ T5289] hsr_slave_1: entered promiscuous mode [ 62.759167][ T5289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.768363][ T5289] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.777453][ T5289] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.786047][ T5289] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.801840][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.808898][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.816273][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.823402][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.848243][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.858094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.866282][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.880305][ T5289] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.890256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.897359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.907113][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.914258][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.973995][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.077045][ T5289] veth0_vlan: entered promiscuous mode [ 63.085162][ T5289] veth1_vlan: entered promiscuous mode [ 63.100332][ T5289] veth0_macvtap: entered promiscuous mode [ 63.107719][ T5289] veth1_macvtap: entered promiscuous mode [ 63.119027][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.128743][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.139730][ T5289] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.148715][ T5289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.157521][ T5289] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.166362][ T5289] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.275647][ T5365] loop4: detected capacity change from 0 to 1024 [ 63.284297][ T5361] loop6: detected capacity change from 0 to 512 [ 63.322850][ T5365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.344985][ T5365] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.364389][ T5361] EXT4-fs (loop6): 1 orphan inode deleted [ 63.370555][ T5361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.388579][ T5094] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:68: Failed to release dquot type 1 [ 63.404631][ T5365] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.411808][ T5365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.639: bg 0: block 10: padding at end of block bitmap is not set [ 63.428188][ T5361] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.439669][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.639: Failed to acquire dquot type 0 [ 63.475069][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.639: Failed to acquire dquot type 0 [ 63.486904][ T5365] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.639: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.500883][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.639: Failed to acquire dquot type 0 [ 63.510286][ T5289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.537056][ T5365] EXT4-fs (loop4): 1 orphan inode deleted [ 63.561991][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.606683][ T5384] loop6: detected capacity change from 0 to 164 [ 63.617000][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.816819][ T5411] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.816819][ T5411] program syz.2.661 not setting count and/or reply_len properly [ 63.839264][ T5410] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.926409][ T5410] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.979665][ T5410] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.071009][ T5410] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.147766][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 64.147780][ T29] audit: type=1326 audit(1752050415.783:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.183876][ T29] audit: type=1326 audit(1752050415.813:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.207259][ T29] audit: type=1400 audit(1752050415.813:918): avc: denied { read } for pid=5430 comm="syz.2.679" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.230243][ T29] audit: type=1400 audit(1752050415.813:919): avc: denied { open } for pid=5430 comm="syz.2.679" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.253740][ T29] audit: type=1326 audit(1752050415.813:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.277816][ T29] audit: type=1326 audit(1752050415.813:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.301184][ T29] audit: type=1326 audit(1752050415.813:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.324589][ T29] audit: type=1400 audit(1752050415.813:923): avc: denied { ioctl } for pid=5430 comm="syz.2.679" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.349537][ T29] audit: type=1326 audit(1752050415.813:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.373220][ T29] audit: type=1326 audit(1752050415.813:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd53e929 code=0x7ffc0000 [ 64.418107][ T5443] loop1: detected capacity change from 0 to 164 [ 64.428702][ T5443] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.444691][ T5443] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.467019][ T5443] Symlink component flag not implemented [ 64.472886][ T5443] Symlink component flag not implemented [ 64.503917][ T5443] Symlink component flag not implemented (7) [ 64.505500][ T5451] netlink: 64 bytes leftover after parsing attributes in process `syz.4.680'. [ 64.509941][ T5443] Symlink component flag not implemented (116) [ 65.085653][ T5410] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.097310][ T5410] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108739][ T5410] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.120147][ T5410] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.594248][ T5509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 66.173042][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 66.193061][ T5528] bridge0: port 3(macvlan2) entered blocking state [ 66.199671][ T5528] bridge0: port 3(macvlan2) entered disabled state [ 66.232109][ T5528] macvlan2: entered allmulticast mode [ 66.237552][ T5528] bridge0: entered allmulticast mode [ 66.254981][ T5528] macvlan2: left allmulticast mode [ 66.260195][ T5528] bridge0: left allmulticast mode [ 66.284579][ T5535] bond0: entered promiscuous mode [ 66.289808][ T5535] bond_slave_0: entered promiscuous mode [ 66.296310][ T5535] bond_slave_1: entered promiscuous mode [ 66.314188][ T5535] batadv0: entered promiscuous mode [ 66.320136][ T5535] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 66.329817][ T5535] bond0: left promiscuous mode [ 66.334833][ T5535] bond_slave_0: left promiscuous mode [ 66.337893][ T5540] loop6: detected capacity change from 0 to 1024 [ 66.340456][ T5535] bond_slave_1: left promiscuous mode [ 66.354934][ T5535] batadv0: left promiscuous mode [ 66.378491][ T5540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.400087][ T5545] SELinux: syz.1.718 (5545) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.414220][ T5289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.525589][ T5557] loop5: detected capacity change from 0 to 164 [ 66.551141][ T5557] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.574797][ T5557] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.589435][ T5559] loop6: detected capacity change from 0 to 1024 [ 66.613135][ T5557] Symlink component flag not implemented [ 66.618845][ T5557] Symlink component flag not implemented [ 66.626905][ T5559] EXT4-fs: Ignoring removed orlov option [ 66.637014][ T5557] Symlink component flag not implemented (7) [ 66.643133][ T5557] Symlink component flag not implemented (116) [ 66.656055][ T5559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.863645][ T5574] vlan2: entered allmulticast mode [ 66.925881][ T5289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.033717][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'. [ 67.074776][ T5578] bridge0: port 3(macvlan2) entered blocking state [ 67.081464][ T5578] bridge0: port 3(macvlan2) entered disabled state [ 67.107214][ T5578] macvlan2: entered allmulticast mode [ 67.112725][ T5578] bridge0: entered allmulticast mode [ 67.143973][ T5578] macvlan2: left allmulticast mode [ 67.149161][ T5578] bridge0: left allmulticast mode [ 67.165410][ T5585] SELinux: failed to load policy [ 67.400976][ T5594] loop6: detected capacity change from 0 to 164 [ 67.491642][ T5601] loop4: detected capacity change from 0 to 1024 [ 67.505937][ T5594] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.514496][ T5601] EXT4-fs: Ignoring removed orlov option [ 67.535648][ T5594] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.561647][ T5594] Symlink component flag not implemented [ 67.567340][ T5594] Symlink component flag not implemented [ 67.582761][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.585704][ T5594] Symlink component flag not implemented (7) [ 67.600959][ T5594] Symlink component flag not implemented (116) [ 67.637424][ T5606] vlan2: entered allmulticast mode [ 67.834905][ T5615] SELinux: failed to load policy [ 67.864457][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 67.885234][ T5619] bridge0: port 4(macvlan2) entered blocking state [ 67.891957][ T5619] bridge0: port 4(macvlan2) entered disabled state [ 67.911316][ T5619] macvlan2: entered allmulticast mode [ 67.916777][ T5619] bridge0: entered allmulticast mode [ 67.932140][ T5619] macvlan2: left allmulticast mode [ 67.937331][ T5619] bridge0: left allmulticast mode [ 67.984787][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.238819][ T5635] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.257274][ T5637] geneve2: entered promiscuous mode [ 68.295667][ T5635] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.344218][ T5635] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.404444][ T5635] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.469209][ T5635] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.494883][ T5635] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.525379][ T5635] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547830][ T5635] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.988310][ T5660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.010004][ T5664] netlink: 'syz.6.771': attribute type 13 has an invalid length. [ 69.152778][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 69.152795][ T29] audit: type=1400 audit(1752050420.783:1129): avc: denied { open } for pid=5673 comm="syz.2.775" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.228476][ T29] audit: type=1400 audit(1752050420.863:1130): avc: denied { name_bind } for pid=5665 comm="syz.4.772" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 69.256064][ T5680] netlink: 128 bytes leftover after parsing attributes in process `syz.6.778'. [ 69.303422][ T29] audit: type=1400 audit(1752050420.893:1131): avc: denied { read } for pid=5679 comm="syz.6.778" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.324686][ T29] audit: type=1400 audit(1752050420.893:1132): avc: denied { open } for pid=5679 comm="syz.6.778" path="net:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.413628][ T5686] loop4: detected capacity change from 0 to 512 [ 69.425052][ T29] audit: type=1400 audit(1752050421.003:1133): avc: denied { create } for pid=5681 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.444754][ T29] audit: type=1400 audit(1752050421.003:1134): avc: denied { connect } for pid=5681 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.446145][ T5686] EXT4-fs: Ignoring removed bh option [ 69.475366][ T5688] loop2: detected capacity change from 0 to 1024 [ 69.489143][ T5690] loop6: detected capacity change from 0 to 128 [ 69.506027][ T29] audit: type=1400 audit(1752050421.083:1135): avc: denied { mounton } for pid=5685 comm="syz.4.781" path="/149/file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.528771][ T29] audit: type=1400 audit(1752050421.133:1136): avc: denied { mount } for pid=5689 comm="syz.6.783" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.552440][ T5686] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.561850][ T5686] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 69.573262][ T5686] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 69.584378][ T5688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.597465][ T5686] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 69.741328][ T5688] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.752000][ T29] audit: type=1400 audit(1752050421.383:1137): avc: denied { mount } for pid=5687 comm="syz.2.782" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.791718][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.811580][ T29] audit: type=1400 audit(1752050421.413:1138): avc: denied { read } for pid=5687 comm="syz.2.782" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.932516][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.990709][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.041517][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 70.156251][ T5716] random: crng reseeded on system resumption [ 70.206948][ T5719] loop4: detected capacity change from 0 to 512 [ 70.216760][ T5719] EXT4-fs: Ignoring removed bh option [ 70.227814][ T5722] loop5: detected capacity change from 0 to 128 [ 70.270918][ T5719] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.271955][ T5724] vlan2: entered allmulticast mode [ 70.280065][ T5719] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.285250][ T5724] bond0: entered allmulticast mode [ 70.298648][ T5724] bond_slave_0: entered allmulticast mode [ 70.304442][ T5724] bond_slave_1: entered allmulticast mode [ 70.363286][ T5719] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 70.375419][ T5719] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 70.410421][ T3673] FAT-fs (loop5): error, invalid access to FAT (entry 0x05000006) [ 70.418417][ T3673] FAT-fs (loop5): Filesystem has been set read-only [ 70.431695][ T5719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.508367][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.518373][ T5734] loop6: detected capacity change from 0 to 2048 [ 70.552609][ T5734] loop6: p1 < > p4 [ 70.572287][ T5734] loop6: p4 size 8388608 extends beyond EOD, truncated [ 70.652007][ T5748] SELinux: failed to load policy [ 70.689084][ T5750] pim6reg1: entered promiscuous mode [ 70.694605][ T5750] pim6reg1: entered allmulticast mode [ 70.758223][ T5764] loop6: detected capacity change from 0 to 2048 [ 70.785946][ T5764] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.818: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 70.817403][ T5761] syz.2.816 (5761) used greatest stack depth: 9128 bytes left [ 70.858627][ T5764] EXT4-fs (loop6): Remounting filesystem read-only [ 70.865384][ T5764] EXT4-fs (loop6): get root inode failed [ 70.871119][ T5764] EXT4-fs (loop6): mount failed [ 70.948477][ T5788] loop4: detected capacity change from 0 to 2048 [ 70.964875][ T5788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.977374][ T5788] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.990606][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.005407][ T5788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.014746][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.030270][ T5788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.040038][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.054758][ T5788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.064879][ T5801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5801 comm=syz.6.833 [ 71.066316][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.092391][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.106369][ T5801] netlink: 'syz.6.833': attribute type 1 has an invalid length. [ 71.106405][ T5788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.130685][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.156137][ T5799] tipc: Started in network mode [ 71.159670][ T5788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.161037][ T5799] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 71.176470][ T5788] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.828: corrupted xattr block 128: bad e_name length [ 71.181254][ T5799] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 71.200778][ T5799] tipc: Enabled bearer , priority 10 [ 71.211854][ T5801] bond1: (slave bridge1): making interface the new active one [ 71.219854][ T5801] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 71.255755][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.313127][ T5823] random: crng reseeded on system resumption [ 71.812146][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'. [ 71.922504][ T5903] netlink: 372 bytes leftover after parsing attributes in process `syz.4.874'. [ 72.001765][ T5911] loop6: detected capacity change from 0 to 512 [ 72.008366][ T5911] EXT4-fs: inline encryption not supported [ 72.014505][ T5911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.085124][ T5922] ip6tnl1: entered promiscuous mode [ 72.110107][ T5927] netlink: 'syz.1.885': attribute type 3 has an invalid length. [ 72.198064][ T5938] loop4: detected capacity change from 0 to 128 [ 72.201131][ T3401] tipc: Node number set to 1 [ 72.209510][ T5938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.221965][ T5938] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.265027][ T5944] 9pnet_fd: Insufficient options for proto=fd [ 72.283153][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.313960][ T5949] loop1: detected capacity change from 0 to 512 [ 72.332068][ T5949] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.342800][ T5949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.363087][ T5949] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.378581][ T5949] EXT4-fs (loop1): 1 truncate cleaned up [ 72.385325][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.391853][ T5959] loop2: detected capacity change from 0 to 1024 [ 72.427368][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.478638][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.527213][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.553198][ T5980] capability: warning: `syz.2.908' uses deprecated v2 capabilities in a way that may be insecure [ 72.555050][ T5979] loop1: detected capacity change from 0 to 512 [ 72.592949][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.911'. [ 72.603122][ T5987] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 72.611797][ T5985] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 72.653482][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.740786][ T5979] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.905404][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 72.951337][ T6032] ALSA: seq fatal error: cannot create timer (-22) [ 72.958923][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.000102][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.000164][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.009903][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.015621][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.036262][ T5999] bridge_slave_0: entered allmulticast mode [ 73.045024][ T5999] bridge_slave_0: entered promiscuous mode [ 73.051940][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.059010][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.066304][ T5999] bridge_slave_1: entered allmulticast mode [ 73.072839][ T5999] bridge_slave_1: entered promiscuous mode [ 73.080704][ T6043] loop1: detected capacity change from 0 to 128 [ 73.093655][ T6043] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.106003][ T6043] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.156704][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.166660][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.180644][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.196974][ T6051] rdma_op ffff8881048a0580 conn xmit_rdma 0000000000000000 [ 73.215419][ T5999] team0: Port device team_slave_0 added [ 73.222011][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 73.230967][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 73.248241][ T5999] team0: Port device team_slave_1 added [ 73.260252][ T6057] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 73.268068][ T6057] netlink: 'syz.2.939': attribute type 4 has an invalid length. [ 73.275764][ T6057] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.939'. [ 73.275896][ T6055] loop1: detected capacity change from 0 to 8192 [ 73.306046][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.313110][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.339408][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.352852][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.359959][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.386101][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.400218][ T6055] loop1: p1 p2 < > p3 p4 < p5 > [ 73.405380][ T6055] loop1: partition table partially beyond EOD, truncated [ 73.413166][ T6055] loop1: p1 size 100663296 extends beyond EOD, truncated [ 73.421343][ T6055] loop1: p2 start 591104 is beyond EOD, truncated [ 73.427842][ T6055] loop1: p3 start 33572980 is beyond EOD, truncated [ 73.437775][ T5999] hsr_slave_0: entered promiscuous mode [ 73.438658][ T6055] loop1: p5 size 100663296 extends beyond EOD, truncated [ 73.444236][ T5999] hsr_slave_1: entered promiscuous mode [ 73.469524][ T5999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.478403][ T5999] Cannot create hsr debugfs directory [ 73.497993][ T6067] sd 0:0:1:0: device reset [ 73.523083][ T6070] loop1: detected capacity change from 0 to 256 [ 73.544624][ T6070] FAT-fs (loop1): codepage cp866 not found [ 73.613840][ T6090] loop1: detected capacity change from 0 to 1024 [ 73.620629][ T6090] EXT4-fs: Ignoring removed nobh option [ 73.627658][ T6090] EXT4-fs: Ignoring removed nobh option [ 73.634297][ T6090] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 73.649322][ T6090] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 73.814612][ T6108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.410306][ T5999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.426037][ T5999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.435891][ T5999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.454085][ T5999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.464905][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.473527][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.527244][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 74.527275][ T29] audit: type=1400 audit(1752050426.163:1407): avc: denied { write } for pid=6120 comm="syz.2.961" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.527874][ T6121] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 74.527874][ T6121] program syz.2.961 not setting count and/or reply_len properly [ 75.283115][ T6143] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 75.323239][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.336671][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 75.343958][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.359825][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 75.371514][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.378800][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.389055][ T6156] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 75.389055][ T6156] program syz.6.974 not setting count and/or reply_len properly [ 75.395287][ T6155] bond1: entered promiscuous mode [ 75.410875][ T6155] bond1: entered allmulticast mode [ 75.419572][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.430584][ T6155] bond1 (unregistering): Released all slaves [ 75.438016][ T29] audit: type=1400 audit(1752050427.073:1408): avc: denied { sqpoll } for pid=6159 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.460652][ T29] audit: type=1400 audit(1752050427.083:1409): avc: denied { create } for pid=6159 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.480464][ T29] audit: type=1400 audit(1752050427.093:1410): avc: denied { bind } for pid=6159 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.499996][ T29] audit: type=1400 audit(1752050427.093:1411): avc: denied { listen } for pid=6159 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.530067][ T5999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.540546][ T5999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.563624][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.570812][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.606144][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.986'. [ 75.658911][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.703372][ T29] audit: type=1400 audit(1752050427.333:1412): avc: denied { lock } for pid=6176 comm="syz.6.980" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.876363][ T5999] veth0_vlan: entered promiscuous mode [ 75.894046][ T5999] veth1_vlan: entered promiscuous mode [ 75.924798][ T5999] veth0_macvtap: entered promiscuous mode [ 75.943354][ T5999] veth1_macvtap: entered promiscuous mode [ 75.964169][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.984374][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.993021][ T5999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001943][ T5999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.010682][ T5999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019524][ T5999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.088681][ T6198] netlink: 'syz.6.984': attribute type 1 has an invalid length. [ 76.105484][ T29] audit: type=1400 audit(1752050427.743:1413): avc: denied { mounton } for pid=5999 comm="syz-executor" path="/root/syzkaller.fsSSGT/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.152823][ T29] audit: type=1400 audit(1752050427.773:1414): avc: denied { mount } for pid=5999 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.169517][ T6203] loop1: detected capacity change from 0 to 128 [ 76.175212][ T29] audit: type=1400 audit(1752050427.773:1415): avc: denied { mounton } for pid=5999 comm="syz-executor" path="/root/syzkaller.fsSSGT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.187887][ T6203] EXT4-fs: Ignoring removed nobh option [ 76.208251][ T29] audit: type=1400 audit(1752050427.773:1416): avc: denied { mounton } for pid=5999 comm="syz-executor" path="/root/syzkaller.fsSSGT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.255252][ T6208] loop6: detected capacity change from 0 to 1024 [ 76.270091][ T10] kernel write not supported for file /ppp (pid: 10 comm: kworker/0:1) [ 76.279027][ T6203] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.294184][ T6203] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.297353][ T6208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.319525][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 76.363837][ T5289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.407430][ T6222] loop4: detected capacity change from 0 to 128 [ 76.408923][ T10] kernel write not supported for file /ppp (pid: 10 comm: kworker/0:1) [ 76.438624][ T6226] bond2: entered promiscuous mode [ 76.443861][ T6226] bond2: entered allmulticast mode [ 76.476564][ T6226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.493645][ T6226] bond2 (unregistering): Released all slaves [ 76.605933][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.626562][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 76.660436][ T6243] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 76.740040][ T6259] netlink: 'syz.6.1005': attribute type 10 has an invalid length. [ 76.748402][ T6259] syz_tun: entered promiscuous mode [ 76.769162][ T6259] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.787075][ T6259] netlink: 'syz.6.1005': attribute type 10 has an invalid length. [ 76.799744][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.808659][ T6259] team0: Port device bond0 added [ 76.847997][ T6262] loop6: detected capacity change from 0 to 128 [ 76.896770][ T6265] bond1: entered promiscuous mode [ 76.901944][ T6265] bond1: entered allmulticast mode [ 76.907642][ T6265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.918909][ T6265] bond1 (unregistering): Released all slaves [ 76.936003][ T3369] kernel write not supported for file /ppp (pid: 3369 comm: kworker/0:2) [ 77.023101][ T6271] loop2: detected capacity change from 0 to 128 [ 77.031636][ T6271] EXT4-fs: Ignoring removed nobh option [ 77.045752][ T6271] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.062389][ T6271] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.236538][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.526371][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 77.564997][ T6292] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 77.574125][ T6292] syz_tun: entered promiscuous mode [ 77.583137][ T6292] syz_tun: entered allmulticast mode [ 77.589141][ T6292] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 77.603276][ T6292] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 77.605973][ T6294] bond1: entered promiscuous mode [ 77.616377][ T6294] bond1: entered allmulticast mode [ 77.623007][ T6294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.635095][ T6294] bond1 (unregistering): Released all slaves [ 77.647868][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.655678][ T6292] team0: Port device bond0 added [ 77.709787][ T6303] loop2: detected capacity change from 0 to 128 [ 77.747147][ T6309] loop6: detected capacity change from 0 to 128 [ 77.754592][ T6309] EXT4-fs: Ignoring removed nobh option [ 77.755906][ T3409] kernel write not supported for file /ppp (pid: 3409 comm: kworker/1:5) [ 77.771746][ T6309] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.801788][ T6309] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.109607][ T6340] __nla_validate_parse: 3 callbacks suppressed [ 78.109639][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 78.167139][ T5289] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.173269][ T6342] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 78.186119][ T6342] syz_tun: entered promiscuous mode [ 78.195802][ T6342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 78.255382][ T6342] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 78.269822][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.290392][ T6342] team0: Port device bond0 added [ 78.348615][ T6350] netlink: 'syz.7.1038': attribute type 1 has an invalid length. [ 78.356448][ T6350] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1038'. [ 78.374832][ T6352] bond1: entered promiscuous mode [ 78.379919][ T6352] bond1: entered allmulticast mode [ 78.385734][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.410889][ T6352] bond1 (unregistering): Released all slaves [ 78.442089][ T3409] kernel write not supported for file /ppp (pid: 3409 comm: kworker/1:5) [ 78.558139][ T6363] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1045'. [ 78.813556][ T6379] loop7: detected capacity change from 0 to 128 [ 78.821295][ T6379] EXT4-fs: Ignoring removed nobh option [ 78.837312][ T6379] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.851194][ T6379] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.885016][ T6384] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1055'. [ 78.981393][ T3369] kernel write not supported for file /ppp (pid: 3369 comm: kworker/0:2) [ 78.993150][ T6393] bond1: entered promiscuous mode [ 78.998221][ T6393] bond1: entered allmulticast mode [ 79.009242][ T6393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.038822][ T6393] bond1 (unregistering): Released all slaves [ 79.088905][ T5999] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.241590][ T6406] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1064'. [ 79.345379][ T6411] ALSA: seq fatal error: cannot create timer (-19) [ 79.454798][ T6417] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1068'. [ 79.543927][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 79.686978][ T6437] ALSA: seq fatal error: cannot create timer (-19) [ 79.742314][ T6450] random: crng reseeded on system resumption [ 79.793763][ T6454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.826474][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 79.826491][ T29] audit: type=1400 audit(1752050431.463:1435): avc: denied { write } for pid=6456 comm="syz.4.1087" path="socket:[14668]" dev="sockfs" ino=14668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.907453][ T29] audit: type=1326 audit(1752050431.523:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 79.930958][ T29] audit: type=1326 audit(1752050431.523:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 79.954429][ T29] audit: type=1326 audit(1752050431.523:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 79.977964][ T29] audit: type=1326 audit(1752050431.523:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.001526][ T29] audit: type=1326 audit(1752050431.523:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.025071][ T29] audit: type=1326 audit(1752050431.523:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.048494][ T29] audit: type=1326 audit(1752050431.523:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.072141][ T29] audit: type=1326 audit(1752050431.533:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.073711][ T6454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.095547][ T29] audit: type=1326 audit(1752050431.533:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc66ee929 code=0x7ffc0000 [ 80.184255][ T6454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.243859][ T6454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.308458][ T6454] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.319877][ T6454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331420][ T6454] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.343385][ T6454] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.440805][ T6477] loop2: detected capacity change from 0 to 164 [ 80.449378][ T6477] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.464686][ T6477] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.465518][ T6479] random: crng reseeded on system resumption [ 80.480887][ T6477] Symlink component flag not implemented [ 80.486667][ T6477] Symlink component flag not implemented [ 80.498217][ T6477] Symlink component flag not implemented (7) [ 80.504353][ T6477] Symlink component flag not implemented (116) [ 80.574755][ T6487] loop4: detected capacity change from 0 to 164 [ 80.575166][ T6490] loop2: detected capacity change from 0 to 1024 [ 80.590264][ T6490] EXT4-fs: Ignoring removed orlov option [ 80.590564][ T6487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.611948][ T6487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.618317][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.635197][ T6487] Symlink component flag not implemented [ 80.640947][ T6487] Symlink component flag not implemented [ 80.646846][ T6487] Symlink component flag not implemented (7) [ 80.652941][ T6487] Symlink component flag not implemented (116) [ 80.893826][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.943549][ T6495] loop1: detected capacity change from 0 to 1024 [ 80.952767][ T6495] EXT4-fs: Ignoring removed nobh option [ 80.958431][ T6495] EXT4-fs: inline encryption not supported [ 80.972883][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.990932][ T6495] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1103: Allocating blocks 385-513 which overlap fs metadata [ 81.037321][ T6495] EXT4-fs (loop1): pa ffff888106a7e620: logic 16, phys. 129, len 24 [ 81.045522][ T6495] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 81.170459][ T6519] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.170459][ T6519] program syz.6.1123 not setting count and/or reply_len properly [ 81.189017][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.224430][ T6524] loop1: detected capacity change from 0 to 512 [ 81.234219][ T6524] EXT4-fs: Ignoring removed bh option [ 81.254358][ T6524] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.263589][ T6524] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 81.279277][ T6524] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 81.293298][ T6524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 81.306052][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.327689][ T6534] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 81.327689][ T6534] program syz.2.1116 not setting count and/or reply_len properly [ 81.364282][ T6541] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1119'. [ 81.375056][ T6541] 0ªX¹¦À: renamed from caif0 [ 81.380308][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.392615][ T6541] 0ªX¹¦À: entered allmulticast mode [ 81.397861][ T6541] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.543912][ T6556] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.543912][ T6556] program syz.7.1128 not setting count and/or reply_len properly [ 81.571888][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 81.580916][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1139'. [ 81.710585][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.718110][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.725891][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.733407][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.740837][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.748427][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.757233][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.765034][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.772503][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.779917][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.787483][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.795125][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.802616][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.810037][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.817494][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.825144][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.832784][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.840221][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.847747][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.855267][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.862776][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.870222][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.877703][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.885165][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.893140][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.897960][ T6569] loop4: detected capacity change from 0 to 512 [ 81.900546][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.900570][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.900590][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.900610][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.900634][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.944022][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.951465][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.958910][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.966372][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.973987][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.981547][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.988967][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 81.996529][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.004093][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.011530][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.018950][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.026591][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.034100][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.041723][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.049256][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.056851][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.064306][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.071827][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.079239][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.086695][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.094248][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.101781][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.109200][ T3369] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 82.117447][ T3369] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 82.134557][ T6569] EXT4-fs (loop4): too many log groups per flexible block group [ 82.142476][ T6569] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 82.150763][ T6569] EXT4-fs (loop4): mount failed [ 82.271744][ T6583] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 82.271744][ T6583] program syz.7.1140 not setting count and/or reply_len properly [ 82.477545][ T6610] vhci_hcd: invalid port number 11 [ 82.482936][ T6610] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 82.635322][ T6622] serio: Serial port ptm0 [ 82.650192][ T6624] Invalid ELF header magic: != ELF [ 82.942770][ T6646] pimreg: entered allmulticast mode [ 82.953362][ T6646] pimreg: left allmulticast mode [ 83.060924][ T6656] serio: Serial port ptm0 [ 83.075079][ T6658] Invalid ELF header magic: != ELF [ 83.219698][ T4628] bond0: (slave syz_tun): Releasing backup interface [ 83.302877][ T5094] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.339761][ T6690] serio: Serial port ptm0 [ 83.393611][ T5094] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.452982][ T5094] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.512850][ T5094] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.597600][ T5094] dummy0: left allmulticast mode [ 83.603527][ T5094] bridge0: port 3(dummy0) entered disabled state [ 83.610739][ T5094] bridge_slave_1: left allmulticast mode [ 83.616642][ T5094] bridge_slave_1: left promiscuous mode [ 83.622417][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.632371][ T5094] bridge_slave_0: left promiscuous mode [ 83.638130][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.752991][ T5094] team0: Port device bond0 removed [ 83.759768][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.783918][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.794287][ T5094] bond0 (unregistering): Released all slaves [ 83.828648][ T6687] ================================================================== [ 83.836802][ T6687] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 83.842361][ T6696] chnl_net:caif_netlink_parms(): no params data found [ 83.844216][ T6687] [ 83.844222][ T6687] read-write to 0xffff8881069c3fd8 of 8 bytes by interrupt on cpu 1: [ 83.861395][ T6687] __xa_clear_mark+0xf5/0x1e0 [ 83.866093][ T6687] __folio_end_writeback+0x177/0x470 [ 83.871391][ T6687] folio_end_writeback+0x71/0x3d0 [ 83.876428][ T6687] end_buffer_async_write+0x156/0x1f0 [ 83.881913][ T6687] end_bio_bh_io_sync+0x79/0xa0 [ 83.886776][ T6687] bio_endio+0x377/0x410 [ 83.891043][ T6687] blk_update_request+0x336/0x730 [ 83.896085][ T6687] blk_mq_end_request+0x26/0x50 [ 83.900947][ T6687] lo_complete_rq+0x98/0x140 [ 83.905549][ T6687] blk_done_softirq+0x74/0xb0 [ 83.910245][ T6687] handle_softirqs+0xb7/0x290 [ 83.914926][ T6687] run_ksoftirqd+0x1c/0x30 [ 83.919348][ T6687] smpboot_thread_fn+0x328/0x530 [ 83.924300][ T6687] kthread+0x489/0x510 [ 83.928371][ T6687] ret_from_fork+0xda/0x150 [ 83.932883][ T6687] ret_from_fork_asm+0x1a/0x30 [ 83.937686][ T6687] [ 83.940008][ T6687] read to 0xffff8881069c3fd8 of 8 bytes by task 6687 on cpu 0: [ 83.947560][ T6687] xas_find_marked+0x218/0x620 [ 83.952337][ T6687] find_get_entry+0x5d/0x380 [ 83.956936][ T6687] filemap_get_folios_tag+0x13b/0x210 [ 83.962320][ T6687] filemap_write_and_wait_range+0x1d3/0x340 [ 83.968224][ T6687] bdev_release+0xeb/0x3d0 [ 83.972644][ T6687] blkdev_release+0x15/0x20 [ 83.977159][ T6687] __fput+0x298/0x650 [ 83.981152][ T6687] ____fput+0x1c/0x30 [ 83.985177][ T6687] task_work_run+0x131/0x1a0 [ 83.989772][ T6687] exit_to_user_mode_loop+0xe4/0x100 [ 83.995061][ T6687] do_syscall_64+0x1d6/0x200 [ 83.999666][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.005558][ T6687] [ 84.007878][ T6687] value changed: 0xffffffffff000000 -> 0xfffffffff8000000 [ 84.015186][ T6687] [ 84.017508][ T6687] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.023673][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.7.1189 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 84.036109][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.046166][ T6687] ================================================================== [ 84.126710][ T5094] hsr_slave_0: left promiscuous mode [ 84.146910][ T5094] hsr_slave_1: left promiscuous mode [ 84.167454][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.175007][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.211156][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.218604][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.234139][ T5094] veth1_macvtap: left promiscuous mode [ 84.239730][ T5094] veth0_macvtap: left promiscuous mode [ 84.245445][ T5094] veth1_vlan: left promiscuous mode [ 84.250672][ T5094] veth0_vlan: left promiscuous mode [ 84.313051][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 84.322501][ T5094] team0 (unregistering): Port device team_slave_0 removed [ 84.358969][ T5470] bond0: (slave syz_tun): Releasing backup interface [ 84.371020][ T6687] bond0: (slave syz_tun): Releasing backup interface [ 84.382927][ T5359] bond0: (slave syz_tun): Releasing backup interface [ 84.390710][ T5359] syz_tun (unregistering): left allmulticast mode [ 84.725523][ T5094] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.774116][ T5094] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.833558][ T5094] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.873714][ T5094] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.935268][ T5094] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.022553][ T5094] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.072703][ T5094] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.132753][ T5094] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.195119][ T5094] bridge_slave_1: left allmulticast mode [ 85.200816][ T5094] bridge_slave_1: left promiscuous mode [ 85.206541][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.214479][ T5094] bridge_slave_0: left allmulticast mode [ 85.220149][ T5094] bridge_slave_0: left promiscuous mode [ 85.225838][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.234467][ T5094] bridge_slave_1: left allmulticast mode [ 85.240117][ T5094] bridge_slave_1: left promiscuous mode [ 85.245775][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.253544][ T5094] bridge_slave_0: left allmulticast mode [ 85.259191][ T5094] bridge_slave_0: left promiscuous mode [ 85.264903][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.372972][ T5094] bond0 (unregistering): Released all slaves [ 85.443228][ T5094] team0: Port device bond0 removed [ 85.450269][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.460141][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.469683][ T5094] bond0 (unregistering): Released all slaves [ 85.513150][ T5094] bond1 (unregistering): (slave bridge1): Releasing active interface [ 85.562528][ T5094] team0: Port device bond0 removed [ 85.569235][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.578901][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.588416][ T5094] bond0 (unregistering): Released all slaves [ 85.596758][ T5094] bond1 (unregistering): Released all slaves [ 85.637040][ T5094] hsr_slave_0: left promiscuous mode [ 85.642828][ T5094] hsr_slave_1: left promiscuous mode [ 85.648507][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.656097][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.663663][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.671136][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.680134][ T5094] hsr_slave_0: left promiscuous mode [ 85.685915][ T5094] hsr_slave_1: left promiscuous mode [ 85.691767][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.699165][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.706945][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.714380][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.727502][ T5094] veth1_macvtap: left promiscuous mode [ 85.733141][ T5094] veth0_macvtap: left promiscuous mode [ 85.738633][ T5094] veth1_vlan: left promiscuous mode [ 85.744006][ T5094] veth0_vlan: left promiscuous mode [ 85.749709][ T5094] veth1_macvtap: left promiscuous mode [ 85.755287][ T5094] veth0_macvtap: left promiscuous mode [ 85.760806][ T5094] veth1_vlan: left promiscuous mode [ 85.766069][ T5094] veth0_vlan: left promiscuous mode [ 85.873712][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 85.883242][ T5094] team0 (unregistering): Port device team_slave_0 removed [ 85.938429][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 85.948226][ T5094] team0 (unregistering): Port device team_slave_0 removed