last executing test programs: 1m23.888668469s ago: executing program 32 (id=66): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x0, 0x0, 0x30f}, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x20, 0x0, 0x7eb9}]}, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1m21.550749678s ago: executing program 33 (id=129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r1) 58.941643318s ago: executing program 34 (id=1030): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0xde20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00e800", 0x18, 0x11, 0x0, @remote, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x6, 0x7fffffffffffffff}}}}}}}, 0x0) 53.550110344s ago: executing program 3 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000004000/0x1000)=nil, 0x4000) 53.549126874s ago: executing program 3 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) time(0x0) 53.445934893s ago: executing program 3 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 53.445598563s ago: executing program 3 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 53.444998153s ago: executing program 3 (id=1306): syz_open_dev$loop(&(0x7f0000000240), 0xd9f, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 53.234433621s ago: executing program 3 (id=1308): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_load(0xffffffffffffffff, 0x0, 0xfe59) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x85}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 53.23413981s ago: executing program 35 (id=1308): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_load(0xffffffffffffffff, 0x0, 0xfe59) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x85}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 49.834835065s ago: executing program 8 (id=1419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 49.813043737s ago: executing program 8 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) 48.951230037s ago: executing program 8 (id=1449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 48.91121883s ago: executing program 8 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 48.757073423s ago: executing program 8 (id=1452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 48.149712452s ago: executing program 8 (id=1473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x18) mq_notify(0xffffffffffffffff, 0x0) 48.149519912s ago: executing program 36 (id=1473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x18) mq_notify(0xffffffffffffffff, 0x0) 46.637353754s ago: executing program 9 (id=1474): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 44.138849666s ago: executing program 9 (id=1509): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 43.757381367s ago: executing program 9 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200408, &(0x7f00000000c0), 0xfd, 0x585, &(0x7f0000002480)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 42.442503264s ago: executing program 9 (id=1548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) iopl(0x3) fallocate(r0, 0x0, 0x400000000000000, 0x2) 42.442278724s ago: executing program 37 (id=1548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) iopl(0x3) fallocate(r0, 0x0, 0x400000000000000, 0x2) 37.041960461s ago: executing program 6 (id=1714): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 36.847064947s ago: executing program 6 (id=1729): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x3, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 33.824568652s ago: executing program 6 (id=1741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 33.824312121s ago: executing program 2 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 33.59087291s ago: executing program 2 (id=1750): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 33.547045214s ago: executing program 2 (id=1754): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) 33.506775817s ago: executing program 2 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 33.495937308s ago: executing program 2 (id=1756): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [], 0x6b}}) 33.198505562s ago: executing program 2 (id=1760): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f00000003c0)="2cd889f035a52300f3d5ac43", 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 33.198155852s ago: executing program 38 (id=1760): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f00000003c0)="2cd889f035a52300f3d5ac43", 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 32.941065153s ago: executing program 6 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 32.916519985s ago: executing program 6 (id=1767): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 32.524451697s ago: executing program 6 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) 32.492062269s ago: executing program 39 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) 1.280545736s ago: executing program 4 (id=3010): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.035552606s ago: executing program 4 (id=3023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) geteuid() 964.768062ms ago: executing program 1 (id=3014): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 964.539242ms ago: executing program 4 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 930.248954ms ago: executing program 4 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x70bd28, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0) 913.448106ms ago: executing program 5 (id=3017): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0x8, 0x0, 0x0) 911.474626ms ago: executing program 4 (id=3018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='htcp\x00', 0x44) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 557.539925ms ago: executing program 5 (id=3030): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = io_uring_setup(0x13bb, &(0x7f0000000100)) close(r1) sendto$inet(r0, &(0x7f0000000000)="1742b8f81cb7a9fb3a374f534192b9c381f96c10fbda36ceaa91e09c39aaf762b6ad74916a6d1098dc48e25fafdc18d6f8518af44a2d83", 0xfffffffffffffe2b, 0x10008095, 0x0, 0x0) 557.028835ms ago: executing program 1 (id=3020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 515.494898ms ago: executing program 1 (id=3021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 497.109599ms ago: executing program 1 (id=3024): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x71b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c) 467.131442ms ago: executing program 1 (id=3026): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) 466.464562ms ago: executing program 5 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 451.784713ms ago: executing program 0 (id=3028): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 398.324187ms ago: executing program 1 (id=3029): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 398.106728ms ago: executing program 7 (id=3031): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = memfd_secret(0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 397.870258ms ago: executing program 0 (id=3032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 369.40337ms ago: executing program 7 (id=3033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x7c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 368.75899ms ago: executing program 5 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 361.574641ms ago: executing program 0 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 303.594295ms ago: executing program 7 (id=3035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 238.495101ms ago: executing program 5 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) execve(0x0, 0x0, 0x0) 176.271325ms ago: executing program 5 (id=3037): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c", 0x29) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 176.007916ms ago: executing program 7 (id=3038): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000340800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 175.541125ms ago: executing program 0 (id=3039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 91.445402ms ago: executing program 0 (id=3040): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x4000) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x61, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 89.610962ms ago: executing program 7 (id=3051): r0 = inotify_init1(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) close(r0) 47.140976ms ago: executing program 7 (id=3041): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 42.307837ms ago: executing program 0 (id=3042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 0s ago: executing program 4 (id=3044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 46.043641][ T4986] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.063212][ T4986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 46.085089][ T4986] System zones: 1-12 [ 46.089466][ T4995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.561'. [ 46.115106][ T4986] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.557: corrupted in-inode xattr: e_value size too large [ 46.129783][ T4995] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 46.156858][ T4986] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.557: couldn't read orphan inode 15 (err -117) [ 46.183733][ T4986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.239088][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.277569][ T5018] IPv6: Can't replace route, no match found [ 46.282212][ T5021] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.304807][ T5025] loop5: detected capacity change from 0 to 256 [ 46.312211][ T5023] pim6reg: entered allmulticast mode [ 46.331256][ T5023] pim6reg: left allmulticast mode [ 46.342199][ T5025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.352444][ T5025] FAT-fs (loop5): Filesystem has been set read-only [ 46.364383][ T5032] loop3: detected capacity change from 0 to 128 [ 46.370871][ T5025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.386893][ T5025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.422663][ T5032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.437394][ T5036] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.454976][ T5032] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.477072][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.506482][ T5041] pim6reg: entered allmulticast mode [ 46.523669][ T5041] pim6reg: left allmulticast mode [ 46.543052][ T5048] loop3: detected capacity change from 0 to 512 [ 46.595806][ T5048] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.582: Failed to acquire dquot type 1 [ 46.636549][ T5062] IPv6: Can't replace route, no match found [ 46.676518][ T5048] EXT4-fs (loop3): 1 truncate cleaned up [ 46.688818][ T5048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.689446][ T5068] loop4: detected capacity change from 0 to 128 [ 46.714730][ T5048] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.733918][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.582'. [ 46.765147][ T5068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.797101][ T5068] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.810243][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.848186][ T5085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.602'. [ 46.868196][ T5085] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 46.881247][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.926045][ T10] hid_parser_main: 18 callbacks suppressed [ 46.926061][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.939410][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.947028][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.977000][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.984596][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.992135][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.999571][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.007028][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.014522][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.022008][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.034263][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 47.065434][ T5105] fido_id[5105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.177348][ T5126] IPv6: Can't replace route, no match found [ 47.560014][ T5184] @0Ù: renamed from bond_slave_1 (while UP) [ 47.657025][ T5197] vlan2: entered allmulticast mode [ 47.662238][ T5197] dummy0: entered allmulticast mode [ 47.928107][ T5238] loop3: detected capacity change from 0 to 1024 [ 47.946821][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.025997][ T5238] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.669: Allocating blocks 449-513 which overlap fs metadata [ 48.054169][ T5237] EXT4-fs (loop3): pa ffff88810720a380: logic 48, phys. 177, len 21 [ 48.062211][ T5237] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 48.112186][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.138438][ T5265] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.147578][ T5265] smc: net device bond0 erased user defined pnetid SYZ0 [ 48.232095][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.243288][ T5275] vlan2: entered allmulticast mode [ 48.265826][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.269808][ T5275] dummy0: entered allmulticast mode [ 48.301925][ T5291] loop1: detected capacity change from 0 to 1024 [ 48.317112][ T5292] batadv_slave_1: entered promiscuous mode [ 48.324983][ T5291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.326050][ T5287] batadv_slave_1: left promiscuous mode [ 48.388502][ T5291] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.687: Allocating blocks 449-513 which overlap fs metadata [ 48.411691][ T5288] EXT4-fs (loop1): pa ffff88810724e310: logic 48, phys. 177, len 21 [ 48.419770][ T5288] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 48.447564][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.492742][ T5304] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.502027][ T5304] smc: net device bond0 erased user defined pnetid SYZ0 [ 48.605709][ T5320] loop6: detected capacity change from 0 to 1024 [ 48.643063][ T5320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.663730][ T5320] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.685862][ T5320] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.703: lblock 0 mapped to illegal pblock 0 (length 6) [ 48.709299][ T5320] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.703: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 48.733320][ T5320] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.703: Freeing blocks not in datazone - block = 2, count = 4 [ 48.767336][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 48.802490][ T5339] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.819678][ T3833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.958223][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 48.958235][ T29] audit: type=1400 audit(1755729529.466:9131): avc: denied { create } for pid=5355 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 49.012775][ T29] audit: type=1400 audit(1755729529.506:9132): avc: denied { write } for pid=5355 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 49.095006][ T5372] loop4: detected capacity change from 0 to 1024 [ 49.124746][ T29] audit: type=1326 audit(1755729529.536:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.140210][ T5372] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 49.148526][ T29] audit: type=1326 audit(1755729529.536:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.180770][ T29] audit: type=1400 audit(1755729529.566:9135): avc: denied { validate_trans } for pid=5365 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.201180][ T29] audit: type=1326 audit(1755729529.576:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.224523][ T29] audit: type=1326 audit(1755729529.576:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.247843][ T29] audit: type=1326 audit(1755729529.576:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.271649][ T29] audit: type=1326 audit(1755729529.586:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.295150][ T29] audit: type=1326 audit(1755729529.586:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.6.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 49.348033][ T5381] hub 9-0:1.0: USB hub found [ 49.355043][ T5381] hub 9-0:1.0: 8 ports detected [ 49.373187][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.378673][ T5387] vlan2: entered allmulticast mode [ 49.385369][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.391459][ T5387] dummy0: entered allmulticast mode [ 49.468450][ T5394] batadv_slave_1: entered promiscuous mode [ 49.479124][ T5393] batadv_slave_1: left promiscuous mode [ 49.495505][ T5399] mmap: syz.4.731 (5399) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.620196][ T5406] atomic_op ffff888104f16128 conn xmit_atomic 0000000000000000 [ 49.708177][ T5420] hub 9-0:1.0: USB hub found [ 49.713035][ T5420] hub 9-0:1.0: 8 ports detected [ 49.781964][ T5429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 49.791022][ T5429] netem: change failed [ 50.148873][ T5446] loop4: detected capacity change from 0 to 1024 [ 50.165382][ T5446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.192586][ T5446] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.754: Allocating blocks 449-513 which overlap fs metadata [ 50.222442][ T5451] can0: slcan on ttyS3. [ 50.244322][ T5445] EXT4-fs (loop4): pa ffff88810724e1c0: logic 48, phys. 177, len 21 [ 50.252381][ T5445] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 50.264746][ T5451] can0 (unregistered): slcan off ttyS3. [ 50.274171][ T5451] Falling back ldisc for ttyS3. [ 50.286455][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.305830][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.758'. [ 50.530183][ T5465] loop4: detected capacity change from 0 to 1024 [ 50.545361][ T5465] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.558217][ T5465] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.762: lblock 0 mapped to illegal pblock 0 (length 6) [ 50.574472][ T5465] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.762: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.595045][ T5465] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.762: Freeing blocks not in datazone - block = 2, count = 4 [ 50.632069][ T5474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 50.647026][ T5474] netem: change failed [ 50.678507][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 50.766403][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119fa8000: rx timeout, send abort [ 50.774616][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119fa8600: rx timeout, send abort [ 50.782942][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119fa8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 50.797332][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119fa8600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 50.831811][ T5490] loop5: detected capacity change from 0 to 1024 [ 50.913202][ T5490] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.770: Allocating blocks 449-513 which overlap fs metadata [ 50.949082][ T5489] EXT4-fs (loop5): pa ffff88810724e380: logic 48, phys. 177, len 21 [ 50.957153][ T5489] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 50.984211][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.781'. [ 51.064775][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 51.234117][ T5549] netlink: 'syz.5.798': attribute type 3 has an invalid length. [ 51.276968][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.800'. [ 51.292016][ T5556] can0: slcan on ttyS3. [ 51.357992][ T5556] can0 (unregistered): slcan off ttyS3. [ 51.372288][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 51.374314][ T5556] Falling back ldisc for ttyS3. [ 51.466825][ T5570] netlink: 96 bytes leftover after parsing attributes in process `syz.6.808'. [ 51.514865][ T5576] netlink: 'syz.3.812': attribute type 3 has an invalid length. [ 51.607477][ T5586] vhci_hcd: invalid port number 85 [ 51.612648][ T5586] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 51.696463][ T5593] can0: slcan on ttyS3. [ 51.753932][ T5593] can0 (unregistered): slcan off ttyS3. [ 51.767200][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 51.770247][ T5593] Falling back ldisc for ttyS3. [ 51.853917][ T5609] atomic_op ffff88810230bd28 conn xmit_atomic 0000000000000000 [ 51.892461][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 52.024554][ T5638] can0: slcan on ttyS3. [ 52.093621][ T5638] can0 (unregistered): slcan off ttyS3. [ 52.113647][ T5638] Falling back ldisc for ttyS3. [ 52.272915][ T5665] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 52.280768][ T5665] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 52.337708][ T5675] can0: slcan on ttyS3. [ 52.394140][ T5675] can0 (unregistered): slcan off ttyS3. [ 52.399854][ T5675] Falling back ldisc for ttyS3. [ 52.595301][ T5690] SELinux: failed to load policy [ 53.123781][ T5728] 9pnet_fd: Insufficient options for proto=fd [ 53.149304][ T5733] lo speed is unknown, defaulting to 1000 [ 53.155769][ T5733] lo speed is unknown, defaulting to 1000 [ 53.161882][ T5733] lo speed is unknown, defaulting to 1000 [ 53.168414][ T5733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.176872][ T5733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.194526][ T5733] lo speed is unknown, defaulting to 1000 [ 53.207873][ T5733] lo speed is unknown, defaulting to 1000 [ 53.214290][ T5733] lo speed is unknown, defaulting to 1000 [ 53.220451][ T5733] lo speed is unknown, defaulting to 1000 [ 53.226534][ T5733] lo speed is unknown, defaulting to 1000 [ 53.262548][ T5749] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 53.659920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c26400: rx timeout, send abort [ 53.668149][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c26200: rx timeout, send abort [ 53.676397][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119c26400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 53.690706][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119c26200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 53.955349][ T5837] netlink: 'syz.6.931': attribute type 1 has an invalid length. [ 53.963140][ T5837] netlink: 'syz.6.931': attribute type 6 has an invalid length. [ 53.971015][ T5837] netlink: 'syz.6.931': attribute type 3 has an invalid length. [ 53.997946][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 53.997960][ T29] audit: type=1326 audit(1755729534.506:9310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 54.027558][ T29] audit: type=1326 audit(1755729534.506:9311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 54.051096][ T29] audit: type=1326 audit(1755729534.506:9312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 54.074526][ T29] audit: type=1326 audit(1755729534.506:9313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 54.097929][ T29] audit: type=1326 audit(1755729534.506:9314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748defebe9 code=0x7ffc0000 [ 54.151465][ T29] audit: type=1400 audit(1755729534.656:9315): avc: denied { read append } for pid=5846 comm="syz.3.936" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.151490][ T5847] random: crng reseeded on system resumption [ 54.181732][ T29] audit: type=1400 audit(1755729534.656:9316): avc: denied { ioctl open } for pid=5846 comm="syz.3.936" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.220963][ T29] audit: type=1326 audit(1755729534.726:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcef0ebe9 code=0x7ffc0000 [ 54.246891][ T29] audit: type=1326 audit(1755729534.756:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbdcef0ebe9 code=0x7ffc0000 [ 54.270639][ T29] audit: type=1326 audit(1755729534.756:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcef0ebe9 code=0x7ffc0000 [ 54.307325][ T5858] netlink: 'syz.6.941': attribute type 10 has an invalid length. [ 54.319217][ T5858] team0: Port device dummy0 added [ 54.328111][ T5858] netlink: 'syz.6.941': attribute type 10 has an invalid length. [ 54.338981][ T5858] team0: Port device dummy0 removed [ 54.347811][ T5858] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.770684][ T5912] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 55.021976][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.041848][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.076548][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.316157][ T5978] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.325272][ T5978] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 55.616721][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.658154][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.720319][ T6020] 9pnet: Could not find request transport: t [ 55.752009][ T6028] __nla_validate_parse: 11 callbacks suppressed [ 55.752024][ T6028] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1015'. [ 55.847708][ T6048] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1025'. [ 55.856969][ T6048] 0ªX¹¦À: renamed from caif0 [ 55.862902][ T6048] 0ªX¹¦À: entered allmulticast mode [ 55.868491][ T6048] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 55.930346][ T6052] bond1: entered promiscuous mode [ 55.935614][ T6052] bond1: entered allmulticast mode [ 55.941309][ T6052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.952675][ T6052] bond1 (unregistering): Released all slaves [ 55.979253][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.039812][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.056286][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 56.097012][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.186936][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.201460][ T6073] lo speed is unknown, defaulting to 1000 [ 56.258153][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 56.341030][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.348226][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.355647][ T6073] bridge_slave_0: entered allmulticast mode [ 56.362047][ T6073] bridge_slave_0: entered promiscuous mode [ 56.374468][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.381567][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.389054][ T6073] bridge_slave_1: entered allmulticast mode [ 56.395594][ T6073] bridge_slave_1: entered promiscuous mode [ 56.402034][ T31] bridge_slave_1: left allmulticast mode [ 56.407864][ T31] bridge_slave_1: left promiscuous mode [ 56.413716][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.424319][ T31] bridge_slave_0: left allmulticast mode [ 56.430029][ T31] bridge_slave_0: left promiscuous mode [ 56.435915][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.527207][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.537204][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.546836][ T31] bond0 (unregistering): Released all slaves [ 56.576824][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.586060][ T6123] lo speed is unknown, defaulting to 1000 [ 56.587688][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.627285][ T6073] team0: Port device team_slave_0 added [ 56.645392][ T6073] team0: Port device team_slave_1 added [ 56.659146][ T31] hsr_slave_0: left promiscuous mode [ 56.665280][ T31] hsr_slave_1: left promiscuous mode [ 56.670861][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.678297][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.686113][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.693488][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.703791][ T31] veth1_vlan: left promiscuous mode [ 56.709104][ T31] veth0_vlan: left promiscuous mode [ 56.757006][ T31] team0 (unregistering): Port device team_slave_1 removed [ 56.766487][ T31] team0 (unregistering): Port device team_slave_0 removed [ 56.809733][ T3375] lo speed is unknown, defaulting to 1000 [ 56.815603][ T3375] infiniband syz2: ib_query_port failed (-19) [ 56.823117][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.830124][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.856314][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.877048][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.884088][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.910058][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.943139][ T6073] hsr_slave_0: entered promiscuous mode [ 56.949324][ T6073] hsr_slave_1: entered promiscuous mode [ 56.955922][ T6073] debugfs: 'hsr0' already exists in 'hsr' [ 56.961658][ T6073] Cannot create hsr debugfs directory [ 57.097437][ T6073] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 57.119644][ T6073] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 57.151394][ T6073] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 57.175903][ T6073] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 57.339466][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.369078][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.398922][ T6185] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1079'. [ 57.418462][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.425638][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.478163][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.485372][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.597021][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.754681][ T6073] veth0_vlan: entered promiscuous mode [ 57.763991][ T6073] veth1_vlan: entered promiscuous mode [ 57.783378][ T6073] veth0_macvtap: entered promiscuous mode [ 57.791708][ T6073] veth1_macvtap: entered promiscuous mode [ 57.807721][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.821503][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.855244][ T2183] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.887409][ T2183] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.924242][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948473][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.970854][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 58.000540][ T6250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 58.196764][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 58.205900][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1116'. [ 58.224884][ T6283] bridge0: port 3(macsec1) entered blocking state [ 58.231434][ T6283] bridge0: port 3(macsec1) entered disabled state [ 58.239220][ T6283] macsec1: entered allmulticast mode [ 58.246852][ T6283] macsec1: left allmulticast mode [ 58.279179][ T6297] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 58.361324][ T6307] vlan2: entered allmulticast mode [ 58.425968][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 58.451820][ T6323] bridge0: entered promiscuous mode [ 58.468838][ T6323] bridge0: port 3(macvlan2) entered blocking state [ 58.475549][ T6323] bridge0: port 3(macvlan2) entered disabled state [ 58.484985][ T6323] macvlan2: entered allmulticast mode [ 58.490502][ T6323] bridge0: entered allmulticast mode [ 58.498285][ T6323] macvlan2: left allmulticast mode [ 58.503436][ T6323] bridge0: left allmulticast mode [ 58.518116][ T6323] bridge0: left promiscuous mode [ 58.541527][ T6337] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1143'. [ 58.545667][ T6341] IPv4: Oversized IP packet from 127.202.26.0 [ 58.558681][ T6337] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1143'. [ 58.661080][ T6357] program syz.7.1153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.665395][ T6359] pimreg: entered allmulticast mode [ 58.680159][ T6359] pimreg: left allmulticast mode [ 58.688376][ T6361] capability: warning: `syz.4.1155' uses 32-bit capabilities (legacy support in use) [ 58.856767][ T6386] validate_nla: 1 callbacks suppressed [ 58.856781][ T6386] netlink: 'syz.6.1167': attribute type 4 has an invalid length. [ 59.009319][ T6415] random: crng reseeded on system resumption [ 59.009899][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 59.009911][ T29] audit: type=1400 audit(1755729539.516:9604): avc: denied { write } for pid=6414 comm="syz.7.1176" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.069661][ T29] audit: type=1326 audit(1755729539.576:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.093347][ T29] audit: type=1326 audit(1755729539.576:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.126727][ T29] audit: type=1326 audit(1755729539.626:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.150417][ T29] audit: type=1326 audit(1755729539.626:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.174030][ T29] audit: type=1326 audit(1755729539.626:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.197631][ T29] audit: type=1326 audit(1755729539.626:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.221707][ T29] audit: type=1326 audit(1755729539.626:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.245574][ T29] audit: type=1326 audit(1755729539.626:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 59.269243][ T29] audit: type=1326 audit(1755729539.626:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 59.549818][ T6463] vhci_hcd: invalid port number 96 [ 59.549830][ T6463] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.595729][ T6475] netlink: 'syz.7.1204': attribute type 1 has an invalid length. [ 59.816905][ T6500] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 59.817479][ T6500] SELinux: failed to load policy [ 59.951764][ T6518] IPv6: Can't replace route, no match found [ 60.452028][ T6592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6592 comm=syz.1.1261 [ 60.465131][ T6592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6592 comm=syz.1.1261 [ 60.567390][ T6612] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 60.575570][ T2015] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 60.697164][ T3395] hid_parser_main: 46 callbacks suppressed [ 60.697181][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 60.710638][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 60.718184][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.227479][ T6730] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 61.384235][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.391659][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.399235][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.406756][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.414230][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.422083][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.429762][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.441288][ T3395] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 61.464672][ T6744] fido_id[6744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.700492][ T6613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.779636][ T6613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.845246][ T6613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.866908][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 61.897717][ T6613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.922592][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.929771][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.960765][ T6759] bridge_slave_0: entered allmulticast mode [ 61.968153][ T6759] bridge_slave_0: entered promiscuous mode [ 61.975159][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.982483][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.989868][ T6759] bridge_slave_1: entered allmulticast mode [ 61.996525][ T6759] bridge_slave_1: entered promiscuous mode [ 62.037142][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.068031][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.104669][ T6759] team0: Port device team_slave_0 added [ 62.110620][ T6613] bridge_slave_1: left allmulticast mode [ 62.116478][ T6613] bridge_slave_1: left promiscuous mode [ 62.122185][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.133321][ T6613] bridge_slave_0: left allmulticast mode [ 62.139173][ T6613] bridge_slave_0: left promiscuous mode [ 62.144879][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.236672][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.259342][ T6613] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 62.273387][ T6613] bond0 (unregistering): Released all slaves [ 62.286748][ T6759] team0: Port device team_slave_1 added [ 62.321544][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.328564][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.354632][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.369913][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.377059][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.403175][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.435517][ T6613] hsr_slave_0: left promiscuous mode [ 62.442242][ T6613] hsr_slave_1: left promiscuous mode [ 62.448303][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.455908][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.463341][ T6812] __nla_validate_parse: 14 callbacks suppressed [ 62.463357][ T6812] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1325'. [ 62.480894][ T6809] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.488460][ T6809] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 62.496986][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.504445][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.535345][ T6613] veth1_vlan: left promiscuous mode [ 62.546369][ T6613] veth0_vlan: left promiscuous mode [ 62.648165][ T6613] team0 (unregistering): Port device team_slave_1 removed [ 62.659618][ T6613] team0 (unregistering): Port device team_slave_0 removed [ 62.693435][ T6812] batadv1: entered promiscuous mode [ 62.698761][ T6812] batadv1: entered allmulticast mode [ 62.730639][ T6759] hsr_slave_0: entered promiscuous mode [ 62.737018][ T6759] hsr_slave_1: entered promiscuous mode [ 62.742898][ T6759] debugfs: 'hsr0' already exists in 'hsr' [ 62.748734][ T6759] Cannot create hsr debugfs directory [ 62.811695][ T6759] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 62.830438][ T6759] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 62.842259][ T6759] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 62.853315][ T6759] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 62.902921][ T6871] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1349'. [ 62.941746][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.962852][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.984451][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.991637][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.002423][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.009610][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.109594][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.211533][ T6912] sctp: [Deprecated]: syz.4.1361 (pid 6912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.211533][ T6912] Use struct sctp_sack_info instead [ 63.227881][ T6759] veth0_vlan: entered promiscuous mode [ 63.240617][ T6759] veth1_vlan: entered promiscuous mode [ 63.256427][ T6759] veth0_macvtap: entered promiscuous mode [ 63.264022][ T6759] veth1_macvtap: entered promiscuous mode [ 63.274617][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.286320][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.298351][ T6660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.310159][ T6660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.324906][ T6660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336416][ T6660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.551866][ T6935] loop8: detected capacity change from 0 to 512 [ 63.558942][ T6935] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 63.575178][ T6935] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1370: iget: bogus i_mode (5) [ 63.591664][ T6935] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1370: couldn't read orphan inode 15 (err -117) [ 63.605149][ T6935] ext2 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.700326][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.713003][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.001192][ T6976] netlink: 'syz.4.1387': attribute type 153 has an invalid length. [ 64.065361][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 64.065391][ T29] audit: type=1326 audit(1755729544.576:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 64.095119][ T29] audit: type=1326 audit(1755729544.576:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 64.118678][ T29] audit: type=1326 audit(1755729544.576:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 64.310228][ T6985] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1391'. [ 64.321898][ T6985] batadv1: entered promiscuous mode [ 64.327202][ T6985] batadv1: entered allmulticast mode [ 64.350795][ T29] audit: type=1400 audit(1755729544.856:9871): avc: denied { name_bind } for pid=6989 comm="syz.6.1392" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.607008][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1398'. [ 64.630683][ T29] audit: type=1400 audit(1755729545.136:9872): avc: denied { create } for pid=7004 comm="syz.7.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.651578][ T29] audit: type=1400 audit(1755729545.146:9873): avc: denied { write } for pid=7004 comm="syz.7.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.758252][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.767420][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.792686][ T29] audit: type=1400 audit(1755729545.296:9874): avc: denied { setopt } for pid=7013 comm="syz.7.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.920822][ T7021] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1407'. [ 64.933300][ T7021] batadv1: entered promiscuous mode [ 64.938681][ T7021] batadv1: entered allmulticast mode [ 65.011002][ T29] audit: type=1400 audit(1755729545.516:9875): avc: denied { create } for pid=7033 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.035178][ T29] audit: type=1400 audit(1755729545.546:9876): avc: denied { setopt } for pid=7033 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.055236][ T29] audit: type=1400 audit(1755729545.546:9877): avc: denied { bind } for pid=7033 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.087025][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1413'. [ 65.181472][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.192756][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.320271][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1430'. [ 65.759132][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 65.783850][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.793034][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.026082][ T7104] vhci_hcd: invalid port number 85 [ 66.031290][ T7104] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 66.068936][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.069964][ T7110] loop8: detected capacity change from 0 to 1024 [ 66.078773][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.086543][ T7110] EXT4-fs: Ignoring removed orlov option [ 66.097076][ T7110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.115491][ T7110] EXT4-fs mount: 6 callbacks suppressed [ 66.115501][ T7110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.183649][ T7110] loop8: detected capacity change from 1024 to 64 [ 66.192076][ T7110] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.214066][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.229232][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.243490][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.259962][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.274384][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.287891][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.301565][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.315652][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.329771][ T6759] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.690406][ T6759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.703800][ T6613] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.729390][ T7111] kmmpd-loop8: attempt to access beyond end of device [ 66.729390][ T7111] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 66.743027][ T7111] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 66.759174][ T7156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1472'. [ 66.771593][ T6613] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.797006][ T7156] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 66.804929][ T7156] netlink: 'syz.1.1472': attribute type 2 has an invalid length. [ 66.812683][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1472'. [ 66.847650][ T6613] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.897782][ T6613] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.979578][ T6613] bridge_slave_1: left allmulticast mode [ 66.985400][ T6613] bridge_slave_1: left promiscuous mode [ 66.991089][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.018935][ T6613] bridge_slave_0: left allmulticast mode [ 67.024784][ T6613] bridge_slave_0: left promiscuous mode [ 67.030457][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.091898][ T7186] SELinux: failed to load policy [ 67.131922][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.153224][ T6613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.170312][ T6613] bond0 (unregistering): Released all slaves [ 67.210692][ T6613] hsr_slave_0: left promiscuous mode [ 67.217686][ T6613] hsr_slave_1: left promiscuous mode [ 67.224218][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.231629][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.253031][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.260556][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.275940][ T6613] veth1_macvtap: left promiscuous mode [ 67.284960][ T6613] veth0_macvtap: left promiscuous mode [ 67.293045][ T6613] veth1_vlan: left promiscuous mode [ 67.300449][ T6613] veth0_vlan: left promiscuous mode [ 67.381706][ T6613] team0 (unregistering): Port device team_slave_1 removed [ 67.397643][ T6613] team0 (unregistering): Port device team_slave_0 removed [ 67.463345][ T7217] 9pnet_fd: Insufficient options for proto=fd [ 67.472017][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 67.538849][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.546134][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.569415][ T7158] bridge_slave_0: entered allmulticast mode [ 67.578482][ T7158] bridge_slave_0: entered promiscuous mode [ 67.586109][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.593751][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.601029][ T7158] bridge_slave_1: entered allmulticast mode [ 67.605615][ T7235] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 67.607754][ T7158] bridge_slave_1: entered promiscuous mode [ 67.644937][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.656471][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.686853][ T7158] team0: Port device team_slave_0 added [ 67.696261][ T7158] team0: Port device team_slave_1 added [ 67.718776][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.725806][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.751740][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.765830][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.773055][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.799308][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.841212][ T7158] hsr_slave_0: entered promiscuous mode [ 67.847296][ T7158] hsr_slave_1: entered promiscuous mode [ 67.853082][ T7158] debugfs: 'hsr0' already exists in 'hsr' [ 67.858872][ T7158] Cannot create hsr debugfs directory [ 67.915855][ T7158] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 67.924660][ T7158] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 67.933589][ T7158] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 67.941921][ T7158] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 67.956098][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.963217][ T7158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.970746][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.977777][ T7158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.002802][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.015064][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.022754][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.033956][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.044073][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.051116][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.062130][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.069201][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.124147][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.212458][ T7158] veth0_vlan: entered promiscuous mode [ 68.220263][ T7158] veth1_vlan: entered promiscuous mode [ 68.235509][ T7158] veth0_macvtap: entered promiscuous mode [ 68.242526][ T7158] veth1_macvtap: entered promiscuous mode [ 68.253215][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.265063][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.276300][ T6717] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.285328][ T6717] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.294936][ T6717] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.304206][ T6717] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353246][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.366028][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.844821][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 70.844835][ T29] audit: type=1326 audit(1755729551.356:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 70.879369][ T7289] loop9: detected capacity change from 0 to 1024 [ 70.887056][ T7291] __nla_validate_parse: 7 callbacks suppressed [ 70.887073][ T7291] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1511'. [ 70.899364][ T29] audit: type=1326 audit(1755729551.356:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 70.925761][ T29] audit: type=1326 audit(1755729551.356:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 70.927217][ T7289] EXT4-fs: Ignoring removed orlov option [ 70.949389][ T29] audit: type=1326 audit(1755729551.356:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 70.955148][ T7289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.978502][ T29] audit: type=1326 audit(1755729551.386:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.008485][ T29] audit: type=1326 audit(1755729551.386:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.032009][ T29] audit: type=1326 audit(1755729551.386:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.040566][ T7289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.055468][ T29] audit: type=1326 audit(1755729551.386:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.055493][ T29] audit: type=1326 audit(1755729551.386:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.114710][ T29] audit: type=1326 audit(1755729551.386:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d56debe9 code=0x7ffc0000 [ 71.146722][ T7295] vhci_hcd: invalid port number 85 [ 71.151946][ T7295] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 71.173896][ T7289] loop9: detected capacity change from 1024 to 64 [ 71.213705][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.231446][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.258284][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.273783][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.294426][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.308051][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.323137][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.353936][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1538'. [ 71.363055][ T7318] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1538'. [ 71.363144][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.373027][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1538'. [ 71.394977][ T7318] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1538'. [ 71.401414][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.404290][ T7318] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1538'. [ 71.418294][ T7158] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 72.059829][ T7326] hub 9-0:1.0: USB hub found [ 72.065734][ T7326] hub 9-0:1.0: 8 ports detected [ 72.128407][ T7331] SELinux: failed to load policy [ 72.393209][ T7353] bond1: entered promiscuous mode [ 72.398486][ T7353] bond1: entered allmulticast mode [ 72.405508][ T7158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.425785][ T7353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.432943][ T7296] kmmpd-loop9: attempt to access beyond end of device [ 72.432943][ T7296] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 72.446634][ T7296] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 72.458796][ T7353] bond1 (unregistering): Released all slaves [ 72.492253][ T6660] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.605132][ T6660] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.670992][ T6660] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.707500][ T6660] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.746096][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1554'. [ 72.755134][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1554'. [ 72.888373][ T6660] bridge_slave_1: left allmulticast mode [ 72.894349][ T6660] bridge_slave_1: left promiscuous mode [ 72.900115][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.938843][ T6660] bridge_slave_0: left allmulticast mode [ 72.944655][ T6660] bridge_slave_0: left promiscuous mode [ 72.950580][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.037608][ T6660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.050330][ T6660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.061073][ T6660] bond0 (unregistering): Released all slaves [ 73.115324][ T6660] hsr_slave_0: left promiscuous mode [ 73.147860][ T6660] hsr_slave_1: left promiscuous mode [ 73.166798][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.174232][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.236058][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.243460][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.279945][ T6660] veth1_macvtap: left promiscuous mode [ 73.289215][ T6660] veth0_macvtap: left promiscuous mode [ 73.304809][ T6660] veth1_vlan: left promiscuous mode [ 73.312283][ T6660] veth0_vlan: left promiscuous mode [ 73.450955][ T6660] team0 (unregistering): Port device team_slave_1 removed [ 73.470268][ T6660] team0 (unregistering): Port device team_slave_0 removed [ 73.600201][ T7441] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1577'. [ 73.614598][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 73.725827][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.732934][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.748627][ T7372] bridge_slave_0: entered allmulticast mode [ 73.756316][ T7372] bridge_slave_0: entered promiscuous mode [ 73.764499][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.771658][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.780046][ T7372] bridge_slave_1: entered allmulticast mode [ 73.786828][ T7372] bridge_slave_1: entered promiscuous mode [ 73.813104][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.871398][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.902389][ T7372] team0: Port device team_slave_0 added [ 73.925638][ T7372] team0: Port device team_slave_1 added [ 73.963008][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.970032][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.996135][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.064478][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.071462][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.097437][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.139692][ T7372] hsr_slave_0: entered promiscuous mode [ 74.154094][ T7372] hsr_slave_1: entered promiscuous mode [ 74.160060][ T7372] debugfs: 'hsr0' already exists in 'hsr' [ 74.165883][ T7372] Cannot create hsr debugfs directory [ 74.265528][ T7482] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1596'. [ 74.343426][ T7492] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 74.371689][ T7492] team0: Port device dummy0 added [ 74.382547][ T7492] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 74.419743][ T7492] team0: Port device dummy0 removed [ 74.427014][ T7492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.514725][ T7372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.523422][ T7372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.532591][ T7372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.541586][ T7372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.555628][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.562748][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.570030][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.577146][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.605352][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.618588][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.626708][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.638422][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.654399][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.661469][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.681754][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.688852][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.817094][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.953161][ T7372] veth0_vlan: entered promiscuous mode [ 74.975591][ T7372] veth1_vlan: entered promiscuous mode [ 74.994758][ T7372] veth0_macvtap: entered promiscuous mode [ 75.005208][ T7372] veth1_macvtap: entered promiscuous mode [ 75.033317][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.064496][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.084418][ T6613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106883][ T6613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.146198][ T6613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.193283][ T6613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.428490][ T7579] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 75.626625][ T7602] vlan2: entered allmulticast mode [ 75.807812][ T7620] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.835329][ T7620] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 75.882977][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 75.882991][ T29] audit: type=1400 audit(1755729556.386:10080): avc: denied { watch } for pid=7623 comm="syz.6.1649" path="/329/file0" dev="tmpfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.013195][ T7634] __nla_validate_parse: 1 callbacks suppressed [ 76.013212][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 76.040379][ T7634] bridge0: entered promiscuous mode [ 76.052718][ T7634] bridge0: port 3(macvlan2) entered blocking state [ 76.059336][ T7634] bridge0: port 3(macvlan2) entered disabled state [ 76.078247][ T7634] macvlan2: entered allmulticast mode [ 76.084055][ T7634] bridge0: entered allmulticast mode [ 76.101266][ T7634] macvlan2: left allmulticast mode [ 76.106611][ T7634] bridge0: left allmulticast mode [ 76.118674][ T29] audit: type=1326 audit(1755729556.626:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.7.1658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0953e0ebe9 code=0x0 [ 76.122640][ T7634] bridge0: left promiscuous mode [ 76.310891][ T29] audit: type=1400 audit(1755729556.816:10082): avc: denied { create } for pid=7649 comm="syz.1.1661" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.375711][ T7650] block device autoloading is deprecated and will be removed. [ 76.613739][ T29] audit: type=1400 audit(1755729556.866:10083): avc: denied { write } for pid=7649 comm="syz.1.1661" name="file0" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.636321][ T29] audit: type=1400 audit(1755729556.866:10084): avc: denied { open } for pid=7649 comm="syz.1.1661" path="/305/file0" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.659351][ T29] audit: type=1400 audit(1755729556.906:10085): avc: denied { ioctl } for pid=7649 comm="syz.1.1661" path="/305/file0" dev="tmpfs" ino=1592 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.683957][ T29] audit: type=1400 audit(1755729557.076:10086): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.716872][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.726353][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.909447][ T7664] random: crng reseeded on system resumption [ 76.915522][ T29] audit: type=1400 audit(1755729557.416:10087): avc: denied { write } for pid=7663 comm="syz.1.1666" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.938685][ T29] audit: type=1400 audit(1755729557.416:10088): avc: denied { open } for pid=7663 comm="syz.1.1666" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.976178][ T29] audit: type=1400 audit(1755729557.456:10089): avc: denied { firmware_load } for pid=6717 comm="kworker/u8:63" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.469813][ T7730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.494958][ T7731] bond1: entered promiscuous mode [ 77.500027][ T7731] bond1: entered allmulticast mode [ 77.506127][ T7731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.521873][ T7731] bond1 (unregistering): Released all slaves [ 78.363231][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1736'. [ 78.372320][ T7828] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1736'. [ 78.381974][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1736'. [ 78.391466][ T7828] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1736'. [ 78.400593][ T7828] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1736'. [ 81.176300][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 81.227655][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 81.227680][ T29] audit: type=1326 audit(1755729561.736:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.4.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 81.267300][ T29] audit: type=1326 audit(1755729561.736:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.4.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 81.290878][ T29] audit: type=1326 audit(1755729561.736:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.4.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 81.314643][ T29] audit: type=1326 audit(1755729561.736:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.4.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 81.338283][ T29] audit: type=1326 audit(1755729561.746:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.4.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 81.392570][ T29] audit: type=1400 audit(1755729561.896:10179): avc: denied { write } for pid=7859 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.415409][ T7867] netlink: 'syz.7.1752': attribute type 1 has an invalid length. [ 81.423292][ T7867] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.1752'. [ 81.443173][ T29] audit: type=1400 audit(1755729561.946:10180): avc: denied { ioctl } for pid=7872 comm="syz.2.1754" path="socket:[22528]" dev="sockfs" ino=22528 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.475916][ T29] audit: type=1400 audit(1755729561.966:10181): avc: denied { mount } for pid=7874 comm="syz.2.1755" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 81.499455][ T29] audit: type=1400 audit(1755729561.966:10182): avc: denied { mounton } for pid=7874 comm="syz.2.1755" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 81.522588][ T29] audit: type=1400 audit(1755729561.986:10183): avc: denied { unmount } for pid=7372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 81.732083][ T6660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.777750][ T6660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.826532][ T6660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.876962][ T6660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.912064][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 81.945338][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.952468][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.959791][ T7894] bridge_slave_0: entered allmulticast mode [ 81.966437][ T7894] bridge_slave_0: entered promiscuous mode [ 81.973224][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980420][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.987840][ T7894] bridge_slave_1: entered allmulticast mode [ 81.995666][ T7894] bridge_slave_1: entered promiscuous mode [ 82.053325][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.064664][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.088985][ T6660] bridge_slave_1: left allmulticast mode [ 82.094793][ T6660] bridge_slave_1: left promiscuous mode [ 82.100597][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.118249][ T6660] bridge_slave_0: left promiscuous mode [ 82.124113][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.135868][ T7923] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1772'. [ 82.228037][ T6660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.238967][ T6660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.252750][ T6660] bond0 (unregistering): Released all slaves [ 82.270465][ T7894] team0: Port device team_slave_0 added [ 82.278135][ T7894] team0: Port device team_slave_1 added [ 82.286731][ T7923] 0ªX¹¦À: renamed from caif0 [ 82.293300][ T7923] 0ªX¹¦À: entered allmulticast mode [ 82.298555][ T7923] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 82.350014][ T6660] hsr_slave_0: left promiscuous mode [ 82.359885][ T6660] hsr_slave_1: left promiscuous mode [ 82.366984][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.374488][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.387081][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.394596][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.411269][ T6660] veth1_macvtap: left promiscuous mode [ 82.417082][ T6660] veth0_macvtap: left promiscuous mode [ 82.422710][ T6660] veth1_vlan: left promiscuous mode [ 82.449310][ T6660] veth0_vlan: left promiscuous mode [ 82.555786][ T6660] team0 (unregistering): Port device team_slave_1 removed [ 82.565985][ T6660] team0 (unregistering): Port device team_slave_0 removed [ 82.619983][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.627059][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.653245][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.664866][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.671808][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.698357][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.826272][ T7894] hsr_slave_0: entered promiscuous mode [ 82.839563][ T7894] hsr_slave_1: entered promiscuous mode [ 82.845626][ T7894] debugfs: 'hsr0' already exists in 'hsr' [ 82.851378][ T7894] Cannot create hsr debugfs directory [ 83.044826][ T7959] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1783'. [ 83.067858][ T7959] 0ªX¹¦À: renamed from caif0 [ 83.075331][ T7959] 0ªX¹¦À: entered allmulticast mode [ 83.080567][ T7959] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.099123][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 83.168984][ T6660] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.255592][ T6660] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.270873][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.278035][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.285871][ T7935] bridge_slave_0: entered allmulticast mode [ 83.292401][ T7935] bridge_slave_0: entered promiscuous mode [ 83.299143][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.306464][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.313830][ T7935] bridge_slave_1: entered allmulticast mode [ 83.320411][ T7935] bridge_slave_1: entered promiscuous mode [ 83.350437][ T6660] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.371839][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.384281][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.398424][ T6660] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.426246][ T7935] team0: Port device team_slave_0 added [ 83.440013][ T7894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.452819][ T7935] team0: Port device team_slave_1 added [ 83.472471][ T7894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.483742][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.490805][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.517004][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.535584][ T7894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.544560][ T7894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.555663][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.562654][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.589068][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.646303][ T7935] hsr_slave_0: entered promiscuous mode [ 83.652840][ T7935] hsr_slave_1: entered promiscuous mode [ 83.659244][ T7935] debugfs: 'hsr0' already exists in 'hsr' [ 83.665137][ T7935] Cannot create hsr debugfs directory [ 83.675002][ T6660] bridge_slave_1: left allmulticast mode [ 83.680822][ T6660] bridge_slave_1: left promiscuous mode [ 83.686557][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.742924][ T6660] bridge_slave_0: left allmulticast mode [ 83.748688][ T6660] bridge_slave_0: left promiscuous mode [ 83.754501][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.768993][ T8002] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 83.866694][ T6660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.876689][ T6660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.887092][ T6660] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 83.902827][ T6660] bond0 (unregistering): Released all slaves [ 83.961799][ T6660] hsr_slave_0: left promiscuous mode [ 83.979700][ T6660] hsr_slave_1: left promiscuous mode [ 83.990954][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.998417][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.013233][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.020942][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.031593][ T6660] veth1_macvtap: left promiscuous mode [ 84.037429][ T6660] veth0_macvtap: left promiscuous mode [ 84.043018][ T6660] veth1_vlan: left promiscuous mode [ 84.049828][ T6660] veth0_vlan: left promiscuous mode [ 84.121815][ T6660] team0 (unregistering): Port device team_slave_1 removed [ 84.135480][ T6660] team0 (unregistering): Port device team_slave_0 removed [ 84.172340][ T8016] vlan2: entered allmulticast mode [ 84.206320][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.235312][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.248282][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.255466][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.274623][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281708][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.307370][ T7894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.318088][ T7894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.378254][ T8029] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1809'. [ 84.388741][ T8029] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1809'. [ 84.415068][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.479945][ T8042] vlan2: entered allmulticast mode [ 84.501108][ T7894] veth0_vlan: entered promiscuous mode [ 84.508899][ T7894] veth1_vlan: entered promiscuous mode [ 84.531338][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1824'. [ 84.540380][ T7894] veth0_macvtap: entered promiscuous mode [ 84.550463][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1814'. [ 84.552559][ T8048] bridge0: entered promiscuous mode [ 84.567821][ T8048] bridge0: port 3(macvlan2) entered blocking state [ 84.574397][ T8048] bridge0: port 3(macvlan2) entered disabled state [ 84.586062][ T8048] macvlan2: entered allmulticast mode [ 84.591495][ T8048] bridge0: entered allmulticast mode [ 84.597601][ T8048] macvlan2: left allmulticast mode [ 84.602839][ T8048] bridge0: left allmulticast mode [ 84.608546][ T8048] bridge0: left promiscuous mode [ 84.628347][ T7894] veth1_macvtap: entered promiscuous mode [ 84.639228][ T7935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.660071][ T7935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.673106][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.685527][ T7935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.694427][ T7935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.704492][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.717863][ T6702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.727283][ T6702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.737745][ T6702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.747081][ T6702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.793624][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.810068][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.827806][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.834924][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.895772][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.902969][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.997187][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.122997][ T7935] veth0_vlan: entered promiscuous mode [ 85.140394][ T7935] veth1_vlan: entered promiscuous mode [ 85.217535][ T7935] veth0_macvtap: entered promiscuous mode [ 85.233448][ T7935] veth1_macvtap: entered promiscuous mode [ 85.245017][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.255874][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.268006][ T6650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.290499][ T6650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.301184][ T6650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310296][ T6650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.364330][ T8115] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1827'. [ 85.407497][ T8123] vlan2: entered allmulticast mode [ 85.477096][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'. [ 85.816158][ T8167] vhci_hcd: invalid port number 96 [ 85.821424][ T8167] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.854883][ T8176] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 86.077677][ T8205] vhci_hcd: invalid port number 96 [ 86.082875][ T8205] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 86.097841][ T8208] bridge0: port 3(macsec1) entered blocking state [ 86.104684][ T8208] bridge0: port 3(macsec1) entered disabled state [ 86.119631][ T8208] macsec1: entered allmulticast mode [ 86.125852][ T8208] macsec1: left allmulticast mode [ 86.257209][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 86.257238][ T29] audit: type=1326 audit(1755729566.766:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.289350][ T29] audit: type=1326 audit(1755729566.766:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.313098][ T29] audit: type=1326 audit(1755729566.766:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.336717][ T29] audit: type=1326 audit(1755729566.766:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ea5be14a5 code=0x7ffc0000 [ 86.360301][ T29] audit: type=1326 audit(1755729566.766:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.384039][ T29] audit: type=1326 audit(1755729566.766:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.407610][ T29] audit: type=1326 audit(1755729566.766:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.431265][ T29] audit: type=1326 audit(1755729566.766:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.454829][ T29] audit: type=1326 audit(1755729566.766:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.478429][ T29] audit: type=1326 audit(1755729566.766:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 86.616072][ T8236] vhci_hcd: invalid port number 96 [ 86.621229][ T8236] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 86.731901][ T8254] IPv6: Can't replace route, no match found [ 86.998215][ T8309] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 87.008270][ T8309] SELinux: failed to load policy [ 87.684707][ T8349] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 87.725129][ T8349] SELinux: failed to load policy [ 87.768977][ T8368] __nla_validate_parse: 4 callbacks suppressed [ 87.769006][ T8368] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1948'. [ 87.802438][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1950'. [ 87.811532][ T8373] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1950'. [ 87.833665][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1950'. [ 87.852828][ T8373] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1950'. [ 87.862155][ T8373] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1950'. [ 87.882048][ T8379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8379 comm=syz.4.1953 [ 87.894670][ T8379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8379 comm=syz.4.1953 [ 87.979328][ T8389] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 87.993700][ T8389] SELinux: failed to load policy [ 88.115799][ T8414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8414 comm=syz.0.1968 [ 88.128465][ T8414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8414 comm=syz.0.1968 [ 88.169101][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 88.188640][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 88.205322][ T8420] bridge0: entered promiscuous mode [ 88.218377][ T8420] bridge0: port 3(macvlan2) entered blocking state [ 88.225240][ T8420] bridge0: port 3(macvlan2) entered disabled state [ 88.232184][ T8420] macvlan2: entered allmulticast mode [ 88.237916][ T8420] bridge0: entered allmulticast mode [ 88.244728][ T8420] macvlan2: left allmulticast mode [ 88.249837][ T8420] bridge0: left allmulticast mode [ 88.256855][ T8420] bridge0: left promiscuous mode [ 88.587530][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1988'. [ 88.629794][ T23] hid_parser_main: 18 callbacks suppressed [ 88.629812][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.643335][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.651080][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.667450][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.675047][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.682474][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.690020][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.697546][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.704962][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.712380][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.740129][ T2993] udevd[2993]: worker [3727] terminated by signal 33 (Unknown signal 33) [ 88.749766][ T2993] udevd[2993]: worker [3727] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0005/hidraw/hidraw0' [ 88.765701][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.035020][ T6704] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 89.430589][ T3382] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.453299][ T2993] udevd[2993]: worker [3284] terminated by signal 33 (Unknown signal 33) [ 89.453346][ T2993] udevd[2993]: worker [3284] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0006/hidraw/hidraw0' [ 89.740392][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.788472][ T8538] fido_id[8538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.084633][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 90.099616][ T2993] udevd[2993]: worker [3625] terminated by signal 33 (Unknown signal 33) [ 90.099637][ T2993] udevd[2993]: worker [3625] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0008/hidraw/hidraw0' [ 90.208580][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2046'. [ 90.516620][ T6648] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 90.887672][ T3382] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 90.911139][ T8605] fido_id[8605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.463090][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 91.463105][ T29] audit: type=1400 audit(1755729571.966:10466): avc: denied { sqpoll } for pid=8619 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.488868][ T29] audit: type=1400 audit(1755729571.966:10467): avc: denied { allowed } for pid=8619 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.579280][ T29] audit: type=1400 audit(1755729572.026:10468): avc: denied { map_create } for pid=8641 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.598839][ T29] audit: type=1400 audit(1755729572.026:10469): avc: denied { prog_load } for pid=8641 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.618021][ T29] audit: type=1400 audit(1755729572.026:10470): avc: denied { bpf } for pid=8641 comm="syz.7.2063" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.638806][ T29] audit: type=1400 audit(1755729572.026:10471): avc: denied { perfmon } for pid=8641 comm="syz.7.2063" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.659898][ T29] audit: type=1400 audit(1755729572.026:10472): avc: denied { map_read map_write } for pid=8641 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.680233][ T29] audit: type=1400 audit(1755729572.086:10473): avc: denied { create } for pid=8645 comm="syz.7.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.700094][ T29] audit: type=1400 audit(1755729572.086:10474): avc: denied { setopt } for pid=8645 comm="syz.7.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.719710][ T29] audit: type=1400 audit(1755729572.086:10475): avc: denied { connect } for pid=8645 comm="syz.7.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.199784][ T6624] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 93.107663][ T8709] sctp: [Deprecated]: syz.5.2088 (pid 8709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.107663][ T8709] Use struct sctp_sack_info instead [ 94.720954][ T8812] sctp: [Deprecated]: syz.1.2130 (pid 8812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.720954][ T8812] Use struct sctp_sack_info instead [ 95.013939][ T8836] batadv_slave_1: entered promiscuous mode [ 95.021623][ T8835] batadv_slave_1: left promiscuous mode [ 95.219640][ T8869] batadv_slave_1: entered promiscuous mode [ 95.226475][ T8868] batadv_slave_1: left promiscuous mode [ 95.444920][ T8899] batadv_slave_1: entered promiscuous mode [ 95.453329][ T8897] batadv_slave_1: left promiscuous mode [ 95.569807][ T8920] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 95.647139][ T8933] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2193'. [ 95.676443][ T8937] program syz.0.2194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.727101][ T8945] vhci_hcd: invalid port number 67 [ 95.770603][ T8958] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 95.864170][ T8975] program syz.4.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.885767][ T8979] vhci_hcd: invalid port number 67 [ 96.062374][ T9004] vhci_hcd: invalid port number 67 [ 96.062465][ T9008] program syz.5.2231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.190313][ T9023] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 96.225187][ T9032] program syz.4.2242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.314353][ T9039] vhci_hcd: invalid port number 67 [ 96.898196][ T9056] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2252'. [ 97.139579][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 97.139595][ T29] audit: type=1400 audit(1755729577.646:10762): avc: denied { execmem } for pid=9075 comm="syz.7.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.184089][ T29] audit: type=1326 audit(1755729577.686:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1a2ebe9 code=0x7ffc0000 [ 97.207786][ T29] audit: type=1326 audit(1755729577.686:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff2e1a2ebe9 code=0x7ffc0000 [ 97.231344][ T29] audit: type=1326 audit(1755729577.696:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1a2ebe9 code=0x7ffc0000 [ 97.255049][ T29] audit: type=1326 audit(1755729577.696:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1a2ebe9 code=0x7ffc0000 [ 97.503093][ T29] audit: type=1400 audit(1755729578.006:10767): avc: denied { listen } for pid=9104 comm="syz.1.2273" lport=56411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.545159][ T29] audit: type=1400 audit(1755729578.036:10768): avc: denied { accept } for pid=9104 comm="syz.1.2273" lport=56411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.571157][ T9108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9108 comm=syz.1.2274 [ 97.584864][ T29] audit: type=1400 audit(1755729578.096:10769): avc: denied { audit_write } for pid=9107 comm="syz.1.2274" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.606360][ T29] audit: type=1107 audit(1755729578.096:10770): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 97.647892][ T29] audit: type=1400 audit(1755729578.156:10771): avc: denied { mount } for pid=9113 comm="syz.1.2277" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.052442][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2281'. [ 98.061496][ T9122] netem: unknown loss type 13 [ 98.066238][ T9122] netem: change failed [ 98.125772][ T9133] syzkaller1: entered promiscuous mode [ 98.131364][ T9133] syzkaller1: entered allmulticast mode [ 98.406808][ T9175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9175 comm=syz.0.2306 [ 99.155436][ T9214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9214 comm=syz.4.2318 [ 99.232673][ T9221] ipvlan2: entered promiscuous mode [ 99.240271][ T9221] bridge0: port 3(ipvlan2) entered blocking state [ 99.246761][ T9221] bridge0: port 3(ipvlan2) entered disabled state [ 99.254887][ T9221] ipvlan2: entered allmulticast mode [ 99.260211][ T9221] bridge0: entered allmulticast mode [ 99.266968][ T9221] ipvlan2: left allmulticast mode [ 99.272009][ T9221] bridge0: left allmulticast mode [ 99.551265][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2324'. [ 99.560765][ T9232] netem: unknown loss type 13 [ 99.565702][ T9232] netem: change failed [ 99.586782][ T9233] syzkaller1: entered promiscuous mode [ 99.592485][ T9233] syzkaller1: entered allmulticast mode [ 99.757959][ T9268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2342'. [ 99.767098][ T9268] netem: unknown loss type 13 [ 99.771785][ T9268] netem: change failed [ 99.830846][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 99.844229][ T9275] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 99.900428][ T9280] syzkaller1: entered promiscuous mode [ 99.906186][ T9280] syzkaller1: entered allmulticast mode [ 99.957110][ T9286] SELinux: failed to load policy [ 100.010493][ T9294] ipvlan2: entered promiscuous mode [ 100.023078][ T9294] bridge0: port 3(ipvlan2) entered blocking state [ 100.029702][ T9294] bridge0: port 3(ipvlan2) entered disabled state [ 100.036629][ T9294] ipvlan2: entered allmulticast mode [ 100.041956][ T9294] bridge0: entered allmulticast mode [ 100.047945][ T9294] ipvlan2: left allmulticast mode [ 100.053106][ T9294] bridge0: left allmulticast mode [ 100.518665][ T9329] ipvlan2: entered promiscuous mode [ 100.526563][ T9329] bridge0: port 3(ipvlan2) entered blocking state [ 100.533057][ T9329] bridge0: port 3(ipvlan2) entered disabled state [ 100.540687][ T9329] ipvlan2: entered allmulticast mode [ 100.546189][ T9329] bridge0: entered allmulticast mode [ 100.551992][ T9329] ipvlan2: left allmulticast mode [ 100.557241][ T9329] bridge0: left allmulticast mode [ 100.897407][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 101.044711][ T9423] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 101.139115][ T9444] pim6reg: entered allmulticast mode [ 101.151086][ T9444] pim6reg: left allmulticast mode [ 101.392953][ T9498] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2403'. [ 101.584734][ T9533] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2419'. [ 101.669514][ T9541] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 101.836785][ T9564] netlink: 'syz.7.2434': attribute type 13 has an invalid length. [ 101.844834][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2434'. [ 101.886866][ T9564] netlink: 'syz.7.2434': attribute type 13 has an invalid length. [ 101.894779][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2434'. [ 101.903885][ T6655] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.926606][ T6655] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.936854][ T9578] block device autoloading is deprecated and will be removed. [ 101.953865][ T6704] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.973603][ T6704] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.163737][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 102.163762][ T29] audit: type=1400 audit(102.153:10911): avc: denied { cpu } for pid=9588 comm="syz.4.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.203191][ T29] audit: type=1400 audit(102.183:10912): avc: denied { unlink } for pid=7894 comm="syz-executor" name="file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.225432][ T29] audit: type=1400 audit(102.183:10913): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.249295][ T29] audit: type=1400 audit(102.183:10914): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.273022][ T29] audit: type=1400 audit(102.183:10915): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=761 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.319813][ T29] audit: type=1326 audit(102.303:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 102.343336][ T29] audit: type=1326 audit(102.303:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 102.366736][ T29] audit: type=1326 audit(102.303:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 102.389713][ T29] audit: type=1326 audit(102.303:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 102.412785][ T29] audit: type=1326 audit(102.333:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518b99ebe9 code=0x7ffc0000 [ 102.480981][ T9613] loop1: detected capacity change from 0 to 512 [ 102.577444][ T9624] netlink: 56 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 102.708818][ T9641] loop1: detected capacity change from 0 to 512 [ 102.717266][ T9641] EXT4-fs: Ignoring removed i_version option [ 102.723472][ T9641] EXT4-fs: Ignoring removed nobh option [ 102.733887][ T9641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.767984][ T9641] EXT4-fs (loop1): 1 truncate cleaned up [ 102.786967][ T9641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.873567][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.902644][ T9665] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2480'. [ 102.954003][ T9673] GUP no longer grows the stack in syz.1.2484 (9673): 200000004000-20000000a000 (200000002000) [ 102.964457][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.1.2484 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.964486][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.964497][ T9673] Call Trace: [ 102.964504][ T9673] [ 102.964511][ T9673] __dump_stack+0x1d/0x30 [ 102.964530][ T9673] dump_stack_lvl+0xe8/0x140 [ 102.964581][ T9673] dump_stack+0x15/0x1b [ 102.964595][ T9673] __get_user_pages+0x198d/0x1fa0 [ 102.964621][ T9673] ? __rcu_read_unlock+0x4f/0x70 [ 102.964642][ T9673] get_user_pages_remote+0x1d5/0x6d0 [ 102.964665][ T9673] __access_remote_vm+0x15c/0x590 [ 102.964720][ T9673] access_remote_vm+0x32/0x40 [ 102.964739][ T9673] proc_pid_cmdline_read+0x32b/0x6c0 [ 102.964761][ T9673] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 102.964843][ T9673] vfs_readv+0x3fb/0x690 [ 102.964873][ T9673] __x64_sys_preadv+0xfd/0x1c0 [ 102.964922][ T9673] x64_sys_call+0x282a/0x2ff0 [ 102.964940][ T9673] do_syscall_64+0xd2/0x200 [ 102.964961][ T9673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.964981][ T9673] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.965027][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.965045][ T9673] RIP: 0033:0x7f67d56debe9 [ 102.965065][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.965104][ T9673] RSP: 002b:00007f67d413f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 102.965159][ T9673] RAX: ffffffffffffffda RBX: 00007f67d5905fa0 RCX: 00007f67d56debe9 [ 102.965170][ T9673] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.965181][ T9673] RBP: 00007f67d5761e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.965192][ T9673] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 102.965203][ T9673] R13: 00007f67d5906038 R14: 00007f67d5905fa0 R15: 00007fff699618d8 [ 102.965254][ T9673] [ 103.269543][ T9697] netlink: 'syz.5.2496': attribute type 1 has an invalid length. [ 103.701917][ T9768] 9pnet: p9_errstr2errno: server reported unknown error tat [ 103.791388][ T9785] option changes via remount are deprecated (pid=9784 comm=syz.1.2538) [ 103.922712][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2552'. [ 104.049398][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'. [ 104.072470][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'. [ 104.109978][ T9838] SELinux: failed to load policy [ 104.225058][ T9865] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 104.272938][ T9865] team0: Port device dummy0 added [ 104.292421][ T9877] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 104.311526][ T9877] team0: Port device dummy0 removed [ 104.320577][ T9877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.580097][ T9933] random: crng reseeded on system resumption [ 104.607017][ T3395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3395 comm=kworker/0:3 [ 104.620306][ T9935] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 104.708545][ T9953] binfmt_misc: register: failed to install interpreter file ./file2 [ 104.749553][ T9959] loop1: detected capacity change from 0 to 512 [ 104.760808][ T9959] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.768857][ T9959] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2618: bg 0: block 248: padding at end of block bitmap is not set [ 104.787258][ T9959] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2618: Failed to acquire dquot type 1 [ 104.799902][ T9959] EXT4-fs (loop1): 1 truncate cleaned up [ 104.806536][ T9959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.826066][ T9959] syz.1.2618 (9959) used greatest stack depth: 9552 bytes left [ 104.834108][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.916378][ T9974] netlink: '+}[@': attribute type 10 has an invalid length. [ 104.927390][ T9974] team0: Device hsr_slave_0 failed to register rx_handler [ 105.104014][ T9997] loop1: detected capacity change from 0 to 1024 [ 105.123227][ T9997] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.134197][ T9997] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.159813][ T9997] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.2635: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 105.196574][ T9997] EXT4-fs (loop1): no journal found [ 105.221653][T10016] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 105.232131][T10016] SELinux: failed to load policy [ 105.237793][ T9997] SELinux: failed to load policy [ 105.361403][T10035] netlink: 'syz.7.2654': attribute type 10 has an invalid length. [ 105.401166][T10035] team0: Port device dummy0 added [ 105.410630][T10045] netlink: 'syz.7.2654': attribute type 10 has an invalid length. [ 105.442613][T10045] team0: Port device dummy0 removed [ 105.457717][T10045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.459653][T10049] SELinux: failed to load policy [ 105.578065][T10067] binfmt_misc: register: failed to install interpreter file ./file2 [ 105.594793][T10065] SELinux: failed to load policy [ 105.685096][T10082] SELinux: failed to load policy [ 105.784991][T10110] netlink: '+}[@': attribute type 10 has an invalid length. [ 105.798344][T10108] __nla_validate_parse: 4 callbacks suppressed [ 105.798360][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2687'. [ 105.820404][T10110] team0: Device hsr_slave_0 failed to register rx_handler [ 105.910078][T10119] SELinux: failed to load policy [ 105.946642][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 105.965918][T10131] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2699'. [ 105.975051][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 106.276701][T10151] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2707'. [ 106.338226][T10157] netlink: 56 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 106.399319][T10167] 9pnet: p9_errstr2errno: server reported unknown error tat [ 106.427010][T10170] option changes via remount are deprecated (pid=10168 comm=syz.4.2717) [ 106.470431][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 106.631453][T10205] option changes via remount are deprecated (pid=10203 comm=syz.0.2732) [ 106.645392][T10204] 9pnet: p9_errstr2errno: server reported unknown error tat [ 106.662114][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2734'. [ 106.860504][T10241] option changes via remount are deprecated (pid=10240 comm=syz.7.2747) [ 107.011406][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 107.011420][ T29] audit: type=1326 audit(875.180:11412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.089568][ T29] audit: type=1326 audit(875.223:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.112870][ T29] audit: type=1326 audit(875.223:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.136228][ T29] audit: type=1326 audit(875.223:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.159427][ T29] audit: type=1326 audit(875.223:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.182781][ T29] audit: type=1326 audit(875.223:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.205923][ T29] audit: type=1326 audit(875.223:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.229829][ T29] audit: type=1326 audit(875.233:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.252961][ T29] audit: type=1326 audit(875.233:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.276176][ T29] audit: type=1326 audit(875.233:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0953e0ebe9 code=0x7ffc0000 [ 107.393643][T10282] option changes via remount are deprecated (pid=10278 comm=syz.5.2764) [ 107.587095][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2777'. [ 107.629890][T10308] netlink: 312 bytes leftover after parsing attributes in process `syz.7.2777'. [ 107.908716][T10346] option changes via remount are deprecated (pid=10345 comm=syz.0.2792) [ 108.177915][T10376] block device autoloading is deprecated and will be removed. [ 109.665363][T10507] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 110.241771][T10535] pim6reg: entered allmulticast mode [ 110.277528][T10535] pim6reg: left allmulticast mode [ 110.355743][T10543] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 110.914059][T10606] __nla_validate_parse: 3 callbacks suppressed [ 110.914075][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2911'. [ 111.298819][T10631] loop1: detected capacity change from 0 to 512 [ 111.308227][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'. [ 111.317260][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'. [ 111.329534][T10631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.356835][T10631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.420226][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.633081][T10689] loop1: detected capacity change from 0 to 1024 [ 111.654301][T10689] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.665354][T10689] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.707632][T10689] JBD2: no valid journal superblock found [ 111.713578][T10689] EXT4-fs (loop1): Could not load journal inode [ 111.753494][T10689] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 111.791199][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 111.791211][ T29] audit: type=1400 audit(880.243:11698): avc: denied { create } for pid=10710 comm="syz.0.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.833406][ T29] audit: type=1400 audit(880.275:11699): avc: denied { accept } for pid=10710 comm="syz.0.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.907660][ T29] audit: type=1400 audit(880.338:11700): avc: denied { name_connect } for pid=10718 comm="syz.7.2963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 112.029192][ T29] audit: type=1400 audit(880.497:11701): avc: denied { create } for pid=10731 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.061160][T10739] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 112.073416][T10732] IPVS: stopping master sync thread 10739 ... [ 112.073416][ T29] audit: type=1400 audit(880.497:11702): avc: denied { setopt } for pid=10731 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.104078][ T29] audit: type=1400 audit(880.571:11703): avc: denied { read write } for pid=10740 comm="syz.0.2969" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.127600][ T29] audit: type=1400 audit(880.571:11704): avc: denied { open } for pid=10740 comm="syz.0.2969" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.167382][ T29] audit: type=1400 audit(880.624:11705): avc: denied { ioctl } for pid=10740 comm="syz.0.2969" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.200087][ T29] audit: type=1400 audit(880.677:11706): avc: denied { create } for pid=10748 comm="syz.1.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.676849][ T29] audit: type=1326 audit(881.173:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5baebe9 code=0x7ffc0000 [ 112.812032][T10779] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 114.633677][ T3395] hid_parser_main: 130 callbacks suppressed [ 114.633697][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 114.654992][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 114.666111][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.673841][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.681696][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.689414][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.697094][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.704757][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.712522][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.720182][ T3395] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 114.749144][ T3395] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.801340][T10885] fido_id[10885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.926585][T10892] ================================================================== [ 114.934764][T10892] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 114.948372][T10892] [ 114.951042][T10892] write to 0xffff888111df4be8 of 8 bytes by task 10889 on cpu 1: [ 114.958771][T10892] shmem_file_splice_read+0x470/0x600 [ 114.964156][T10892] splice_direct_to_actor+0x26f/0x680 [ 114.969532][T10892] do_splice_direct+0xda/0x150 [ 114.974393][T10892] do_sendfile+0x380/0x650 [ 114.978823][T10892] __x64_sys_sendfile64+0x105/0x150 [ 114.984035][T10892] x64_sys_call+0x2bb0/0x2ff0 [ 114.988719][T10892] do_syscall_64+0xd2/0x200 [ 114.993231][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.999130][T10892] [ 115.001547][T10892] write to 0xffff888111df4be8 of 8 bytes by task 10892 on cpu 0: [ 115.009343][T10892] shmem_file_splice_read+0x470/0x600 [ 115.014787][T10892] splice_direct_to_actor+0x26f/0x680 [ 115.020164][T10892] do_splice_direct+0xda/0x150 [ 115.024928][T10892] do_sendfile+0x380/0x650 [ 115.029363][T10892] __x64_sys_sendfile64+0x105/0x150 [ 115.034567][T10892] x64_sys_call+0x2bb0/0x2ff0 [ 115.039242][T10892] do_syscall_64+0xd2/0x200 [ 115.043756][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.049649][T10892] [ 115.051970][T10892] value changed: 0x000000000001930a -> 0x00000000000193d7 [ 115.059069][T10892] [ 115.061377][T10892] Reported by Kernel Concurrency Sanitizer on: [ 115.067512][T10892] CPU: 0 UID: 0 PID: 10892 Comm: syz.5.3037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.077304][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.087359][T10892] ==================================================================