last executing test programs: 3m38.683811065s ago: executing program 4 (id=1708): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.661076526s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) 3m38.638053506s ago: executing program 4 (id=1710): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 3m38.050191575s ago: executing program 4 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 3m37.620483671s ago: executing program 4 (id=1738): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) getpriority(0x2, 0x80000000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m37.387939214s ago: executing program 4 (id=1752): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m37.387720585s ago: executing program 32 (id=1752): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.173274411s ago: executing program 3 (id=7749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 33.101258972s ago: executing program 3 (id=7751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 32.988041684s ago: executing program 3 (id=7767): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 32.136127777s ago: executing program 3 (id=7779): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) 32.117309746s ago: executing program 3 (id=7780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 32.006982208s ago: executing program 3 (id=7785): r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) finit_module(r0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 32.006689158s ago: executing program 33 (id=7785): r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) finit_module(r0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 2.157436638s ago: executing program 1 (id=8492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 2.157020228s ago: executing program 2 (id=8493): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4812987e"}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}, [@mdlm_detail={0x6e, 0x24, 0x13, 0xee, "518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x5, 0x7, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 1.845813233s ago: executing program 5 (id=8496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2004ce, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x464, &(0x7f0000000400)="$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") setresuid(0xee01, 0xee00, 0x0) 1.710335165s ago: executing program 6 (id=8497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x800000000000}, 0x18) openat$nvram(0xffffffffffffff9c, 0x0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1.454068748s ago: executing program 0 (id=8502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 1.394561789s ago: executing program 2 (id=8503): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.324280261s ago: executing program 2 (id=8504): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x90042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x67a, 0x1, 0x81, 0x3, 0xd13e, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 1.248655232s ago: executing program 5 (id=8505): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10, 0xd}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0!|!') 1.205645172s ago: executing program 1 (id=8506): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x400122a0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.181880513s ago: executing program 2 (id=8507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000400000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 1.135835033s ago: executing program 1 (id=8508): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 1.108069544s ago: executing program 0 (id=8509): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_acorn}, {@uid}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x41}}, {@map_acorn}, {@map_normal}, {@overriderock}, {@nojoliet}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000001880)="$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") 1.081102994s ago: executing program 6 (id=8510): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@resgid}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4008040) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r1, 0x0, 0x478) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1.072739714s ago: executing program 1 (id=8520): openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk={@s}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000003e0000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.063844134s ago: executing program 2 (id=8511): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00@'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.053708825s ago: executing program 5 (id=8512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.004194406s ago: executing program 1 (id=8513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_bp={0x0}, 0x1e005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x1f, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 891.119637ms ago: executing program 5 (id=8514): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41101}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 797.942958ms ago: executing program 0 (id=8515): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 742.918139ms ago: executing program 5 (id=8516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) 655.9361ms ago: executing program 5 (id=8517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 637.092611ms ago: executing program 1 (id=8528): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unshare(0x60600) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 557.773822ms ago: executing program 6 (id=8518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00', 0x8000}) 507.899563ms ago: executing program 0 (id=8519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856", 0x8}], 0x2) 205.683247ms ago: executing program 2 (id=8521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x800000000000}, 0x18) openat$nvram(0xffffffffffffff9c, 0x0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 205.408907ms ago: executing program 6 (id=8522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 204.536807ms ago: executing program 0 (id=8532): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 178.278568ms ago: executing program 6 (id=8523): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 44.60867ms ago: executing program 0 (id=8524): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r3, 0x10}, 0x8) 0s ago: executing program 6 (id=8525): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 003e syscall=179 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 237.119126][ T29] audit: type=1326 audit(1751848962.255:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 237.142870][ T29] audit: type=1326 audit(1751848962.255:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.0.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 237.211581][ T29] audit: type=1400 audit(1751848962.325:6031): avc: denied { create } for pid=18884 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.231454][ T29] audit: type=1400 audit(1751848962.335:6032): avc: denied { write } for pid=18884 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.259623][ T29] audit: type=1400 audit(1751848962.395:6033): avc: denied { read write } for pid=18890 comm="syz.0.6514" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.288780][T18892] lo speed is unknown, defaulting to 1000 [ 237.330546][T18895] pim6reg1: entered promiscuous mode [ 237.336015][T18895] pim6reg1: entered allmulticast mode [ 237.606505][T18928] syz_tun: entered allmulticast mode [ 237.612982][T18927] syz_tun: left allmulticast mode [ 237.683439][T18934] pim6reg1: entered promiscuous mode [ 237.689032][T18934] pim6reg1: entered allmulticast mode [ 237.699224][T18936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6534'. [ 238.887965][T18988] netlink: 'syz.5.6555': attribute type 7 has an invalid length. [ 238.895853][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6555'. [ 238.990261][T19001] netlink: 'syz.5.6559': attribute type 4 has an invalid length. [ 239.023906][T19001] netlink: 'syz.5.6559': attribute type 4 has an invalid length. [ 239.079792][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6566'. [ 239.181843][T19018] lo speed is unknown, defaulting to 1000 [ 239.252567][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6575'. [ 239.261717][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6575'. [ 239.787293][T18997] 9pnet_fd: p9_fd_create_tcp (18997): problem connecting socket to 127.0.0.1 [ 240.166857][T19100] netlink: 'syz.1.6605': attribute type 4 has an invalid length. [ 240.178042][T19100] netlink: 'syz.1.6605': attribute type 4 has an invalid length. [ 240.325562][T19118] loop5: detected capacity change from 0 to 512 [ 240.367760][T19118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.382667][T19118] ext4 filesystem being mounted at /892/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.488562][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.558970][T19135] netlink: 'syz.2.6621': attribute type 10 has an invalid length. [ 240.642715][T19145] netlink: 'syz.3.6622': attribute type 4 has an invalid length. [ 240.652759][T19145] netlink: 'syz.3.6622': attribute type 4 has an invalid length. [ 240.665426][T17599] lo speed is unknown, defaulting to 1000 [ 240.671249][T17599] syz0: Port: 1 Link ACTIVE [ 240.765269][T19157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.773877][T19157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.222309][T19179] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6639'. [ 241.231850][T19179] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6639'. [ 241.377262][T19194] sch_fq: defrate 0 ignored. [ 241.427307][T19199] netlink: 'syz.3.6648': attribute type 10 has an invalid length. [ 241.436775][T19199] geneve1: entered promiscuous mode [ 241.442590][T19199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.451679][T19199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.460700][T19199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.469933][T19199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.481514][T19199] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 241.542642][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 241.859615][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6656'. [ 241.868658][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6656'. [ 242.094336][T19232] loop5: detected capacity change from 0 to 128 [ 242.108683][T19232] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.113134][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.128202][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.135693][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.138169][T19232] ext4 filesystem being mounted at /904/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.143133][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.182562][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.190026][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.197645][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.205156][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.212660][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.220166][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.227611][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.235202][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.242807][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.250244][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.257680][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.265109][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.272573][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.280058][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.287559][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.295094][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.302568][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.310126][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.317665][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.325103][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.332514][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.339957][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.347465][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.354881][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.362292][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.369762][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.377203][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.384755][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.392163][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.399590][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.407108][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.414688][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.422665][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.430141][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.437623][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.445061][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.452555][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.459981][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.467455][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.474971][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.482696][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.490212][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.497804][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.505280][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.512844][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.520327][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.527768][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.529189][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 242.529207][ T29] audit: type=1326 audit(1751848967.665:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.535168][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.535197][T17601] hid-generic 0008:0006:0007.0012: unknown main item tag 0x0 [ 242.579841][ T29] audit: type=1326 audit(1751848967.675:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.603464][ T29] audit: type=1326 audit(1751848967.675:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.609577][T17601] hid-generic 0008:0006:0007.0012: hidraw0: HID v0.0b Device [syz1] on syz1 [ 242.627118][ T29] audit: type=1326 audit(1751848967.675:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.660315][ T29] audit: type=1326 audit(1751848967.675:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.684114][ T29] audit: type=1326 audit(1751848967.675:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.695072][ T7709] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.707664][ T29] audit: type=1326 audit(1751848967.675:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.740190][ T29] audit: type=1326 audit(1751848967.675:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.763858][ T29] audit: type=1326 audit(1751848967.675:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.787477][ T29] audit: type=1326 audit(1751848967.705:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e95e929 code=0x7ffc0000 [ 242.830963][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'. [ 242.871009][T19248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 242.883044][T19248] team0: Port device batadv1 added [ 243.059782][T19266] vhci_hcd: invalid port number 96 [ 243.065023][T19266] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 243.206261][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6682'. [ 243.212043][T19278] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.223071][T19278] team0: Port device batadv1 added [ 243.268502][T19281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.439443][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6690'. [ 243.454024][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'. [ 243.470014][T19297] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6690'. [ 243.580274][T19310] lo speed is unknown, defaulting to 1000 [ 243.613040][T19314] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 243.809080][T19331] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6706'. [ 243.833626][T19331] 0: renamed from hsr_slave_1 [ 243.848277][T19331] 0: entered allmulticast mode [ 243.856826][T19331] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 243.941365][T19338] pim6reg1: entered promiscuous mode [ 243.946812][T19338] pim6reg1: entered allmulticast mode [ 244.139301][T19351] lo speed is unknown, defaulting to 1000 [ 244.381534][T19367] netlink: 'syz.1.6719': attribute type 1 has an invalid length. [ 244.429206][T19367] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.597151][T19370] bond9 (unregistering): Released all slaves [ 245.017510][T19394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6732'. [ 245.307923][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6745'. [ 245.358919][T19428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6745'. [ 245.515138][T19423] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6745'. [ 245.974273][T19457] vlan1: entered promiscuous mode [ 245.979556][T19457] syz_tun: entered promiscuous mode [ 246.016368][T19459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19459 comm=syz.0.6758 [ 246.029315][T19459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19459 comm=syz.0.6758 [ 246.061481][T19455] lo speed is unknown, defaulting to 1000 [ 246.395570][T19481] SELinux: ebitmap: truncated map [ 246.401600][T19481] SELinux: failed to load policy [ 246.567083][T19488] infiniband syz!: set down [ 246.571667][T19488] infiniband syz!: added team_slave_0 [ 246.598319][T19488] RDS/IB: syz!: added [ 246.602530][T19488] smc: adding ib device syz! with port count 1 [ 246.608810][T19488] smc: ib device syz! port 1 has pnetid [ 246.869459][T19492] openvswitch: netlink: Message has 6 unknown bytes. [ 247.006068][T19505] loop5: detected capacity change from 0 to 256 [ 247.147146][T17601] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 247.154633][T17601] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 247.162081][T17601] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 247.185350][T17601] hid-generic 0000:0004:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.633894][T19537] loop5: detected capacity change from 0 to 256 [ 247.935680][T19562] netlink: 'syz.2.6802': attribute type 1 has an invalid length. [ 247.956703][T19562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.011285][T19562] bond8: (slave gretap1): making interface the new active one [ 248.021103][T19562] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 248.076250][T19562] bond8 (unregistering): (slave gretap1): Releasing active interface [ 248.087556][T19562] bond8 (unregistering): Released all slaves [ 248.169765][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 248.169782][ T29] audit: type=1326 audit(1751848973.305:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19569 comm="syz.0.6815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 248.236235][T19572] team0 (unregistering): Port device dummy0 removed [ 248.239562][ T29] audit: type=1326 audit(1751848973.345:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19569 comm="syz.0.6815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 248.266485][ T29] audit: type=1326 audit(1751848973.345:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19569 comm="syz.0.6815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 248.357000][T19576] __nla_validate_parse: 2 callbacks suppressed [ 248.357018][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6807'. [ 248.376147][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'. [ 248.588657][ T29] audit: type=1400 audit(1751848973.725:6276): avc: denied { mount } for pid=19598 comm="syz.0.6829" name="/" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.602481][T19601] lo speed is unknown, defaulting to 1000 [ 248.643347][T19605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19605 comm=syz.2.6818 [ 248.656074][T19605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19605 comm=syz.2.6818 [ 248.658649][ T29] audit: type=1400 audit(1751848973.755:6277): avc: denied { search } for pid=19598 comm="syz.0.6829" name="/" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.690983][ T29] audit: type=1400 audit(1751848973.755:6278): avc: denied { search } for pid=19598 comm="syz.0.6829" name="/" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.713339][ T29] audit: type=1400 audit(1751848973.755:6279): avc: denied { read open } for pid=19598 comm="syz.0.6829" path="/" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.736021][ T29] audit: type=1400 audit(1751848973.755:6280): avc: denied { search } for pid=19598 comm="syz.0.6829" name="/" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.764448][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6820'. [ 248.880021][ T29] audit: type=1326 audit(1751848974.015:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19603 comm="syz.0.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 248.907390][ T29] audit: type=1326 audit(1751848974.045:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19603 comm="syz.0.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 249.045160][T19637] netlink: 'syz.0.6833': attribute type 1 has an invalid length. [ 249.107557][T19637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.122880][T19644] bond9: (slave gretap0): making interface the new active one [ 249.131228][T19644] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 249.190503][T19637] bond9 (unregistering): (slave gretap0): Releasing active interface [ 249.193891][T19647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6837'. [ 249.210216][T19652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19652 comm=syz.5.6836 [ 249.222889][T19652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19652 comm=syz.5.6836 [ 249.238265][T19637] bond9 (unregistering): Released all slaves [ 249.252789][T19645] lo speed is unknown, defaulting to 1000 [ 249.341539][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6844'. [ 249.351395][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6844'. [ 249.476094][T19679] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 249.585436][T19688] netlink: 'syz.5.6854': attribute type 1 has an invalid length. [ 249.603606][T19688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.627848][T19688] bond2: (slave gretap1): making interface the new active one [ 249.636752][T19688] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 249.675997][T19688] bond2 (unregistering): (slave gretap1): Releasing active interface [ 249.712655][T19688] bond2 (unregistering): Released all slaves [ 249.762627][T19706] vlan0: entered allmulticast mode [ 249.767945][T19706] bridge_slave_0: entered allmulticast mode [ 249.910369][T19729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6870'. [ 250.029308][T19742] loop5: detected capacity change from 0 to 1024 [ 250.072788][T19742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.072858][T19742] ext4 filesystem being mounted at /943/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.101737][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6880'. [ 250.286236][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6884'. [ 250.286257][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6884'. [ 250.294890][T19763] bond7: entered promiscuous mode [ 250.309624][T19763] bond7: entered allmulticast mode [ 250.315226][T19763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.340691][T19766] bond0: (slave bond_slave_1): Releasing backup interface [ 250.814834][T19792] ip6_vti0: mtu greater than device maximum [ 250.870935][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.960014][T19804] ref_ctr_offset mismatch. inode: 0x1342 offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x82 [ 251.082773][T19818] syzkaller0: entered promiscuous mode [ 251.088384][T19818] syzkaller0: entered allmulticast mode [ 251.095921][ T5201] syzkaller0: tun_net_xmit 48 [ 251.115008][T19818] syzkaller0: tun_net_xmit 1280 [ 251.119975][T19818] syzkaller0: create flow: hash 3648009894 index 1 [ 251.137198][T19816] syzkaller0: delete flow: hash 3648009894 index 1 [ 251.236348][T19837] loop5: detected capacity change from 0 to 1024 [ 251.248850][T19837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.279800][T19837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.351285][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.528022][T19890] 0XD: renamed from gretap0 (while UP) [ 251.576332][T19890] 0XD: entered allmulticast mode [ 251.586207][T19890] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 252.377911][T19965] xt_hashlimit: max too large, truncated to 1048576 [ 252.687840][T19996] af_packet: tpacket_rcv: packet too big, clamped from 4300 to 3942. macoff=106 [ 253.033999][T20033] pim6reg1: entered promiscuous mode [ 253.039433][T20033] pim6reg1: entered allmulticast mode [ 253.129830][T20049] pim6reg1: entered promiscuous mode [ 253.135371][T20049] pim6reg1: entered allmulticast mode [ 253.493423][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 253.493440][ T29] audit: type=1326 audit(1751849431.632:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.536246][ T29] audit: type=1326 audit(1751849431.632:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.559831][ T29] audit: type=1326 audit(1751849431.632:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.583583][ T29] audit: type=1326 audit(1751849431.632:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.607142][ T29] audit: type=1326 audit(1751849431.632:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.630738][ T29] audit: type=1326 audit(1751849431.632:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.654351][ T29] audit: type=1326 audit(1751849431.632:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.677869][ T29] audit: type=1326 audit(1751849431.632:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.701570][ T29] audit: type=1326 audit(1751849431.642:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.725015][ T29] audit: type=1326 audit(1751849431.642:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20084 comm="syz.5.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770cc6e929 code=0x7ffc0000 [ 253.935189][T20113] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 254.001578][T20124] netlink: 'syz.2.7043': attribute type 2 has an invalid length. [ 254.009565][T20124] netlink: 'syz.2.7043': attribute type 1 has an invalid length. [ 254.017403][T20124] __nla_validate_parse: 6 callbacks suppressed [ 254.017420][T20124] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7043'. [ 254.151060][T20138] hub 9-0:1.0: USB hub found [ 254.158977][T20138] hub 9-0:1.0: 8 ports detected [ 254.166139][T20140] tipc: Enabled bearer , priority 0 [ 254.185739][T20140] tipc: Disabling bearer [ 254.267906][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7061'. [ 254.303021][T20158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7060'. [ 254.687617][T20200] syzkaller0: entered promiscuous mode [ 254.693198][T20200] syzkaller0: entered allmulticast mode [ 254.720054][T20202] netlink: 'syz.2.7077': attribute type 4 has an invalid length. [ 254.785370][T20210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.799502][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7084'. [ 254.809102][T20210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.821746][T20215] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7083'. [ 254.846418][T20221] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.7081'. [ 254.855692][T20221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7081'. [ 254.964741][T20235] SELinux: syz.3.7094 (20235) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 255.139945][T20256] tipc: New replicast peer: 255.255.255.255 [ 255.146552][T20256] tipc: Enabled bearer , priority 10 [ 255.327287][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7109'. [ 255.337325][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7109'. [ 255.390244][T20272] lo speed is unknown, defaulting to 1000 [ 255.430311][T20276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20276 comm=syz.3.7110 [ 255.442987][T20276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20276 comm=syz.3.7110 [ 255.698129][T20301] syz_tun: entered allmulticast mode [ 255.704480][T20300] syz_tun: left allmulticast mode [ 255.914959][T20308] lo speed is unknown, defaulting to 1000 [ 256.099442][T20319] bridge: RTM_NEWNEIGH with invalid ether address [ 256.163984][T20326] loop5: detected capacity change from 0 to 512 [ 256.176873][T20326] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 256.185684][T20326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.193382][T20326] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.7134: corrupted inode contents [ 256.197557][T20333] tipc: Enabling of bearer rejected, failed to enable media [ 256.214624][T20326] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.7134: mark_inode_dirty error [ 256.235731][T20326] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.7134: corrupted inode contents [ 256.249365][T20326] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.7134: mark_inode_dirty error [ 256.261337][T20326] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.7134: corrupted inode contents [ 256.273578][T20326] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 256.282313][T17599] tipc: Node number set to 4213285945 [ 256.291916][T20326] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.7134: corrupted inode contents [ 256.304382][T20326] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.7134: mark_inode_dirty error [ 256.318279][T20326] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 256.328608][T20326] EXT4-fs (loop5): 1 truncate cleaned up [ 256.341381][ T5201] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 256.355794][T20326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.396483][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.407035][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7142'. [ 256.453133][T20345] lo speed is unknown, defaulting to 1000 [ 256.601676][T20361] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 257.609572][T20434] loop5: detected capacity change from 0 to 1024 [ 257.636268][T20434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.672265][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.829383][T20456] loop5: detected capacity change from 0 to 512 [ 257.836338][T20456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.858463][T20456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.871203][T20456] ext4 filesystem being mounted at /995/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.897404][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.151893][T20486] vlan0: entered allmulticast mode [ 258.157211][T20486] bridge_slave_0: entered allmulticast mode [ 258.276835][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.284321][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.304333][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.311886][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.319498][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.326964][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.334546][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.342023][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.349596][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.357042][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.364451][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.372817][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.380248][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.387753][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.395192][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.403102][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.410535][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.418018][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.425439][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.432883][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.440323][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.447881][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.455309][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.462793][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.470221][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.477645][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.485072][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.492529][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.499976][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.507423][T17601] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 258.734978][T17601] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 258.773540][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 258.773560][ T29] audit: type=1326 audit(1751849889.910:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20464 comm="syz.0.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 258.833972][ T29] audit: type=1326 audit(1751849889.910:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20464 comm="syz.0.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 258.857652][ T29] audit: type=1326 audit(1751849889.910:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20464 comm="syz.0.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 258.881219][ T29] audit: type=1326 audit(1751849889.910:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20464 comm="syz.0.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 258.904843][ T29] audit: type=1326 audit(1751849889.950:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20464 comm="syz.0.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 258.926032][T20500] tipc: Enabled bearer , priority 0 [ 258.937127][ T29] audit: type=1326 audit(1751849889.970:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 258.961080][ T29] audit: type=1326 audit(1751849889.970:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 258.984650][ T29] audit: type=1326 audit(1751849889.970:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 259.008180][ T29] audit: type=1326 audit(1751849889.970:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 259.031739][ T29] audit: type=1326 audit(1751849889.970:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 259.060772][T20502] serio: Serial port ptm0 [ 259.066174][T20498] tipc: Disabling bearer [ 259.310019][T20519] syzkaller0: entered promiscuous mode [ 259.315697][T20519] syzkaller0: entered allmulticast mode [ 259.322270][ T378] syzkaller0: tun_net_xmit 48 [ 259.335130][T20519] syzkaller0: tun_net_xmit 1280 [ 259.340182][T20519] syzkaller0: create flow: hash 399729918 index 1 [ 259.349566][T20517] syzkaller0: delete flow: hash 399729918 index 1 [ 259.570418][T20536] tipc: Enabled bearer , priority 0 [ 259.580645][T20540] __nla_validate_parse: 10 callbacks suppressed [ 259.580661][T20540] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7209'. [ 259.606875][T20534] tipc: Disabling bearer [ 259.676394][T20548] pim6reg1: entered promiscuous mode [ 259.681870][T20548] pim6reg1: entered allmulticast mode [ 259.808479][T20562] loop5: detected capacity change from 0 to 2048 [ 259.851445][T20562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.903394][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.154333][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.163487][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.173998][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.191659][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.200724][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.210182][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.242122][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.252539][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.262828][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 260.331732][T20609] lo speed is unknown, defaulting to 1000 [ 260.592255][T20625] netlink: 'syz.3.7255': attribute type 1 has an invalid length. [ 261.173908][T20676] hsr_slave_0: left promiscuous mode [ 261.186807][T20676] hsr_slave_1: left promiscuous mode [ 261.343974][T20696] loop5: detected capacity change from 0 to 512 [ 261.366421][T20696] EXT4-fs (loop5): orphan cleanup on readonly fs [ 261.387408][T20696] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7281: bg 0: block 248: padding at end of block bitmap is not set [ 261.402157][T20696] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7281: Failed to acquire dquot type 1 [ 261.414915][T20696] EXT4-fs (loop5): 1 truncate cleaned up [ 261.423999][T20696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.447931][T20696] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 261.484738][T20696] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 261.551807][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.575787][T20708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.583258][T20708] IPv6: NLM_F_CREATE should be set when creating new route [ 261.604277][T20711] loop5: detected capacity change from 0 to 512 [ 261.627123][T20711] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 261.641955][T20711] EXT4-fs (loop5): mount failed [ 261.857337][T20727] loop5: detected capacity change from 0 to 512 [ 261.871811][T20727] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 261.888338][T20727] EXT4-fs (loop5): 1 truncate cleaned up [ 261.894856][T20727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.946585][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.539756][T20826] loop5: detected capacity change from 0 to 1024 [ 263.558300][T20826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.606746][T20826] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.7327: Allocating blocks 497-513 which overlap fs metadata [ 263.632304][T20824] EXT4-fs (loop5): pa ffff888105926770: logic 304, phys. 449, len 4 [ 263.640439][T20824] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 263.707687][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.769104][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 263.780139][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 263.780172][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.780265][ T3310] Call Trace: [ 263.780273][ T3310] [ 263.780280][ T3310] __dump_stack+0x1d/0x30 [ 263.780301][ T3310] dump_stack_lvl+0xe8/0x140 [ 263.780344][ T3310] dump_stack+0x15/0x1b [ 263.780434][ T3310] dump_header+0x81/0x220 [ 263.780474][ T3310] oom_kill_process+0x334/0x3f0 [ 263.780504][ T3310] out_of_memory+0x979/0xb80 [ 263.780538][ T3310] try_charge_memcg+0x5e6/0x9e0 [ 263.780621][ T3310] charge_memcg+0x51/0xc0 [ 263.780653][ T3310] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 263.780690][ T3310] __read_swap_cache_async+0x1df/0x350 [ 263.780795][ T3310] swap_cluster_readahead+0x277/0x3e0 [ 263.780912][ T3310] swapin_readahead+0xde/0x6f0 [ 263.780948][ T3310] ? __filemap_get_folio+0x4f7/0x6b0 [ 263.780997][ T3310] ? next_uptodate_folio+0x81c/0x890 [ 263.781053][ T3310] ? swap_cache_get_folio+0x77/0x200 [ 263.781142][ T3310] do_swap_page+0x301/0x2430 [ 263.781164][ T3310] ? css_rstat_updated+0xcd/0x5b0 [ 263.781266][ T3310] ? perf_trace_memcg_rstat_events+0x7c/0x1d0 [ 263.781291][ T3310] ? __pfx_default_wake_function+0x10/0x10 [ 263.781320][ T3310] handle_mm_fault+0x9a5/0x2be0 [ 263.781377][ T3310] ? mas_walk+0xf2/0x120 [ 263.781417][ T3310] do_user_addr_fault+0x636/0x1090 [ 263.781459][ T3310] exc_page_fault+0x62/0xa0 [ 263.781486][ T3310] asm_exc_page_fault+0x26/0x30 [ 263.781579][ T3310] RIP: 0033:0x7f5d631e5977 [ 263.781597][ T3310] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 39 7c 24 [ 263.781618][ T3310] RSP: 002b:00007fffa2852110 EFLAGS: 00010202 [ 263.781636][ T3310] RAX: 0000001b32220000 RBX: 0000000000000d5e RCX: 0000000000040358 [ 263.781664][ T3310] RDX: 000000000ad148d9 RSI: 00007fffa28521a0 RDI: 0000000000000008 [ 263.781697][ T3310] RBP: 00007fffa285214c R08: 000000002943fb75 R09: 7fffffffffffffff [ 263.781709][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 263.781721][ T3310] R13: 00000000000927c0 R14: 00000000000402b3 R15: 00007fffa28521a0 [ 263.781739][ T3310] [ 263.781752][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 284 [ 264.008878][ T3310] memory+swap: usage 307764kB, limit 9007199254740988kB, failcnt 0 [ 264.016813][ T3310] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 264.024141][ T3310] Memory cgroup stats for /syz2: [ 264.024423][ T3310] cache 0 [ 264.032473][ T3310] rss 0 [ 264.035338][ T3310] shmem 0 [ 264.038298][ T3310] mapped_file 0 [ 264.041776][ T3310] dirty 0 [ 264.044798][ T3310] writeback 0 [ 264.048101][ T3310] workingset_refault_anon 3889 [ 264.052900][ T3310] workingset_refault_file 186 [ 264.057652][ T3310] swap 577536 [ 264.060952][ T3310] swapcached 16384 [ 264.064744][ T3310] pgpgin 307234 [ 264.068221][ T3310] pgpgout 307230 [ 264.071815][ T3310] pgfault 358369 [ 264.075409][ T3310] pgmajfault 511 [ 264.079058][ T3310] inactive_anon 16384 [ 264.083128][ T3310] active_anon 0 [ 264.086647][ T3310] inactive_file 0 [ 264.090308][ T3310] active_file 0 [ 264.090620][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 264.090637][ T29] audit: type=1400 audit(1751849895.230:6790): avc: denied { listen } for pid=20847 comm="syz.0.7336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.093832][ T3310] unevictable 0 [ 264.093843][ T3310] hierarchical_memory_limit 314572800 [ 264.093854][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 264.135385][ T3310] total_cache 0 [ 264.138633][ T29] audit: type=1400 audit(1751849895.280:6791): avc: denied { accept } for pid=20847 comm="syz.0.7336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.138855][ T3310] total_rss 0 [ 264.138866][ T3310] total_shmem 0 [ 264.165331][ T3310] total_mapped_file 0 [ 264.169383][ T3310] total_dirty 0 [ 264.172861][ T3310] total_writeback 0 [ 264.176872][ T3310] total_workingset_refault_anon 3889 [ 264.182191][ T3310] total_workingset_refault_file 186 [ 264.187447][ T3310] total_swap 577536 [ 264.191265][ T3310] total_swapcached 16384 [ 264.195558][ T3310] total_pgpgin 307234 [ 264.199591][ T3310] total_pgpgout 307230 [ 264.203659][ T3310] total_pgfault 358372 [ 264.207766][ T3310] total_pgmajfault 511 [ 264.211868][ T3310] total_inactive_anon 16384 [ 264.216454][ T3310] total_active_anon 0 [ 264.220435][ T3310] total_inactive_file 0 [ 264.224623][ T3310] total_active_file 0 [ 264.228668][ T3310] total_unevictable 0 [ 264.232779][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7315,pid=20791,uid=0 [ 264.247614][ T3310] Memory cgroup out of memory: Killed process 20791 (syz.2.7315) total-vm:95672kB, anon-rss:948kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 264.446588][T20868] wireguard0: entered promiscuous mode [ 264.452115][T20868] wireguard0: entered allmulticast mode [ 264.495200][T20792] syz.2.7315 (20792) used greatest stack depth: 6040 bytes left [ 264.605199][T20891] netlink: 'syz.2.7355': attribute type 1 has an invalid length. [ 264.622683][T20891] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.641510][T20891] macvlan2: entered promiscuous mode [ 264.646893][T20891] macvlan2: entered allmulticast mode [ 264.653684][T20891] bond8: entered promiscuous mode [ 264.660612][T20891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.669429][T20891] bond8: left promiscuous mode [ 264.856966][T20917] smc: net device bond0 applied user defined pnetid SYZ2 [ 264.864388][T20917] smc: net device bond0 erased user defined pnetid SYZ2 [ 264.910154][ T29] audit: type=1400 audit(1751849896.050:6792): avc: denied { write } for pid=20924 comm="syz.3.7371" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 264.984380][T20935] __nla_validate_parse: 6 callbacks suppressed [ 264.984402][T20935] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7373'. [ 265.159813][ T29] audit: type=1326 audit(1751849896.300:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.184123][ T29] audit: type=1326 audit(1751849896.300:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.207818][ T29] audit: type=1326 audit(1751849896.300:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.231367][ T29] audit: type=1326 audit(1751849896.300:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.254976][ T29] audit: type=1326 audit(1751849896.300:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.278541][ T29] audit: type=1326 audit(1751849896.300:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.320092][ T29] audit: type=1326 audit(1751849896.320:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6330e929 code=0x7ffc0000 [ 265.413560][T20968] loop5: detected capacity change from 0 to 8192 [ 265.553271][T20972] lo speed is unknown, defaulting to 1000 [ 265.675218][T20972] chnl_net:caif_netlink_parms(): no params data found [ 265.718375][T20972] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.725633][T20972] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.733018][T20972] bridge_slave_0: entered allmulticast mode [ 265.740030][T20972] bridge_slave_0: entered promiscuous mode [ 265.747319][T20972] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.754602][T20972] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.761989][T20972] bridge_slave_1: entered allmulticast mode [ 265.768900][T20972] bridge_slave_1: entered promiscuous mode [ 265.790803][T20972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.801381][T20972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.824405][T20972] team0: Port device team_slave_0 added [ 265.831452][T20972] team0: Port device team_slave_1 added [ 265.849305][T20972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.856376][T20972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.882582][T20972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.903651][T20972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.910879][T20972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.936935][T20972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.976320][T20972] hsr_slave_0: entered promiscuous mode [ 265.982530][T20972] hsr_slave_1: entered promiscuous mode [ 266.140010][T21011] netlink: 'syz.0.7398': attribute type 4 has an invalid length. [ 266.279232][T20972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.300102][T20972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.315303][T20972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.324178][T20972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.359114][T20972] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.366276][T20972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.373612][T20972] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.380950][T20972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.447237][T20972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.467867][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.477075][T21041] netlink: 277 bytes leftover after parsing attributes in process `syz.5.7409'. [ 266.488455][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.513285][T20972] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.529805][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.536942][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.549712][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.556908][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.660672][T20972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.758948][T20972] veth0_vlan: entered promiscuous mode [ 266.770331][T20972] veth1_vlan: entered promiscuous mode [ 266.791565][T20972] veth0_macvtap: entered promiscuous mode [ 266.799693][T20972] veth1_macvtap: entered promiscuous mode [ 266.814409][T20972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.829303][T20972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.840105][T20972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.848961][T20972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.857916][T20972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.866693][T20972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.188871][T21073] pim6reg1: entered promiscuous mode [ 267.194258][T21073] pim6reg1: entered allmulticast mode [ 267.405017][T21091] loop5: detected capacity change from 0 to 512 [ 267.413950][T21091] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.427673][T21091] EXT4-fs (loop5): 1 truncate cleaned up [ 267.433777][T21091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.537217][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.915429][T21126] netlink: 'syz.2.7439': attribute type 6 has an invalid length. [ 267.988219][T21132] loop5: detected capacity change from 0 to 2048 [ 268.008043][T21132] EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz.5.7442: iget: bad extended attribute block 281474976710655 [ 268.022633][T21132] EXT4-fs (loop5): get root inode failed [ 268.028428][T21132] EXT4-fs (loop5): mount failed [ 268.205454][T21155] loop5: detected capacity change from 0 to 512 [ 268.212194][T21155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.222079][T21155] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 268.230102][T21155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 268.238480][T21155] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 268.248064][T21155] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 268.261015][T21155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.280767][T21155] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 268.307981][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.340514][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7454'. [ 268.349580][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7454'. [ 268.365421][T21166] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.410943][T21172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21172 comm=syz.5.7455 [ 269.028831][T21258] @: renamed from vlan0 (while UP) [ 269.067598][T21254] netlink: 'syz.3.7493': attribute type 4 has an invalid length. [ 269.097584][ T9] lo speed is unknown, defaulting to 1000 [ 269.103398][ T9] syz0: Port: 1 Link DOWN [ 269.238948][T21278] netlink: 'syz.5.7505': attribute type 12 has an invalid length. [ 269.478143][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 269.478159][ T29] audit: type=1326 audit(1751849900.620:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.543793][ T29] audit: type=1326 audit(1751849900.680:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.567484][ T29] audit: type=1326 audit(1751849900.680:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.591018][ T29] audit: type=1326 audit(1751849900.680:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.615112][ T29] audit: type=1326 audit(1751849900.680:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.638846][ T29] audit: type=1326 audit(1751849900.680:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.662412][ T29] audit: type=1326 audit(1751849900.680:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.686578][ T29] audit: type=1326 audit(1751849900.680:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.710133][ T29] audit: type=1326 audit(1751849900.680:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 269.743453][ T29] audit: type=1326 audit(1751849900.680:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.0.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 270.237176][T21384] netlink: 'syz.2.7516': attribute type 1 has an invalid length. [ 270.282276][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810f50fc00: rx timeout, send abort [ 270.361952][T21395] netlink: 'syz.0.7517': attribute type 6 has an invalid length. [ 270.405918][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.413423][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.420991][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.451625][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.459198][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.466737][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.474240][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.481786][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.489292][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.496758][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.504376][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.511955][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.519374][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.526833][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.534260][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.544135][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.551677][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.559328][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.566871][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.574320][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.581825][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.589334][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.596807][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.604305][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.611949][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.619449][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.620998][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7525'. [ 270.626927][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.627022][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.650902][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.658056][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7525'. [ 270.658451][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.688917][ T3400] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.740466][T21435] tipc: New replicast peer: 0.0.255.255 [ 270.746317][T21435] tipc: Enabled bearer , priority 10 [ 270.790593][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810f50fc00: abort rx timeout. Force session deactivation [ 270.981995][T21466] openvswitch: netlink: Message has 6 unknown bytes. [ 271.074212][T21471] SELinux: failed to load policy [ 271.774936][T21510] netlink: 'syz.5.7543': attribute type 6 has an invalid length. [ 271.815697][T21513] netlink: 'syz.2.7546': attribute type 39 has an invalid length. [ 271.864556][ T10] tipc: Node number set to 1753855948 [ 271.985892][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 271.993394][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.000997][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.026580][T21538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7557'. [ 272.041407][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.045649][T21538] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7557'. [ 272.048996][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.065384][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.072873][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.080405][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.088462][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.096015][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.103520][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.111033][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.118492][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.126018][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.134529][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.141969][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.149447][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.157129][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.164741][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.172253][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.179734][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.187176][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.194689][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.202167][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.209744][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.217240][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.224748][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.232182][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.239651][T17601] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.264800][T17601] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 272.717192][T21591] netlink: 'syz.3.7575': attribute type 1 has an invalid length. [ 272.736363][T21591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.750332][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7575'. [ 272.770660][T21591] bond8 (unregistering): Released all slaves [ 273.000493][T21621] tipc: Started in network mode [ 273.005556][T21621] tipc: Node identity ca14b401d7ba, cluster identity 4711 [ 273.012782][T21621] tipc: Enabled bearer , priority 0 [ 273.021111][T21621] tipc: Disabling bearer [ 273.265551][T21650] netlink: 'syz.0.7601': attribute type 10 has an invalid length. [ 273.338194][T21653] netlink: 'syz.0.7602': attribute type 39 has an invalid length. [ 273.599791][T21679] netlink: 'syz.1.7614': attribute type 39 has an invalid length. [ 273.686278][T21687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7617'. [ 273.734454][T21691] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 273.878430][T21699] lo speed is unknown, defaulting to 1000 [ 273.928980][T21704] netlink: 'syz.1.7632': attribute type 16 has an invalid length. [ 273.937030][T21704] netlink: 'syz.1.7632': attribute type 17 has an invalid length. [ 273.948662][T21704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.009699][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.017354][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.024832][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.036627][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.044055][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.051609][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.059038][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.066451][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.073848][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.081272][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.088801][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.096289][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.103736][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.111204][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.118649][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.126279][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.133701][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.141165][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.148701][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.156184][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.163636][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.171158][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.178679][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.186172][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.193589][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.201013][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.208463][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.215938][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.223466][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.230899][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 274.239049][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 274.537370][T21743] loop5: detected capacity change from 0 to 512 [ 274.547043][T21743] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 274.567149][T21743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 274.592975][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 274.592994][ T29] audit: type=1326 audit(1751849905.730:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.622853][ T29] audit: type=1326 audit(1751849905.730:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.624765][T21743] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.7637: corrupted in-inode xattr: e_value size too large [ 274.647547][ T29] audit: type=1326 audit(1751849905.790:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.686355][ T29] audit: type=1326 audit(1751849905.830:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.709915][ T29] audit: type=1326 audit(1751849905.830:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.756395][T21743] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7637: couldn't read orphan inode 15 (err -117) [ 274.791304][ T29] audit: type=1326 audit(1751849905.930:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.795197][T21743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.814945][ T29] audit: type=1326 audit(1751849905.930:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.850534][ T29] audit: type=1326 audit(1751849905.930:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.874835][ T29] audit: type=1326 audit(1751849906.020:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.929774][ T29] audit: type=1326 audit(1751849906.020:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 274.972142][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.012834][T21759] netlink: 'syz.5.7643': attribute type 1 has an invalid length. [ 275.027421][T21759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.041141][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7643'. [ 275.061929][T21759] bond2 (unregistering): Released all slaves [ 275.469005][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7659'. [ 275.565758][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7665'. [ 275.579609][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7666'. [ 275.638331][T21811] __nla_validate_parse: 3 callbacks suppressed [ 275.638353][T21811] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7667'. [ 275.980498][T21842] syzkaller0: entered promiscuous mode [ 275.986053][T21842] syzkaller0: entered allmulticast mode [ 276.096199][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7682'. [ 276.107913][T21844] bond1: (slave batadv0): Releasing active interface [ 276.115889][T21844] batadv0 (unregistering): left promiscuous mode [ 276.165586][T21852] loop9: detected capacity change from 0 to 7 [ 276.171950][T21852] buffer_io_error: 12 callbacks suppressed [ 276.171963][T21852] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.189149][T21852] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.197064][T21852] loop9: unable to read partition table [ 276.202842][T21852] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 276.202842][T21852] ) failed (rc=-5) [ 276.235393][T21855] SET target dimension over the limit! [ 276.461115][T21869] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7691'. [ 276.607660][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.616738][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.625720][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.657710][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.666937][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.675972][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.742946][T21889] netlink: 'syz.5.7700': attribute type 4 has an invalid length. [ 276.743352][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 276.860115][T21901] SELinux: failed to load policy [ 277.307006][T21964] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 277.307006][T21964] The task syz.0.7727 (21964) triggered the difference, watch for misbehavior. [ 277.513131][T17601] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 277.521117][T17601] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.661732][T21984] netlink: 'syz.1.7740': attribute type 1 has an invalid length. [ 277.678653][T21984] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.700928][T21984] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.716399][T21984] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 277.740626][T21984] bond9: (slave vti0): Error -95 calling set_mac_address [ 277.957592][T22006] openvswitch: netlink: Message has 6 unknown bytes. [ 277.981053][T22008] loop9: detected capacity change from 0 to 7 [ 277.987643][T22008] Buffer I/O error on dev loop9, logical block 0, async page read [ 277.997251][T22008] Buffer I/O error on dev loop9, logical block 0, async page read [ 278.005241][T22008] loop9: unable to read partition table [ 278.011177][T22008] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 278.011177][T22008] ) failed (rc=-5) [ 278.063408][T22012] pim6reg1: entered promiscuous mode [ 278.068863][T22012] pim6reg1: entered allmulticast mode [ 278.251290][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 278.265617][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.756228][T22066] SET target dimension over the limit! [ 278.765273][T22066] loop5: detected capacity change from 0 to 512 [ 278.772114][T22066] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 278.780994][T22066] EXT4-fs (loop5): invalid journal inode [ 279.269080][T22094] lo speed is unknown, defaulting to 1000 [ 279.354855][T22094] chnl_net:caif_netlink_parms(): no params data found [ 279.399303][T22094] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.406510][T22094] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.415741][T22094] bridge_slave_0: entered allmulticast mode [ 279.422545][T22094] bridge_slave_0: entered promiscuous mode [ 279.429884][T22094] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.437118][T22094] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.444446][T22094] bridge_slave_1: entered allmulticast mode [ 279.451329][T22094] bridge_slave_1: entered promiscuous mode [ 279.470219][T22094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.481140][T22094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.502371][T22094] team0: Port device team_slave_0 added [ 279.509206][T22094] team0: Port device team_slave_1 added [ 279.526562][T22094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.533584][T22094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.559917][T22094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.571421][T22094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.578510][T22094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.604632][T22094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.634295][T22094] hsr_slave_0: entered promiscuous mode [ 279.640708][T22094] hsr_slave_1: entered promiscuous mode [ 279.646926][T22094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.654568][T22094] Cannot create hsr debugfs directory [ 279.746643][T22094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.757579][T22094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.767876][T22094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.779226][T22094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.782077][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 279.782097][ T29] audit: type=1400 audit(1751849910.920:7169): avc: denied { watch } for pid=22123 comm="syz.5.7794" path="/1143/file0" dev="tmpfs" ino=5952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.849271][T22094] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.856445][T22094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.863802][T22094] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.870914][T22094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.898592][ T29] audit: type=1400 audit(1751849911.040:7170): avc: denied { watch_reads } for pid=22133 comm="syz.5.7797" path="/1145/file0" dev="tmpfs" ino=5963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.918643][T22094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.939631][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.966488][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.981773][T22094] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.993184][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.000478][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.035734][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.042914][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.155704][T22094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.287548][T22094] veth0_vlan: entered promiscuous mode [ 280.296342][T22094] veth1_vlan: entered promiscuous mode [ 280.318319][T22094] veth0_macvtap: entered promiscuous mode [ 280.326835][T22094] veth1_macvtap: entered promiscuous mode [ 280.339587][T22094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.352899][T22094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.366553][T22094] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.375431][T22094] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.384158][T22094] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.393304][T22094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.493519][T22189] loop6: detected capacity change from 0 to 8192 [ 280.502176][T22189] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.502740][ T29] audit: type=1400 audit(1751849911.650:7171): avc: denied { write } for pid=22193 comm="syz.0.7814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 280.634153][ T29] audit: type=1326 audit(1751849911.770:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.0.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.661813][ T29] audit: type=1326 audit(1751849911.790:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.0.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.670584][T22205] vlan0: entered allmulticast mode [ 280.685549][ T29] audit: type=1326 audit(1751849911.790:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.690695][T22205] bridge_slave_0: entered allmulticast mode [ 280.714176][ T29] audit: type=1326 audit(1751849911.790:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.744323][ T29] audit: type=1326 audit(1751849911.790:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.768912][ T29] audit: type=1326 audit(1751849911.800:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.792596][ T29] audit: type=1326 audit(1751849911.800:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 280.842096][T22213] __nla_validate_parse: 6 callbacks suppressed [ 280.842114][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7822'. [ 280.864146][T22213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.880279][T22213] macvlan2: entered promiscuous mode [ 280.885737][T22213] macvlan2: entered allmulticast mode [ 280.894351][T22213] bond1: entered promiscuous mode [ 280.902365][T22213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.917277][T22213] bond1: left promiscuous mode [ 281.072468][T22224] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7827'. [ 281.335649][T22247] loop5: detected capacity change from 0 to 1024 [ 281.348410][T22247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.381851][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.408542][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7839'. [ 281.428532][T22254] loop5: detected capacity change from 0 to 2048 [ 281.439260][T22253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7839'. [ 281.450769][T22254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.582821][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.984403][T22294] lo speed is unknown, defaulting to 1000 [ 282.097159][T22310] bridge_slave_0: entered promiscuous mode [ 282.111735][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7864'. [ 282.156280][T22316] usb usb1: usbfs: process 22316 (syz.0.7865) did not claim interface 0 before use [ 282.233855][T22326] loop5: detected capacity change from 0 to 1024 [ 282.240975][T22326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.251549][T22326] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 282.262804][T22326] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 282.271450][T22326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 282.278612][T22326] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.7871: Invalid inode table block 0 in block_group 0 [ 282.293087][T22326] EXT4-fs (loop5): Remounting filesystem read-only [ 282.300938][T22326] EXT4-fs (loop5): 1 truncate cleaned up [ 282.308991][T22326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.341651][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.495045][T22336] syzkaller0: entered promiscuous mode [ 282.500694][T22336] syzkaller0: entered allmulticast mode [ 282.597382][T22350] loop6: detected capacity change from 0 to 128 [ 282.694789][ T5221] bio_check_eod: 18362 callbacks suppressed [ 282.694858][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.694858][ T5221] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 282.716535][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.716535][ T5221] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 282.730482][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.730482][ T5221] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 282.746838][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.746838][ T5221] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 282.760454][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.760454][ T5221] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 282.776290][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.776290][ T5221] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 282.791962][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.791962][ T5221] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 282.818439][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.818439][ T5221] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 282.838012][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.838012][ T5221] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 282.853435][ T5221] kworker/u8:41: attempt to access beyond end of device [ 282.853435][ T5221] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 283.004657][T22380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7893'. [ 283.028226][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'. [ 283.086005][T22390] serio: Serial port ptm0 [ 283.099520][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 283.354814][T22432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22432 comm=syz.6.7918 [ 283.367614][T22432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22432 comm=syz.6.7918 [ 283.588476][T22434] can0: slcan on ttyS3. [ 283.634725][T22439] can0 (unregistered): slcan off ttyS3. [ 283.642407][T22439] Falling back ldisc for ttyS3. [ 283.710723][T22455] bridge: RTM_NEWNEIGH with invalid ether address [ 283.933212][T22467] loop5: detected capacity change from 0 to 4096 [ 283.942480][T22467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.136122][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.178510][T22475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2611 sclass=netlink_route_socket pid=22475 comm=syz.5.7935 [ 284.215196][T22477] loop5: detected capacity change from 0 to 2048 [ 284.226231][T22477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.250248][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.303568][T22481] loop5: detected capacity change from 0 to 8192 [ 284.348157][T22489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.359261][T22489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.435677][T22502] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.641372][T22525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22525 comm=syz.0.7957 [ 285.195837][T22575] loop5: detected capacity change from 0 to 2048 [ 285.244720][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 285.244738][ T29] audit: type=1326 audit(1751849916.380:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.277764][T22575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.362712][ T29] audit: type=1326 audit(1751849916.420:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.387041][ T29] audit: type=1326 audit(1751849916.420:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.410769][ T29] audit: type=1326 audit(1751849916.420:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.434305][ T29] audit: type=1326 audit(1751849916.420:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.458482][ T29] audit: type=1326 audit(1751849916.420:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.482213][ T29] audit: type=1326 audit(1751849916.420:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.505803][ T29] audit: type=1326 audit(1751849916.420:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.529349][ T29] audit: type=1326 audit(1751849916.420:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.553202][ T29] audit: type=1326 audit(1751849916.420:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.2.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29008e929 code=0x7ffc0000 [ 285.606990][T22588] lo speed is unknown, defaulting to 1000 [ 285.867877][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.937143][T22611] netlink: 'syz.2.7992': attribute type 7 has an invalid length. [ 285.945056][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7992'. [ 286.014333][T22621] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7998'. [ 286.068435][T22626] lo speed is unknown, defaulting to 1000 [ 286.422513][T22644] loop6: detected capacity change from 0 to 8192 [ 286.515974][T22656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8011'. [ 287.400304][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8036'. [ 287.411314][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8036'. [ 287.505955][T22724] lo speed is unknown, defaulting to 1000 [ 287.515566][T22722] vhci_hcd: invalid port number 96 [ 287.520739][T22722] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 287.619409][T22732] tipc: Enabled bearer , priority 0 [ 287.668294][T22732] tipc: Disabling bearer [ 287.887459][T22744] veth0: entered promiscuous mode [ 287.899092][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8049'. [ 287.926673][T22744] veth0 (unregistering): left promiscuous mode [ 288.145078][T22768] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.163973][T22770] loop6: detected capacity change from 0 to 256 [ 288.173610][T22770] vfat: Bad value for 'dmask' [ 288.229762][T22780] loop6: detected capacity change from 0 to 512 [ 288.239023][T22780] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.260458][T22780] EXT4-fs (loop6): 1 truncate cleaned up [ 288.266861][T22780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.405749][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.496950][T22792] tipc: New replicast peer: 0.0.255.255 [ 288.502632][T22792] tipc: Enabled bearer , priority 10 [ 288.715185][T22811] syzkaller0: entered allmulticast mode [ 288.728681][T22811] syzkaller0: entered promiscuous mode [ 288.736222][T22811] syzkaller0 (unregistering): left allmulticast mode [ 288.742985][T22811] syzkaller0 (unregistering): left promiscuous mode [ 288.856328][T22827] lo speed is unknown, defaulting to 1000 [ 288.868404][T22829] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.031160][T22849] loop5: detected capacity change from 0 to 512 [ 289.048626][T22849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.062135][T22849] ext4 filesystem being mounted at /1216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.150559][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.267036][T22863] tipc: Enabled bearer , priority 0 [ 289.286219][T22861] tipc: Resetting bearer [ 289.305126][T22861] tipc: Disabling bearer [ 289.382377][T22876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.408489][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8114'. [ 289.427204][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8114'. [ 289.473261][T22876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.544070][T22876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.611266][T22876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.664031][T22876] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.678163][T22876] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.693628][T22876] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.711937][T22876] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.996344][T22902] loop6: detected capacity change from 0 to 1024 [ 290.003481][T22902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.016286][T22902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.045703][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.063180][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8115'. [ 290.079316][T22906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8115'. [ 290.139333][T22908] loop6: detected capacity change from 0 to 512 [ 290.146484][T22908] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 290.158492][T22908] EXT4-fs (loop6): 1 truncate cleaned up [ 290.164839][T22908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.189819][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.250405][T22915] netem: change failed [ 290.629691][T22947] netlink: 'syz.0.8134': attribute type 1 has an invalid length. [ 290.656570][T22947] bond9: entered promiscuous mode [ 290.661791][T22947] bond9: entered allmulticast mode [ 290.678286][T22947] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.695938][T22947] ip6gretap1: entered promiscuous mode [ 290.701617][T22947] ip6gretap1: entered allmulticast mode [ 290.708060][T22947] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 290.765246][ T5201] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 290.886572][ T5204] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.218086][T22962] __nla_validate_parse: 1 callbacks suppressed [ 291.218110][T22962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8139'. [ 291.540760][T22977] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8145'. [ 291.705114][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8151'. [ 291.796000][T22996] syzkaller0: entered allmulticast mode [ 291.801955][T22996] syzkaller0: entered promiscuous mode [ 291.809486][T22996] syzkaller0 (unregistering): left allmulticast mode [ 291.816270][T22996] syzkaller0 (unregistering): left promiscuous mode [ 292.180399][T23001] pim6reg1: entered promiscuous mode [ 292.185917][T23001] pim6reg1: entered allmulticast mode [ 292.330402][T23007] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.337798][T23007] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.388005][T23007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.399496][T23007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.444105][T23007] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.453293][T23007] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.462406][T23007] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.471482][T23007] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.572606][T23010] tipc: Enabled bearer , priority 0 [ 292.599298][T23009] tipc: Resetting bearer [ 292.613280][T23009] tipc: Disabling bearer [ 292.646989][T23028] IPVS: Error connecting to the multicast addr [ 293.611625][T23059] IPVS: Error connecting to the multicast addr [ 293.622272][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8188'. [ 293.644446][T23062] loop5: detected capacity change from 0 to 1024 [ 293.651457][T23062] EXT4-fs: Ignoring removed orlov option [ 293.677708][T23062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.775261][T23074] veth1_to_bond: entered allmulticast mode [ 293.784698][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.801072][T23074] veth1_to_bond: left allmulticast mode [ 294.031545][T23108] syz_tun: entered allmulticast mode [ 294.044935][T23108] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 294.053674][T23108] mroute: pending queue full, dropping entries [ 294.077063][T23106] syz_tun: left allmulticast mode [ 294.142314][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 294.142332][ T29] audit: type=1326 audit(1751849925.280:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.235367][ T29] audit: type=1326 audit(1751849925.320:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.259068][ T29] audit: type=1326 audit(1751849925.320:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.282686][ T29] audit: type=1326 audit(1751849925.320:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.306453][ T29] audit: type=1326 audit(1751849925.340:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.330066][ T29] audit: type=1326 audit(1751849925.340:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.354141][ T29] audit: type=1326 audit(1751849925.340:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.1.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 294.541709][T23140] loop6: detected capacity change from 0 to 512 [ 294.562799][T23140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.575914][T23140] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.592157][T23140] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8210: corrupted inode contents [ 294.604316][T23140] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8210: mark_inode_dirty error [ 294.616952][T23140] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8210: corrupted inode contents [ 294.629245][T23140] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.8210: mark_inode_dirty error [ 294.650712][ T29] audit: type=1400 audit(1751849925.790:7500): avc: denied { create } for pid=23139 comm="syz.6.8210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.671427][ T29] audit: type=1400 audit(1751849925.790:7501): avc: denied { rename } for pid=23139 comm="syz.6.8210" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.693396][ T29] audit: type=1400 audit(1751849925.790:7502): avc: denied { rmdir } for pid=23139 comm="syz.6.8210" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.782570][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.024093][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 295.140857][T23184] loop5: detected capacity change from 0 to 512 [ 295.187277][T23184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.201802][T23184] ext4 filesystem being mounted at /1238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.230381][T23184] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.8229: corrupted inode contents [ 295.261447][T23184] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.8229: mark_inode_dirty error [ 295.283780][T23184] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.8229: corrupted inode contents [ 295.298454][T23184] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.8229: mark_inode_dirty error [ 295.377794][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.553239][T23224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8235'. [ 295.582883][T23230] loop6: detected capacity change from 0 to 1024 [ 295.600914][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8246'. [ 295.617119][T23230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.639512][T23230] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 295.651993][T23230] EXT4-fs (loop6): This should not happen!! Data will be lost [ 295.651993][T23230] [ 295.661687][T23230] EXT4-fs (loop6): Total free blocks count 0 [ 295.667778][T23230] EXT4-fs (loop6): Free/Dirty block details [ 295.673723][T23230] EXT4-fs (loop6): free_blocks=0 [ 295.678747][T23230] EXT4-fs (loop6): dirty_blocks=0 [ 295.683802][T23230] EXT4-fs (loop6): Block reservation details [ 295.689770][T23241] random: crng reseeded on system resumption [ 295.689838][T23230] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 295.726488][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.500077][T23365] loop6: detected capacity change from 0 to 1024 [ 296.507975][T23367] loop5: detected capacity change from 0 to 512 [ 296.521946][T23367] EXT4-fs: inline encryption not supported [ 296.528831][T23365] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 296.540450][T23367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 296.549300][T23365] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 296.559879][T23365] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #32: comm syz.6.8250: iget: special inode unallocated [ 296.572925][T23365] EXT4-fs (loop6): no journal found [ 296.886116][T23394] lo speed is unknown, defaulting to 1000 [ 296.890032][T23380] loop6: detected capacity change from 0 to 1764 [ 296.960327][T23398] 9pnet_rdma: rdma_create_trans (23398): problem binding to privport: 13 [ 296.962431][T23400] veth0_vlan: entered allmulticast mode [ 297.077594][T23405] veth0_vlan: left promiscuous mode [ 297.082861][T23405] veth0_vlan: entered promiscuous mode [ 297.204665][T23410] loop6: detected capacity change from 0 to 2048 [ 297.244260][T23410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.262396][T23410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.294602][T23409] uprobe: syz.6.8270:23409 failed to unregister, leaking uprobe [ 297.370741][T23427] bridge: RTM_NEWNEIGH with invalid ether address [ 297.378123][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 297.387775][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8278'. [ 297.457372][T23431] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.481958][T23404] SELinux: failed to load policy [ 297.496482][T23431] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.536736][T23431] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.636427][T23431] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.713272][T23431] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.727064][T23431] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.747892][T23431] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.769234][T23431] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.672639][T23488] netlink: 'syz.0.8302': attribute type 1 has an invalid length. [ 299.464114][T23508] loop5: detected capacity change from 0 to 1024 [ 299.476384][T23508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.491702][T23508] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.8311: Allocating blocks 385-513 which overlap fs metadata [ 299.508753][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 299.508768][T23508] EXT4-fs (loop5): pa ffff888106e56380: logic 16, phys. 129, len 24 [ 299.508770][ T29] audit: type=1400 audit(1751849930.650:7540): avc: denied { ioctl } for pid=23507 comm="syz.5.8311" path="/1259/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 299.547908][T23508] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 299.582175][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.602875][T23515] xt_connbytes: Forcing CT accounting to be enabled [ 299.612665][T23515] Cannot find set identified by id 0 to match [ 299.660369][T23519] vlan0: entered allmulticast mode [ 299.666923][T23522] loop5: detected capacity change from 0 to 1024 [ 299.668073][T23519] dummy0: entered allmulticast mode [ 299.683019][T23523] Q6\bY4: renamed from lo [ 299.690050][T23522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.704802][T23522] ext4 filesystem being mounted at /1261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.727004][ T29] audit: type=1400 audit(1751849930.870:7541): avc: denied { execute } for pid=23520 comm="syz.5.8317" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 299.749971][ T29] audit: type=1400 audit(1751849930.900:7542): avc: denied { execute_no_trans } for pid=23520 comm="syz.5.8317" path="/1261/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 299.791795][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.841270][ T29] audit: type=1326 audit(1751849930.980:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 299.865153][ T29] audit: type=1326 audit(1751849930.980:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 299.877326][T23535] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0 [ 299.911035][ T29] audit: type=1326 audit(1751849930.980:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 299.934756][ T29] audit: type=1326 audit(1751849930.980:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 299.958488][ T29] audit: type=1326 audit(1751849930.980:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 299.982117][ T29] audit: type=1326 audit(1751849930.980:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f289cf0d290 code=0x7ffc0000 [ 300.005857][ T29] audit: type=1326 audit(1751849931.010:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.0.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289cf0e929 code=0x7ffc0000 [ 301.078518][T23582] SELinux: failed to load policy [ 301.107523][T23600] lo speed is unknown, defaulting to 1000 [ 301.281613][T23607] pim6reg1: entered promiscuous mode [ 301.287169][T23607] pim6reg1: entered allmulticast mode [ 301.454154][T23620] syz_tun: entered promiscuous mode [ 301.460535][T23620] vlan0: entered promiscuous mode [ 302.266726][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8381'. [ 302.289082][T23734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.314430][T23734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.490126][T23774] vlan0: entered allmulticast mode [ 302.589163][T23792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8389'. [ 302.733798][T23819] netlink: 'syz.0.8399': attribute type 1 has an invalid length. [ 302.750824][T23819] 8021q: adding VLAN 0 to HW filter on device bond10 [ 302.760872][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8399'. [ 302.773000][T23819] bond10 (unregistering): Released all slaves [ 303.584085][T23868] loop6: detected capacity change from 0 to 512 [ 303.594702][T23868] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 304.777445][T23911] netlink: zone id is out of range [ 304.825573][T23918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=23918 comm=syz.6.8432 [ 306.896135][T23931] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8437'. [ 306.945936][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 306.945952][ T29] audit: type=1326 audit(1751849938.090:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 306.994293][ T29] audit: type=1326 audit(1751849938.130:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.017986][ T29] audit: type=1326 audit(1751849938.130:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.041588][ T29] audit: type=1326 audit(1751849938.130:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.065248][ T29] audit: type=1326 audit(1751849938.130:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.088843][ T29] audit: type=1326 audit(1751849938.130:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.112416][ T29] audit: type=1326 audit(1751849938.130:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.136118][ T29] audit: type=1326 audit(1751849938.130:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.159688][ T29] audit: type=1326 audit(1751849938.130:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.183523][ T29] audit: type=1326 audit(1751849938.130:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.1.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad7fd2e929 code=0x7ffc0000 [ 307.299658][T23949] loop6: detected capacity change from 0 to 512 [ 307.329158][T23949] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 307.371714][T23949] EXT4-fs (loop6): 1 truncate cleaned up [ 307.391611][T23949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.473408][T22094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.528059][T23959] netlink: 268 bytes leftover after parsing attributes in process `syz.6.8448'. [ 307.598827][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8444'. [ 307.738850][T23975] netlink: 'syz.0.8450': attribute type 10 has an invalid length. [ 307.746855][T23975] netlink: 1948 bytes leftover after parsing attributes in process `syz.0.8450'. [ 307.756035][T23975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8450'. [ 307.825048][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8454'. [ 308.023446][T23994] loop6: detected capacity change from 0 to 128 [ 308.038841][T23994] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.061528][T23994] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.112465][T22094] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.145647][T24002] loop6: detected capacity change from 0 to 128 [ 308.157049][T24002] EXT4-fs: Ignoring removed nobh option [ 308.178566][T24002] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.196407][T24002] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.236630][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8466'. [ 308.250609][T24007] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.259596][T24007] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.267947][T24007] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.276395][T24007] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.286002][T22094] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.286218][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8466'. [ 308.385815][T24017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.551847][T24031] bridge0: entered allmulticast mode [ 308.647655][T24044] netlink: 'syz.2.8483': attribute type 3 has an invalid length. [ 308.675336][T24048] syz_tun: entered allmulticast mode [ 308.682475][T24047] syz_tun: left allmulticast mode [ 308.692868][T24051] netlink: 'syz.1.8486': attribute type 1 has an invalid length. [ 308.708058][T24051] 8021q: adding VLAN 0 to HW filter on device bond10 [ 308.721752][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8486'. [ 308.732840][T24051] bond10 (unregistering): Released all slaves [ 308.858478][T24064] netlink: 'syz.2.8491': attribute type 10 has an invalid length. [ 308.866413][T24064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8491'. [ 308.875834][T24064] dummy0: entered promiscuous mode [ 308.882029][T24064] bridge0: port 3(dummy0) entered blocking state [ 308.888567][T24064] bridge0: port 3(dummy0) entered disabled state [ 308.895745][T24064] dummy0: entered allmulticast mode [ 309.303560][T24085] loop5: detected capacity change from 0 to 512 [ 309.310848][T24085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.322247][T24085] EXT4-fs (loop5): 1 truncate cleaned up [ 309.328903][T24085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.442253][T24088] loop6: detected capacity change from 0 to 1024 [ 309.456189][T24088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.660482][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8501'. [ 309.839494][T24111] block device autoloading is deprecated and will be removed. [ 309.876187][T24095] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 309.897037][ T7709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.936729][T24095] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 309.949122][T24095] EXT4-fs (loop6): This should not happen!! Data will be lost [ 309.949122][T24095] [ 309.958947][T24095] EXT4-fs (loop6): Total free blocks count 0 [ 309.965168][T24095] EXT4-fs (loop6): Free/Dirty block details [ 309.971132][T24095] EXT4-fs (loop6): free_blocks=68451041280 [ 309.977044][T24095] EXT4-fs (loop6): dirty_blocks=16432 [ 309.982453][T24095] EXT4-fs (loop6): Block reservation details [ 309.988505][T24095] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 310.063674][ T5222] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 310.154375][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8513'. [ 310.193729][T24130] bond7: (slave batadv0): Releasing active interface [ 310.213273][T24130] batadv0 (unregistering): left promiscuous mode [ 310.307844][T24133] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.316394][T24133] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.324953][T24133] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.333350][T24133] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.357912][T24136] loop6: detected capacity change from 0 to 1024 [ 310.373806][T24136] EXT4-fs: Ignoring removed nobh option [ 310.379525][T24136] EXT4-fs: inline encryption not supported [ 310.408643][T24136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.447775][T24136] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8510: Allocating blocks 385-513 which overlap fs metadata [ 310.483929][T24136] EXT4-fs (loop6): pa ffff8881059268c0: logic 16, phys. 129, len 24 [ 310.492207][T24136] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 310.504455][T24136] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 310.516826][T24136] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.516826][T24136] [ 310.526566][T24136] EXT4-fs (loop6): Total free blocks count 0 [ 310.532568][T24136] EXT4-fs (loop6): Free/Dirty block details [ 310.538555][T24136] EXT4-fs (loop6): free_blocks=128 [ 310.543678][T24136] EXT4-fs (loop6): dirty_blocks=0 [ 310.548735][T24136] EXT4-fs (loop6): Block reservation details [ 310.554787][T24136] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 310.668518][T24150] tipc: Enabled bearer , priority 0 [ 310.676508][T24149] tipc: Resetting bearer [ 310.693328][T24149] tipc: Disabling bearer [ 311.192565][T24153] ================================================================== [ 311.200705][T24153] BUG: KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event [ 311.209404][T24153] [ 311.211738][T24153] write to 0xffff88815e5f2cb8 of 1 bytes by task 24152 on cpu 1: [ 311.219469][T24153] wakeup_source_report_event+0xd6/0x280 [ 311.225119][T24153] __pm_stay_awake+0x34/0x70 [ 311.229726][T24153] ep_poll_callback+0x1f6/0x550 [ 311.234594][T24153] __wake_up+0x63/0xb0 [ 311.238689][T24153] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 311.244265][T24153] __wake_up_sync_key+0x4f/0x80 [ 311.249130][T24153] __unix_dgram_recvmsg+0x3b2/0x840 [ 311.254358][T24153] unix_dgram_recvmsg+0x81/0x90 [ 311.259247][T24153] sock_recvmsg_nosec+0x104/0x130 [ 311.264301][T24153] ____sys_recvmsg+0x26f/0x280 [ 311.269103][T24153] ___sys_recvmsg+0x11f/0x370 [ 311.273812][T24153] do_recvmmsg+0x1ef/0x540 [ 311.278241][T24153] __x64_sys_recvmmsg+0xe5/0x170 [ 311.283190][T24153] x64_sys_call+0x1c6a/0x2fb0 [ 311.287889][T24153] do_syscall_64+0xd2/0x200 [ 311.292424][T24153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.298338][T24153] [ 311.300671][T24153] read to 0xffff88815e5f2cb8 of 1 bytes by task 24153 on cpu 0: [ 311.308314][T24153] __ep_eventpoll_poll+0x1de/0x4e0 [ 311.313444][T24153] __ep_eventpoll_poll+0x18c/0x4e0 [ 311.318572][T24153] ep_eventpoll_poll+0x1f/0x30 [ 311.323355][T24153] do_sys_poll+0x65e/0xbd0 [ 311.327787][T24153] __se_sys_ppoll+0x1b9/0x200 [ 311.332490][T24153] __x64_sys_ppoll+0x67/0x80 [ 311.337111][T24153] x64_sys_call+0x2de5/0x2fb0 [ 311.341804][T24153] do_syscall_64+0xd2/0x200 [ 311.346335][T24153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.352248][T24153] [ 311.354577][T24153] value changed: 0x00 -> 0x01 [ 311.359264][T24153] [ 311.361595][T24153] Reported by Kernel Concurrency Sanitizer on: [ 311.367755][T24153] CPU: 0 UID: 0 PID: 24153 Comm: syz.1.8528 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 311.378536][T24153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.388606][T24153] ==================================================================