last executing test programs: 2m0.938971853s ago: executing program 4 (id=73): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2m0.843443071s ago: executing program 4 (id=76): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 2m0.717242101s ago: executing program 4 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 2m0.683535744s ago: executing program 4 (id=81): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 1m59.841716651s ago: executing program 4 (id=102): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m59.563457444s ago: executing program 4 (id=108): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m59.494014159s ago: executing program 32 (id=108): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 36.943654632s ago: executing program 1 (id=2493): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000", 0x4}], 0x1}, 0x48002) 36.691387952s ago: executing program 1 (id=2502): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 36.619742048s ago: executing program 1 (id=2507): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000380)="ca091cc2e088", 0xffe3) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x1b83c000) 36.546952534s ago: executing program 1 (id=2510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) 36.506169207s ago: executing program 1 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 36.362665869s ago: executing program 1 (id=2514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x353}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 36.362523809s ago: executing program 33 (id=2514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x353}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.434369015s ago: executing program 5 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 1.067084344s ago: executing program 0 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) close_range(r2, 0xffffffffffffffff, 0x0) 981.035341ms ago: executing program 3 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 961.580163ms ago: executing program 0 (id=3369): socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lstat(0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="2503feffffff0000000016"], 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) 961.394873ms ago: executing program 5 (id=3370): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 941.785934ms ago: executing program 0 (id=3371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 922.330566ms ago: executing program 0 (id=3372): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 901.343718ms ago: executing program 3 (id=3373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 880.03493ms ago: executing program 0 (id=3375): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 860.098431ms ago: executing program 3 (id=3376): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 830.130284ms ago: executing program 3 (id=3378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 802.914806ms ago: executing program 0 (id=3379): setregid(0x0, 0xee00) rt_sigtimedwait(&(0x7f0000000140)={[0x5]}, 0x0, 0x0, 0x8) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='personality\x00') pread64(r2, &(0x7f0000000400)=""/15, 0xf, 0x2) 629.759349ms ago: executing program 3 (id=3384): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 589.720423ms ago: executing program 2 (id=3385): pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 552.351475ms ago: executing program 2 (id=3388): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 531.119617ms ago: executing program 2 (id=3389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 521.815108ms ago: executing program 3 (id=3390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 500.77619ms ago: executing program 2 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) 454.543773ms ago: executing program 2 (id=3394): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 429.868216ms ago: executing program 2 (id=3395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb723, 0x2, 0x0, 0xfffffffe, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x78) 420.521346ms ago: executing program 6 (id=3396): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 288.268857ms ago: executing program 6 (id=3397): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000300)='D', 0x1}], 0x1, 0x7ffd, 0xffffffff, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 199.693364ms ago: executing program 6 (id=3398): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$selinux_access(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:gpg_agent_exec_t:s0 unconfined 0'], 0x46) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 161.256197ms ago: executing program 6 (id=3399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 139.940529ms ago: executing program 6 (id=3400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 111.232021ms ago: executing program 6 (id=3401): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x9, 0x2000406) 91.473403ms ago: executing program 5 (id=3402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 63.193025ms ago: executing program 5 (id=3403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170329bd080d0000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) 26.600318ms ago: executing program 5 (id=3404): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) kernel console output (not intermixed with test programs): item tag 0x0 [ 89.798594][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.806007][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.816719][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.824201][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.831663][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.839113][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.846616][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.854055][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.861528][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.883456][ T1037] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz1] on syz0 [ 89.953816][ T7319] fido_id[7319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.248261][ T7349] netlink: 'syz.0.1554': attribute type 39 has an invalid length. [ 90.521335][ T7369] loop1: detected capacity change from 0 to 256 [ 90.650311][ T7378] loop1: detected capacity change from 0 to 164 [ 90.668141][ T7378] Unable to read rock-ridge attributes [ 90.677561][ T7378] Unable to read rock-ridge attributes [ 90.693867][ T7381] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1564'. [ 90.725066][ T7386] loop1: detected capacity change from 0 to 164 [ 90.762486][ T7386] syz.1.1570: attempt to access beyond end of device [ 90.762486][ T7386] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.785868][ T7386] syz.1.1570: attempt to access beyond end of device [ 90.785868][ T7386] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.842514][ T7398] macvtap1: entered allmulticast mode [ 90.848063][ T7398] bridge0: entered allmulticast mode [ 90.866845][ T7398] bridge0: port 3(macvtap1) entered blocking state [ 90.873659][ T7398] bridge0: port 3(macvtap1) entered disabled state [ 90.884886][ T7398] bridge0: left allmulticast mode [ 91.054219][ T7424] bond2: entered promiscuous mode [ 91.059372][ T7424] bond2: entered allmulticast mode [ 91.064811][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.078100][ T7424] bond2 (unregistering): Released all slaves [ 91.124358][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 91.228533][ T7444] vhci_hcd: invalid port number 96 [ 91.233767][ T7444] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 91.261549][ T7451] pim6reg1: entered promiscuous mode [ 91.267133][ T7451] pim6reg1: entered allmulticast mode [ 91.272923][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 91.272940][ T29] audit: type=1400 audit(1756225336.964:2115): avc: denied { bind } for pid=7454 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.299509][ T29] audit: type=1400 audit(1756225336.964:2116): avc: denied { setopt } for pid=7454 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.321196][ T7455] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.331150][ T7455] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.342900][ T7453] netlink: 'syz.5.1600': attribute type 39 has an invalid length. [ 91.399335][ T7455] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.409295][ T7455] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.426895][ T7462] pimreg: entered allmulticast mode [ 91.435430][ T7462] pimreg: left allmulticast mode [ 91.485805][ T29] audit: type=1400 audit(1756225337.184:2117): avc: denied { read } for pid=7463 comm="syz.0.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.520944][ T7455] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.530778][ T7455] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.576394][ T29] audit: type=1400 audit(1756225337.274:2118): avc: denied { create } for pid=7469 comm="syz.3.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.601550][ T29] audit: type=1400 audit(1756225337.274:2119): avc: denied { connect } for pid=7469 comm="syz.3.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.621841][ T29] audit: type=1400 audit(1756225337.274:2120): avc: denied { ioctl } for pid=7469 comm="syz.3.1609" path="socket:[18793]" dev="sockfs" ino=18793 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.646800][ T29] audit: type=1326 audit(1756225337.304:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.5.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 91.670424][ T29] audit: type=1326 audit(1756225337.304:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.5.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 91.693912][ T29] audit: type=1326 audit(1756225337.304:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.5.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 91.717390][ T29] audit: type=1326 audit(1756225337.304:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.5.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 91.765334][ T7455] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.775258][ T7455] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.967845][ T7492] SELinux: failed to load policy [ 92.002727][ T5282] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.011054][ T5282] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.025689][ T5300] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.034105][ T5300] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.070574][ T7500] loop1: detected capacity change from 0 to 512 [ 92.090033][ T7500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.137902][ T7503] 0ªî{X¹¦: left allmulticast mode [ 92.159453][ T7500] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 92.182661][ T7503] bridge0: port 3(dummy0) entered disabled state [ 92.189187][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.196370][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.232290][ T7500] EXT4-fs (loop1): 1 truncate cleaned up [ 92.240385][ T7500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.282734][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.297066][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.304679][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.339329][ T7521] openvswitch: netlink: Message has 6 unknown bytes. [ 92.340401][ T5300] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.340469][ T5300] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340512][ T5300] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.340608][ T5300] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340647][ T5300] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.340745][ T5300] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.340778][ T5300] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.340811][ T5300] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.522201][ T36] Process accounting resumed [ 92.550547][ T7540] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1637'. [ 93.074149][ T7605] bridge0: port 3(syz_tun) entered blocking state [ 93.080745][ T7605] bridge0: port 3(syz_tun) entered disabled state [ 93.088132][ T7605] syz_tun: entered allmulticast mode [ 93.094034][ T7605] syz_tun: entered promiscuous mode [ 93.100103][ T7605] bridge0: port 3(syz_tun) entered blocking state [ 93.106607][ T7605] bridge0: port 3(syz_tun) entered forwarding state [ 93.122124][ T7605] syz_tun: left allmulticast mode [ 93.127310][ T7605] syz_tun: left promiscuous mode [ 93.132480][ T7605] bridge0: port 3(syz_tun) entered disabled state [ 93.151833][ T7605] bridge_slave_0: left allmulticast mode [ 93.157552][ T7605] bridge_slave_0: left promiscuous mode [ 93.163283][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.180047][ T7605] bridge_slave_1: left allmulticast mode [ 93.185744][ T7605] bridge_slave_1: left promiscuous mode [ 93.191721][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.212213][ T7605] bond0: (slave bond_slave_0): Releasing backup interface [ 93.220050][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 93.231604][ T7605] bond0: (slave bond_slave_1): Releasing backup interface [ 93.240660][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 93.251386][ T7605] team0: Port device team_slave_0 removed [ 93.262341][ T7605] team0: Port device team_slave_1 removed [ 93.269737][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.277149][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.287019][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.294493][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.445100][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 93.706089][ T7647] netlink: 'syz.5.1686': attribute type 4 has an invalid length. [ 93.729482][ T7647] netlink: 'syz.5.1686': attribute type 4 has an invalid length. [ 93.742922][ T7649] macsec1: entered promiscuous mode [ 93.748238][ T7649] bridge0: entered promiscuous mode [ 93.755937][ T7649] bridge0: port 3(macsec1) entered blocking state [ 93.762542][ T7649] bridge0: port 3(macsec1) entered disabled state [ 93.769370][ T7649] macsec1: entered allmulticast mode [ 93.774684][ T7649] bridge0: entered allmulticast mode [ 93.780865][ T7649] macsec1: left allmulticast mode [ 93.786000][ T7649] bridge0: left allmulticast mode [ 93.791995][ T7649] bridge0: left promiscuous mode [ 93.920269][ T7663] bridge: RTM_NEWNEIGH with invalid ether address [ 93.990974][ T7666] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1695'. [ 94.230000][ T7692] loop1: detected capacity change from 0 to 1024 [ 94.245375][ T7692] EXT4-fs: Ignoring removed orlov option [ 94.251320][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.267152][ T7696] loop0: detected capacity change from 0 to 1024 [ 94.287088][ T7696] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 94.297111][ T7696] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 94.311965][ T7696] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 94.329027][ T7696] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #5: comm syz.0.1709: unexpected bad inode w/o EXT4_IGET_BAD [ 94.330341][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.342495][ T7696] EXT4-fs (loop0): no journal found [ 94.359556][ T7696] EXT4-fs (loop0): can't get journal size [ 94.366349][ T7696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.400537][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.458030][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.471210][ T7705] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 94.479139][ T7705] netlink: 'syz.0.1711': attribute type 4 has an invalid length. [ 94.487186][ T7705] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1711'. [ 94.507230][ T7705] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 94.515073][ T7705] netlink: 'syz.0.1711': attribute type 4 has an invalid length. [ 94.522904][ T7705] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1711'. [ 94.728405][ T7713] netlink: 'syz.2.1715': attribute type 27 has an invalid length. [ 94.747102][ T7713] 0ªî{X¹¦: left allmulticast mode [ 94.854839][ T7713] macvtap1: left promiscuous mode [ 94.860432][ T7713] macvtap1: left allmulticast mode [ 94.889727][ T5282] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.898230][ T5282] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.922447][ T5282] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.930901][ T5282] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.963965][ T5282] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.972452][ T5282] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.997683][ T5282] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.006250][ T5282] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.039298][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 95.212337][ T7742] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1729'. [ 95.282953][ T7745] macsec1: entered promiscuous mode [ 95.288398][ T7745] bridge0: entered promiscuous mode [ 95.295465][ T7745] bridge0: port 1(macsec1) entered blocking state [ 95.302221][ T7745] bridge0: port 1(macsec1) entered disabled state [ 95.312878][ T7745] macsec1: entered allmulticast mode [ 95.318269][ T7745] bridge0: entered allmulticast mode [ 95.324412][ T7745] macsec1: left allmulticast mode [ 95.329528][ T7745] bridge0: left allmulticast mode [ 95.337290][ T7745] bridge0: left promiscuous mode [ 95.497352][ T7762] loop1: detected capacity change from 0 to 512 [ 95.510435][ T7759] loop3: detected capacity change from 0 to 2048 [ 95.530889][ T7762] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.552331][ T7762] EXT4-fs (loop1): mount failed [ 95.574314][ T7759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.648601][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1741'. [ 95.657651][ T7777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1741'. [ 95.670910][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.909656][ T7799] tipc: Started in network mode [ 95.914625][ T7799] tipc: Node identity 6a1142c8bafb, cluster identity 4711 [ 95.921855][ T7799] tipc: Enabled bearer , priority 0 [ 95.947675][ T7799] tipc: Disabling bearer [ 96.068972][ T7811] loop3: detected capacity change from 0 to 512 [ 96.080645][ T7811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.092406][ T7811] EXT4-fs (loop3): 1 truncate cleaned up [ 96.099810][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.142655][ T7811] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.1758: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 96.189594][ T7815] xt_limit: Overflow, try lower: 271964/0 [ 96.282659][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.308170][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 96.308237][ T29] audit: type=1326 audit(1756225342.014:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.397668][ T29] audit: type=1326 audit(1756225342.014:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.421218][ T29] audit: type=1326 audit(1756225342.014:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.444768][ T29] audit: type=1326 audit(1756225342.014:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.468300][ T29] audit: type=1326 audit(1756225342.014:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.491940][ T29] audit: type=1326 audit(1756225342.014:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.515371][ T29] audit: type=1326 audit(1756225342.014:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.538841][ T29] audit: type=1326 audit(1756225342.014:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.562342][ T29] audit: type=1326 audit(1756225342.014:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 96.585803][ T29] audit: type=1326 audit(1756225342.074:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 97.183356][ T7896] netlink: 'syz.3.1793': attribute type 2 has an invalid length. [ 97.579334][ T7910] Set syz1 is full, maxelem 65536 reached [ 97.693035][ T7926] netlink: 'syz.1.1808': attribute type 30 has an invalid length. [ 98.087058][ T7946] infiniband syz2: set down [ 98.091801][ T7946] infiniband syz2: added bond0 [ 98.130062][ T7946] RDS/IB: syz2: added [ 98.137048][ T7946] smc: adding ib device syz2 with port count 1 [ 98.143430][ T7946] smc: ib device syz2 port 1 has pnetid [ 98.779168][ T7971] geneve2: entered promiscuous mode [ 98.784449][ T7971] geneve2: entered allmulticast mode [ 98.810681][ T7954] Set syz1 is full, maxelem 65536 reached [ 99.010777][ T7990] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 99.043835][ T7990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.052630][ T7988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 99.059272][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.066985][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 99.074604][ T7994] vhci_hcd: connection closed [ 99.076998][ T5307] vhci_hcd: stop threads [ 99.084429][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.086034][ T5307] vhci_hcd: release socket [ 99.086054][ T5307] vhci_hcd: disconnect device [ 99.096200][ T7990] bond1: (slave batadv1): making interface the new active one [ 99.110635][ T7990] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.226150][ T8008] __nla_validate_parse: 7 callbacks suppressed [ 99.226166][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 99.461379][ T8028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 99.474347][ T8027] IPVS: stopping master sync thread 8028 ... [ 99.521202][ T8030] vhci_hcd: invalid port number 96 [ 99.526449][ T8030] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 99.531101][ T8034] SELinux: failed to load policy [ 99.917292][ T8051] loop3: detected capacity change from 0 to 8192 [ 100.068166][ T8063] program syz.1.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.078689][ T8063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.334647][ T8059] Set syz1 is full, maxelem 65536 reached [ 100.353701][ T8077] loop1: detected capacity change from 0 to 1024 [ 100.365325][ T8077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.399080][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.453945][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.657982][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 100.683699][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 100.954616][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1903'. [ 101.322418][ T8165] loop3: detected capacity change from 0 to 512 [ 101.349055][ T8165] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1915: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 101.369232][ T8165] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.1915: Bad quota inode: 3, type: 0 [ 101.380509][ T8165] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.395567][ T8165] EXT4-fs (loop3): mount failed [ 101.752190][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'. [ 101.761673][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'. [ 102.134920][ T8198] netem: incorrect ge model size [ 102.140115][ T8198] netem: change failed [ 102.175666][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 102.175683][ T29] audit: type=1400 audit(1756225347.874:2394): avc: denied { ioctl } for pid=8200 comm="syz.1.1929" path="socket:[20456]" dev="sockfs" ino=20456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.207813][ T8201] netlink: 'syz.1.1929': attribute type 12 has an invalid length. [ 102.215772][ T8201] netlink: 'syz.1.1929': attribute type 29 has an invalid length. [ 102.223664][ T8201] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1929'. [ 102.232752][ T8201] netlink: 'syz.1.1929': attribute type 2 has an invalid length. [ 102.240678][ T8201] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1929'. [ 102.287765][ T29] audit: type=1400 audit(1756225347.984:2395): avc: denied { write } for pid=8203 comm="syz.0.1930" name="file0" dev="tmpfs" ino=2261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.310400][ T29] audit: type=1400 audit(1756225347.984:2396): avc: denied { open } for pid=8203 comm="syz.0.1930" path="/434/file0" dev="tmpfs" ino=2261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.333230][ T29] audit: type=1400 audit(1756225347.984:2397): avc: denied { ioctl } for pid=8203 comm="syz.0.1930" path="/434/file0" dev="tmpfs" ino=2261 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.437627][ T29] audit: type=1326 audit(1756225348.104:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.461154][ T29] audit: type=1326 audit(1756225348.104:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.484634][ T29] audit: type=1326 audit(1756225348.104:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.508253][ T29] audit: type=1326 audit(1756225348.104:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.531698][ T29] audit: type=1326 audit(1756225348.104:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.555313][ T29] audit: type=1326 audit(1756225348.114:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ece6ebe9 code=0x7ffc0000 [ 102.720444][ T8223] loop0: detected capacity change from 0 to 128 [ 102.733986][ T8223] EXT4-fs: Ignoring removed nobh option [ 102.758225][ T8223] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.786211][ T8223] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.879109][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.720228][ T8349] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1961'. [ 103.906840][ T8362] SELinux: ebitmap: truncated map [ 103.916799][ T8362] SELinux: failed to load policy [ 103.975830][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 104.062533][ T8370] loop1: detected capacity change from 0 to 512 [ 104.169598][ T8370] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1970: corrupted in-inode xattr: invalid ea_ino [ 104.200043][ T8370] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1970: couldn't read orphan inode 15 (err -117) [ 104.214055][ T8370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.277186][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.455214][ T8368] Set syz1 is full, maxelem 65536 reached [ 104.577737][ T8393] netlink: zone id is out of range [ 104.582934][ T8393] netlink: zone id is out of range [ 104.593078][ T8393] netlink: zone id is out of range [ 104.607790][ T8393] netlink: zone id is out of range [ 104.807374][ T8404] __nla_validate_parse: 1 callbacks suppressed [ 104.807391][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 104.858695][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 105.318947][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 105.359812][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 105.468480][ T8430] loop0: detected capacity change from 0 to 128 [ 105.486192][ T8430] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.527749][ T8430] ext4 filesystem being mounted at /455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.615525][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.660007][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 105.766912][ T8447] loop0: detected capacity change from 0 to 2048 [ 105.791797][ T8447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.856148][ T8453] loop3: detected capacity change from 0 to 512 [ 105.881291][ T8453] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2002: corrupted in-inode xattr: invalid ea_ino [ 105.899457][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.912612][ T8453] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2002: couldn't read orphan inode 15 (err -117) [ 105.925304][ T8453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.992724][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.181392][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 106.229629][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 106.397649][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2011'. [ 106.406972][ T8480] unsupported nlmsg_type 40 [ 106.430563][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 106.752536][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 106.779478][ T8505] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 107.044182][ T8534] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 107.213997][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 107.214023][ T29] audit: type=1326 audit(1756225352.914:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.243866][ T29] audit: type=1326 audit(1756225352.944:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.267483][ T29] audit: type=1326 audit(1756225352.944:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.291086][ T29] audit: type=1326 audit(1756225352.944:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.314818][ T29] audit: type=1326 audit(1756225352.944:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.338347][ T29] audit: type=1326 audit(1756225352.944:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.361887][ T29] audit: type=1326 audit(1756225352.944:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.385384][ T29] audit: type=1326 audit(1756225353.064:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.408803][ T29] audit: type=1326 audit(1756225353.064:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.432263][ T29] audit: type=1326 audit(1756225353.064:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 107.514270][ T8568] loop3: detected capacity change from 0 to 1024 [ 107.550427][ T8568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.627032][ T8568] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2054: Allocating blocks 449-513 which overlap fs metadata [ 107.732853][ T8567] EXT4-fs (loop3): pa ffff88810727d1c0: logic 48, phys. 177, len 21 [ 107.740957][ T8567] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 107.807015][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.319532][ T8610] usb usb8: usbfs: process 8610 (syz.3.2070) did not claim interface 0 before use [ 108.748893][ T8625] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 108.874710][ T8637] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 108.884087][ T8642] loop0: detected capacity change from 0 to 128 [ 108.905609][ T8642] syz.0.2084: attempt to access beyond end of device [ 108.905609][ T8642] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 108.933553][ T8642] syz.0.2084: attempt to access beyond end of device [ 108.933553][ T8642] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 108.947270][ T8642] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 109.738225][ T8704] loop0: detected capacity change from 0 to 2048 [ 109.761218][ T8704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.812759][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.073343][ T8722] SELinux: failed to load policy [ 110.292138][ T8743] __nla_validate_parse: 13 callbacks suppressed [ 110.292153][ T8743] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 110.435203][ T8759] loop0: detected capacity change from 0 to 1024 [ 110.480315][ T8759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.561763][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.181220][ T8849] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2134'. [ 111.290898][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 111.448757][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 111.462559][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 112.525047][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 112.525099][ T29] audit: type=1326 audit(1756225358.224:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.643458][ T29] audit: type=1326 audit(1756225358.224:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.667015][ T29] audit: type=1326 audit(1756225358.224:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.690465][ T29] audit: type=1326 audit(1756225358.224:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedd3cad69f code=0x7ffc0000 [ 112.713875][ T29] audit: type=1326 audit(1756225358.224:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.737406][ T29] audit: type=1326 audit(1756225358.224:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.761023][ T29] audit: type=1326 audit(1756225358.224:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.784483][ T29] audit: type=1326 audit(1756225358.224:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.807921][ T29] audit: type=1326 audit(1756225358.224:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.831497][ T29] audit: type=1326 audit(1756225358.234:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 112.950556][ T9013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9013 comm=syz.1.2167 [ 113.687051][ T9074] SELinux: failed to load policy [ 113.761428][ T9079] dummy0: entered allmulticast mode [ 113.792926][ T9079] dummy0: left allmulticast mode [ 113.799090][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.3.2200 [ 114.131153][ T9106] syzkaller0: entered allmulticast mode [ 114.148467][ T9106] syzkaller0 (unregistering): left allmulticast mode [ 114.293334][ T9116] loop0: detected capacity change from 0 to 2368 [ 114.310891][ T9116] iso9660: Bad value for 'check' [ 114.837759][ T9162] 0ªî{X¹¦: left allmulticast mode [ 114.871538][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.878799][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.000600][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.045060][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.137886][ T5292] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.146866][ T5292] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.179151][ T5292] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.188117][ T5292] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.213133][ T5292] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.222194][ T5292] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.260390][ T5292] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.269394][ T5292] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.498852][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.530878][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.575123][ T9195] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 115.658148][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 115.678378][ T9212] bridge_slave_1: left allmulticast mode [ 115.684193][ T9212] bridge_slave_1: left promiscuous mode [ 115.690054][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.731307][ T9212] bridge_slave_0: left allmulticast mode [ 115.736995][ T9212] bridge_slave_0: left promiscuous mode [ 115.742838][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.789693][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2258'. [ 115.909443][ T9232] loop0: detected capacity change from 0 to 1024 [ 115.917545][ T9232] EXT4-fs: Ignoring removed nobh option [ 115.923208][ T9232] EXT4-fs: Ignoring removed bh option [ 115.959897][ T9232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.075336][ T9220] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2256: Allocating blocks 257-513 which overlap fs metadata [ 116.122087][ T9250] 0ªî{X¹¦: left allmulticast mode [ 116.150619][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.157950][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.183846][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.251734][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.261684][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.273029][ T9263] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2271'. [ 116.282282][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2271'. [ 116.303912][ T36] syz1: Port: 1 Link DOWN [ 116.315108][ T5341] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.323614][ T5341] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.354196][ T5341] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.362797][ T5341] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.372176][ T5297] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.380842][ T5297] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.396661][ T5297] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.405241][ T5297] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.432794][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2275'. [ 116.450980][ T9265] loop3: detected capacity change from 0 to 2368 [ 116.458721][ T9265] iso9660: Bad value for 'check' [ 117.065093][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2288'. [ 117.082557][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2288'. [ 117.124019][ T36] hid_parser_main: 18 callbacks suppressed [ 117.124041][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.137498][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.145033][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.152464][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.160156][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.167558][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.175067][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.182765][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.190272][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.197902][ T36] hid-generic 0000:0006:0007.0006: unknown main item tag 0x0 [ 117.220758][ T36] hid-generic 0000:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 117.338282][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 118.002301][ T9352] loop3: detected capacity change from 0 to 2048 [ 118.009917][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 118.009933][ T29] audit: type=1326 audit(1756225363.714:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 118.051938][ T9356] loop1: detected capacity change from 0 to 2368 [ 118.058641][ T29] audit: type=1326 audit(1756225363.744:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fedd3caebe9 code=0x7ffc0000 [ 118.082296][ T29] audit: type=1326 audit(1756225363.744:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fedd3caec23 code=0x7ffc0000 [ 118.105720][ T29] audit: type=1326 audit(1756225363.744:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedd3cad69f code=0x7ffc0000 [ 118.129091][ T29] audit: type=1326 audit(1756225363.754:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fedd3caec77 code=0x7ffc0000 [ 118.152686][ T29] audit: type=1326 audit(1756225363.754:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedd3cad550 code=0x7ffc0000 [ 118.176237][ T29] audit: type=1326 audit(1756225363.754:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedd3cae7eb code=0x7ffc0000 [ 118.200245][ T9356] iso9660: Bad value for 'check' [ 118.215913][ T29] audit: type=1326 audit(1756225363.904:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedd3cad84a code=0x7ffc0000 [ 118.219653][ T7519] loop3: p4 < > [ 118.239267][ T29] audit: type=1326 audit(1756225363.904:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedd3cad84a code=0x7ffc0000 [ 118.266095][ T29] audit: type=1326 audit(1756225363.904:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fedd3cad457 code=0x7ffc0000 [ 118.294923][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2314'. [ 118.310861][ T9352] loop3: p4 < > [ 118.370113][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 118.777089][ T9403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9403 comm=syz.5.2334 [ 118.983629][ T9372] syz.0.2320 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 118.998264][ T9372] CPU: 0 UID: 0 PID: 9372 Comm: syz.0.2320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.998322][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.998337][ T9372] Call Trace: [ 118.998344][ T9372] [ 118.998359][ T9372] __dump_stack+0x1d/0x30 [ 118.998383][ T9372] dump_stack_lvl+0xe8/0x140 [ 118.998405][ T9372] dump_stack+0x15/0x1b [ 118.998419][ T9372] dump_header+0x81/0x220 [ 118.998449][ T9372] oom_kill_process+0x342/0x400 [ 118.998479][ T9372] out_of_memory+0x979/0xb80 [ 118.998561][ T9372] try_charge_memcg+0x5e6/0x9e0 [ 118.998588][ T9372] obj_cgroup_charge_pages+0xa6/0x150 [ 118.998706][ T9372] __memcg_kmem_charge_page+0x9f/0x170 [ 118.998793][ T9372] __alloc_frozen_pages_noprof+0x188/0x360 [ 118.998867][ T9372] alloc_pages_mpol+0xb3/0x250 [ 118.998907][ T9372] alloc_pages_noprof+0x90/0x130 [ 118.999012][ T9372] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 118.999053][ T9372] __kvmalloc_node_noprof+0x30f/0x4e0 [ 118.999082][ T9372] ? ip_set_alloc+0x1f/0x30 [ 118.999146][ T9372] ? ip_set_alloc+0x1f/0x30 [ 118.999176][ T9372] ? __kmalloc_cache_noprof+0x189/0x320 [ 118.999203][ T9372] ip_set_alloc+0x1f/0x30 [ 118.999231][ T9372] hash_netiface_create+0x282/0x740 [ 118.999293][ T9372] ? __pfx_hash_netiface_create+0x10/0x10 [ 118.999324][ T9372] ip_set_create+0x3cc/0x960 [ 118.999371][ T9372] ? __nla_parse+0x40/0x60 [ 118.999394][ T9372] nfnetlink_rcv_msg+0x4c6/0x590 [ 118.999441][ T9372] netlink_rcv_skb+0x120/0x220 [ 118.999459][ T9372] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.999561][ T9372] nfnetlink_rcv+0x16b/0x1690 [ 118.999589][ T9372] ? __rcu_read_lock+0x37/0x50 [ 118.999608][ T9372] ? __pte_offset_map_lock+0x1d4/0x230 [ 118.999685][ T9372] ? css_rstat_updated+0xb7/0x240 [ 118.999714][ T9372] ? __rcu_read_unlock+0x4f/0x70 [ 118.999762][ T9372] ? _raw_spin_unlock+0x26/0x50 [ 118.999801][ T9372] ? page_vma_mapped_walk+0x9f1/0xdb0 [ 118.999881][ T9372] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 118.999919][ T9372] ? remove_migration_pte+0xa38/0xa70 [ 118.999957][ T9372] ? __list_add_valid_or_report+0x38/0xe0 [ 118.999991][ T9372] ? free_frozen_page_commit+0x6f/0x2a0 [ 119.000046][ T9372] ? should_fail_ex+0x30/0x280 [ 119.000064][ T9372] ? selinux_nlmsg_lookup+0x99/0x890 [ 119.000093][ T9372] ? __rcu_read_unlock+0x34/0x70 [ 119.000168][ T9372] ? __netlink_lookup+0x266/0x2a0 [ 119.000192][ T9372] netlink_unicast+0x5c0/0x690 [ 119.000264][ T9372] netlink_sendmsg+0x58b/0x6b0 [ 119.000293][ T9372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.000365][ T9372] __sock_sendmsg+0x142/0x180 [ 119.000442][ T9372] ____sys_sendmsg+0x31e/0x4e0 [ 119.000513][ T9372] ___sys_sendmsg+0x17b/0x1d0 [ 119.000548][ T9372] __x64_sys_sendmsg+0xd4/0x160 [ 119.000572][ T9372] x64_sys_call+0x191e/0x2ff0 [ 119.000592][ T9372] do_syscall_64+0xd2/0x200 [ 119.000678][ T9372] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.000700][ T9372] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.000723][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.000743][ T9372] RIP: 0033:0x7f119e12ebe9 [ 119.000837][ T9372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.000853][ T9372] RSP: 002b:00007f119cb8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.000880][ T9372] RAX: ffffffffffffffda RBX: 00007f119e355fa0 RCX: 00007f119e12ebe9 [ 119.000897][ T9372] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 119.000914][ T9372] RBP: 00007f119e1b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.000931][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.000942][ T9372] R13: 00007f119e356038 R14: 00007f119e355fa0 R15: 00007ffe6288bbb8 [ 119.000959][ T9372] [ 119.001033][ T9372] memory: usage 307200kB, limit 307200kB, failcnt 77 [ 119.373779][ T9372] memory+swap: usage 307260kB, limit 9007199254740988kB, failcnt 0 [ 119.377097][ T9408] netlink: 'syz.2.2335': attribute type 12 has an invalid length. [ 119.381726][ T9372] kmem: usage 306816kB, limit 9007199254740988kB, failcnt 0 [ 119.381745][ T9372] Memory cgroup stats for /syz0: [ 119.389008][ T9372] cache 110592 [ 119.405458][ T9372] rss 110592 [ 119.408691][ T9372] shmem 0 [ 119.411717][ T9372] mapped_file 28672 [ 119.415553][ T9372] dirty 12288 [ 119.418895][ T9372] writeback 0 [ 119.422239][ T9372] workingset_refault_anon 742 [ 119.426978][ T9372] workingset_refault_file 14 [ 119.431612][ T9372] swap 81920 [ 119.434828][ T9372] swapcached 147456 [ 119.438712][ T9372] pgpgin 102743 [ 119.442180][ T9372] pgpgout 102652 [ 119.445747][ T9372] pgfault 132750 [ 119.449099][ T9410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9410 comm=syz.1.2337 [ 119.449352][ T9372] pgmajfault 98 [ 119.461824][ T9410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9410 comm=syz.1.2337 [ 119.465229][ T9372] inactive_anon 258048 [ 119.481919][ T9372] active_anon 0 [ 119.485540][ T9372] inactive_file 106496 [ 119.489670][ T9372] active_file 8192 [ 119.493585][ T9372] unevictable 0 [ 119.497265][ T9372] hierarchical_memory_limit 314572800 [ 119.502709][ T9372] hierarchical_memsw_limit 9223372036854771712 [ 119.508987][ T9372] total_cache 110592 [ 119.512889][ T9372] total_rss 110592 [ 119.516616][ T9372] total_shmem 0 [ 119.520114][ T9372] total_mapped_file 28672 [ 119.524456][ T9372] total_dirty 12288 [ 119.528331][ T9372] total_writeback 0 [ 119.532173][ T9372] total_workingset_refault_anon 742 [ 119.537701][ T9372] total_workingset_refault_file 14 [ 119.542922][ T9372] total_swap 81920 [ 119.546649][ T9372] total_swapcached 147456 [ 119.551021][ T9372] total_pgpgin 102743 [ 119.555131][ T9372] total_pgpgout 102652 [ 119.559282][ T9372] total_pgfault 132750 [ 119.563459][ T9372] total_pgmajfault 98 [ 119.567448][ T9372] total_inactive_anon 258048 [ 119.572085][ T9372] total_active_anon 0 [ 119.576075][ T9372] total_inactive_file 106496 [ 119.580701][ T9372] total_active_file 8192 [ 119.584962][ T9372] total_unevictable 0 [ 119.588977][ T9372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2320,pid=9371,uid=0 [ 119.603661][ T9372] Memory cgroup out of memory: Killed process 9371 (syz.0.2320) total-vm:95680kB, anon-rss:1072kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 119.677013][ T9418] sch_fq: defrate 4294967295 ignored. [ 119.860568][ T9431] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 119.868537][ T9431] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.2356'. [ 119.892974][ T9372] syz.0.2320 (9372) used greatest stack depth: 8240 bytes left [ 119.956607][ T9447] ALSA: seq fatal error: cannot create timer (-22) [ 119.978385][ T9445] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 120.191714][ T9469] loop3: detected capacity change from 0 to 1024 [ 120.227833][ T9469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.297677][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.545521][ T9495] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 120.555250][ T9495] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 120.677015][ T9505] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -2561, delta: 1 [ 120.685708][ T9505] ref_ctr increment failed for inode: 0x917 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810f4f5080 [ 120.898188][ T9526] __nla_validate_parse: 1 callbacks suppressed [ 120.898207][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 121.464606][ T9547] loop1: detected capacity change from 0 to 512 [ 121.479504][ T9547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.509774][ T9547] EXT4-fs (loop1): 1 truncate cleaned up [ 121.519557][ T9547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.595066][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.645087][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'. [ 121.654388][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 121.663407][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'. [ 121.678781][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 121.687817][ T9553] netlink: 'syz.1.2400': attribute type 6 has an invalid length. [ 121.826795][ T9571] serio: Serial port ptm0 [ 121.987925][ T9588] loop0: detected capacity change from 0 to 128 [ 121.999965][ T9588] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.012664][ T9588] ext4 filesystem being mounted at /526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.018554][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'. [ 122.063337][ T9588] ipip0: entered promiscuous mode [ 122.083010][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.162144][ T9594] loop3: detected capacity change from 0 to 8192 [ 122.326753][ T9606] loop3: detected capacity change from 0 to 512 [ 122.335500][ T9606] journal_path: Non-blockdev passed as './bus' [ 122.341788][ T9606] EXT4-fs: error: could not find journal device path [ 122.396682][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 122.412552][ T9610] team1: entered promiscuous mode [ 122.417922][ T9610] team1: entered allmulticast mode [ 122.500504][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 122.536899][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 122.548808][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 122.552199][ T9621] bridge0: port 3(vlan2) entered blocking state [ 122.564150][ T9621] bridge0: port 3(vlan2) entered disabled state [ 122.572284][ T9621] vlan2: entered allmulticast mode [ 122.577455][ T9621] bridge0: entered allmulticast mode [ 122.587413][ T9621] vlan2: left allmulticast mode [ 122.592394][ T9621] bridge0: left allmulticast mode [ 122.679449][ T9635] SELinux: ebitmap: truncated map [ 122.703657][ T9635] SELinux: failed to load policy [ 122.828194][ T9648] pim6reg1: entered promiscuous mode [ 122.833636][ T9648] pim6reg1: entered allmulticast mode [ 123.016698][ T9665] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 123.066982][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 123.066999][ T29] audit: type=1400 audit(1756225368.764:2809): avc: denied { write } for pid=9667 comm="syz.0.2448" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.133164][ T29] audit: type=1400 audit(1756225368.824:2810): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.157670][ T29] audit: type=1400 audit(1756225368.824:2811): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.181973][ T29] audit: type=1400 audit(1756225368.824:2812): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.207852][ T29] audit: type=1400 audit(1756225368.824:2813): avc: denied { map_create } for pid=9666 comm="syz.2.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.227034][ T29] audit: type=1400 audit(1756225368.824:2814): avc: denied { bpf } for pid=9666 comm="syz.2.2449" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.247648][ T29] audit: type=1400 audit(1756225368.824:2815): avc: denied { map_read } for pid=9666 comm="syz.2.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.281731][ T29] audit: type=1400 audit(1756225368.874:2816): avc: denied { perfmon } for pid=9672 comm="syz.5.2445" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.302689][ T29] audit: type=1400 audit(1756225368.874:2817): avc: denied { map_write } for pid=9672 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.322124][ T29] audit: type=1400 audit(1756225368.874:2818): avc: denied { prog_load } for pid=9672 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.645315][ T9703] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 123.709501][ T9712] netlink: 'syz.0.2466': attribute type 3 has an invalid length. [ 123.822345][ T9721] loop0: detected capacity change from 0 to 1024 [ 123.852036][ T9721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.886643][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.485868][ T9755] netlink: 'syz.2.2483': attribute type 4 has an invalid length. [ 124.497082][ T9755] netlink: 'syz.2.2483': attribute type 4 has an invalid length. [ 125.639748][ T9834] vhci_hcd: invalid port number 96 [ 125.644929][ T9834] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 125.677262][ T9820] chnl_net:caif_netlink_parms(): no params data found [ 125.732861][ T9847] vlan2: entered allmulticast mode [ 125.780164][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.787363][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.795045][ T9820] bridge_slave_0: entered allmulticast mode [ 125.801660][ T9820] bridge_slave_0: entered promiscuous mode [ 125.808831][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.816430][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.823849][ T9820] bridge_slave_1: entered allmulticast mode [ 125.830705][ T9820] bridge_slave_1: entered promiscuous mode [ 125.920159][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.950871][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.989050][ T9820] team0: Port device team_slave_0 added [ 126.006020][ T9820] team0: Port device team_slave_1 added [ 126.050988][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.058041][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.084209][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.097872][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.104921][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.130912][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.223901][ T9820] hsr_slave_0: entered promiscuous mode [ 126.231658][ T9820] hsr_slave_1: entered promiscuous mode [ 126.237715][ T9820] debugfs: 'hsr0' already exists in 'hsr' [ 126.243487][ T9820] Cannot create hsr debugfs directory [ 126.403880][ T9820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.431068][ T9820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.453270][ T9820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.480066][ T9820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.590773][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.754492][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.770838][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.778015][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.801928][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.809225][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.850416][ T9820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.861005][ T9820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.021549][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.330580][ T9820] veth0_vlan: entered promiscuous mode [ 127.336305][ T9919] __nla_validate_parse: 9 callbacks suppressed [ 127.336323][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2542'. [ 127.355443][ T9820] veth1_vlan: entered promiscuous mode [ 127.379819][ T9820] veth0_macvtap: entered promiscuous mode [ 127.397512][ T9820] veth1_macvtap: entered promiscuous mode [ 127.421875][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.442463][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.462244][ T5305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.507328][ T5305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.541272][ T5305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.561736][ T5305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.640072][ T9937] netlink: 'syz.3.2547': attribute type 4 has an invalid length. [ 127.649785][ T9937] netlink: 'syz.3.2547': attribute type 4 has an invalid length. [ 127.689555][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 127.698722][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 127.715467][ T9941] bridge0: port 1(vlan0) entered blocking state [ 127.721919][ T9941] bridge0: port 1(vlan0) entered disabled state [ 127.729037][ T9941] vlan0: entered allmulticast mode [ 127.734193][ T9941] bridge0: entered allmulticast mode [ 127.740884][ T9941] vlan0: left allmulticast mode [ 127.745917][ T9941] bridge0: left allmulticast mode [ 128.284300][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 128.284319][ T29] audit: type=1400 audit(1756225373.984:2931): avc: denied { tracepoint } for pid=9961 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.361375][ T9965] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 128.369220][ T9965] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2558'. [ 128.665376][ T29] audit: type=1400 audit(1756225374.094:2932): avc: denied { block_suspend } for pid=9963 comm="syz.5.2559" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.827003][ T9973] ipip0: entered promiscuous mode [ 128.911502][ T5292] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.923418][ T29] audit: type=1400 audit(1756225374.624:2933): avc: denied { write } for pid=9982 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.927677][ T9980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 128.943775][ T29] audit: type=1400 audit(1756225374.624:2934): avc: denied { nlmsg_write } for pid=9982 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.950232][ T9980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.950385][ T9980] vhci_hcd vhci_hcd.0: Device attached [ 129.062040][ T29] audit: type=1400 audit(1756225374.764:2935): avc: denied { create } for pid=9992 comm="syz.0.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.099235][ T29] audit: type=1400 audit(1756225374.804:2936): avc: denied { execute_no_trans } for pid=9994 comm="syz.5.2566" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.164759][ T29] audit: type=1400 audit(1756225374.864:2937): avc: denied { audit_write } for pid=9996 comm="syz.0.2567" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.201373][ T29] audit: type=1107 audit(1756225374.884:2938): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 129.247614][ T3385] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 129.680538][ T9981] vhci_hcd: connection reset by peer [ 129.686884][ T12] vhci_hcd: stop threads [ 129.691251][ T12] vhci_hcd: release socket [ 129.695680][ T12] vhci_hcd: disconnect device [ 129.817692][ T29] audit: type=1400 audit(1756225375.504:2939): avc: denied { watch watch_reads } for pid=10033 comm="syz.5.2583" path="/465" dev="tmpfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 130.030594][ T29] audit: type=1400 audit(1756225375.734:2940): avc: denied { read write } for pid=10044 comm="syz.0.2588" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.059656][ T10] hid_parser_main: 43 callbacks suppressed [ 130.059674][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 130.073265][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 130.096162][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 130.111073][ T10] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 130.150495][T10050] fido_id[10050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.264859][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 130.417798][T10066] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2596'. [ 130.426878][T10066] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2596'. [ 130.455726][T10068] loop6: detected capacity change from 0 to 1024 [ 130.465915][T10068] EXT4-fs: Ignoring removed nobh option [ 130.478980][T10068] EXT4-fs: Ignoring removed bh option [ 130.516047][T10068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.537671][T10068] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.679348][T10074] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 273: padding at end of block bitmap is not set [ 133.293000][ T29] kauditd_printk_skb: 7154 callbacks suppressed [ 133.293016][ T29] audit: type=1326 audit(1756225378.994:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.322855][ T29] audit: type=1326 audit(1756225378.994:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.346457][ T29] audit: type=1326 audit(1756225378.994:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.370127][ T29] audit: type=1326 audit(1756225378.994:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.394136][ T29] audit: type=1326 audit(1756225378.994:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.417717][ T29] audit: type=1326 audit(1756225378.994:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.441293][ T29] audit: type=1326 audit(1756225378.994:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.464793][ T29] audit: type=1326 audit(1756225378.994:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.488354][ T29] audit: type=1326 audit(1756225378.994:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 133.511930][ T29] audit: type=1326 audit(1756225378.994:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a9113ade9 code=0x7ffc0000 [ 134.276037][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.292165][T10091] loop3: detected capacity change from 0 to 512 [ 134.323317][T10091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.356923][T10091] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2605: invalid indirect mapped block 4294967295 (level 0) [ 134.392210][ T3385] vhci_hcd: vhci_device speed not set [ 134.448651][T10091] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2605: invalid indirect mapped block 4294967295 (level 1) [ 134.466903][T10106] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.495318][T10091] EXT4-fs (loop3): 1 orphan inode deleted [ 134.501176][T10091] EXT4-fs (loop3): 1 truncate cleaned up [ 134.507372][T10091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.535381][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.538724][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 134.557012][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 134.702153][T10127] hub 9-0:1.0: USB hub found [ 134.711367][T10127] hub 9-0:1.0: 8 ports detected [ 134.781293][T10131] dummy0: entered promiscuous mode [ 134.786490][T10131] macsec1: entered allmulticast mode [ 134.811143][T10131] dummy0: entered allmulticast mode [ 134.829956][T10131] dummy0: left allmulticast mode [ 134.835089][T10131] dummy0: left promiscuous mode [ 134.970135][T10142] bond2: entered promiscuous mode [ 134.975259][T10142] bond2: entered allmulticast mode [ 134.980694][T10142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.991995][T10142] bond2 (unregistering): Released all slaves [ 135.056621][T10144] bridge0: port 3(gretap0) entered blocking state [ 135.063178][T10144] bridge0: port 3(gretap0) entered disabled state [ 135.076559][T10152] 9pnet: p9_errstr2errno: server reported unknown error [ 135.084155][T10144] gretap0: entered allmulticast mode [ 135.092173][T10144] gretap0: entered promiscuous mode [ 135.100323][T10144] bridge0: port 3(gretap0) entered blocking state [ 135.106822][T10144] bridge0: port 3(gretap0) entered forwarding state [ 135.127250][T10150] vlan2: entered allmulticast mode [ 135.132531][T10150] macvtap0: entered allmulticast mode [ 135.234568][T10168] pim6reg: entered allmulticast mode [ 135.243407][T10168] pim6reg: left allmulticast mode [ 135.316716][T10180] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.331341][T10180] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 135.344664][T10180] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.366144][T10180] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 135.419226][T10192] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.459521][T10192] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.510072][T10192] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.531097][T10199] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 135.599064][T10192] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.668794][T10203] loop3: detected capacity change from 0 to 8192 [ 135.699444][ T5292] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.719903][ T5292] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.728500][ T5292] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.736725][ T5292] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.793581][T10209] loop0: detected capacity change from 0 to 512 [ 135.821155][T10209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.833946][T10209] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.867689][T10217] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.874907][T10217] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 135.883250][T10217] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.890394][T10217] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 135.928366][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.966266][T10224] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 135.972833][T10224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.980645][T10224] vhci_hcd vhci_hcd.0: Device attached [ 135.986649][T10223] loop3: detected capacity change from 0 to 128 [ 135.988439][T10225] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 135.999294][T10223] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 136.010317][ T5297] vhci_hcd: stop threads [ 136.010676][T10098] udevd[10098]: incorrect ext4 checksum on /dev/loop3 [ 136.014608][ T5297] vhci_hcd: release socket [ 136.025915][ T5297] vhci_hcd: disconnect device [ 136.090960][T10233] netlink: 'syz.3.2664': attribute type 10 has an invalid length. [ 136.246903][ T5297] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 136.263485][T10249] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 136.270054][T10249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.277877][T10249] vhci_hcd vhci_hcd.0: Device attached [ 136.296264][T10248] bond1: entered promiscuous mode [ 136.301573][T10248] bond1: entered allmulticast mode [ 136.310139][T10248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.319597][T10248] bond1 (unregistering): Released all slaves [ 136.456065][T10256] loop0: detected capacity change from 0 to 8192 [ 136.527622][ T3410] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 137.019015][T10250] vhci_hcd: connection reset by peer [ 137.028204][ T5341] vhci_hcd: stop threads [ 137.032600][ T5341] vhci_hcd: release socket [ 137.037092][ T5341] vhci_hcd: disconnect device [ 137.071555][T10273] smc: net device bond0 applied user defined pnetid SYZ0 [ 137.085721][T10273] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 137.114563][T10273] smc: net device bond0 erased user defined pnetid SYZ0 [ 137.129011][T10273] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 137.182768][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'. [ 137.191909][T10281] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2691'. [ 137.221655][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'. [ 137.243077][T10281] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2691'. [ 137.252408][T10281] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2691'. [ 137.282400][T10285] hub 9-0:1.0: USB hub found [ 137.293317][T10285] hub 9-0:1.0: 8 ports detected [ 137.442603][T10295] netlink: 'syz.3.2689': attribute type 3 has an invalid length. [ 137.450522][T10295] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 137.458271][T10295] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2689'. [ 137.486039][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 137.515327][T10298] vxlan1: entered promiscuous mode [ 137.551990][T10300] netlink: 'syz.3.2692': attribute type 7 has an invalid length. [ 137.645805][T10305] loop3: detected capacity change from 0 to 2048 [ 137.668353][T10309] netlink: 'syz.6.2696': attribute type 6 has an invalid length. [ 137.995575][T10317] wg2: entered promiscuous mode [ 138.000538][T10317] wg2: entered allmulticast mode [ 138.009946][T10305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.293757][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.325657][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 138.325672][ T29] audit: type=1326 audit(1756225384.014:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.355640][ T29] audit: type=1326 audit(1756225384.024:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.379261][ T29] audit: type=1326 audit(1756225384.024:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.402902][ T29] audit: type=1326 audit(1756225384.024:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.419756][T10344] loop3: detected capacity change from 0 to 512 [ 138.426657][ T29] audit: type=1326 audit(1756225384.024:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.451628][T10344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.457737][ T29] audit: type=1326 audit(1756225384.024:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.489899][ T29] audit: type=1326 audit(1756225384.024:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9246f0ade9 code=0x7ffc0000 [ 138.501826][T10344] EXT4-fs (loop3): 1 truncate cleaned up [ 138.513594][ T29] audit: type=1326 audit(1756225384.024:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.521498][T10344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.543470][ T29] audit: type=1326 audit(1756225384.024:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 138.599829][ T29] audit: type=1400 audit(1756225384.294:10799): avc: denied { mount } for pid=10345 comm="syz.5.2712" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 138.663893][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.954525][T10384] netlink: 'syz.3.2729': attribute type 3 has an invalid length. [ 138.963003][T10384] netlink: 'syz.3.2729': attribute type 3 has an invalid length. [ 139.156832][T10402] loop6: detected capacity change from 0 to 128 [ 139.166872][T10402] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 139.181781][T10098] udevd[10098]: incorrect ext4 checksum on /dev/loop6 [ 139.321374][ T5297] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 139.336515][T10427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 139.343126][T10427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.350802][T10427] vhci_hcd vhci_hcd.0: Device attached [ 139.597635][ T10] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 139.615374][T10446] __nla_validate_parse: 7 callbacks suppressed [ 139.615389][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 139.630701][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2755'. [ 139.639983][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 139.649152][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2755'. [ 139.658395][T10446] netlink: 'syz.0.2755': attribute type 6 has an invalid length. [ 139.689998][T10448] bridge: RTM_NEWNEIGH with invalid ether address [ 140.086315][T10428] vhci_hcd: connection reset by peer [ 140.091810][ T5292] vhci_hcd: stop threads [ 140.096136][ T5292] vhci_hcd: release socket [ 140.100808][ T5292] vhci_hcd: disconnect device [ 140.375582][T10475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10475 comm=syz.3.2768 [ 140.499601][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 140.519854][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 140.541040][T10489] loop3: detected capacity change from 0 to 512 [ 140.553104][T10489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.566006][T10489] EXT4-fs (loop3): 1 truncate cleaned up [ 140.587025][T10489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.606409][T10497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 140.651602][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.665312][T10503] loop0: detected capacity change from 0 to 1024 [ 140.678900][T10503] EXT4-fs: Ignoring removed nobh option [ 140.708943][T10503] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.761174][T10503] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.2781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 140.784014][T10503] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2781: couldn't read orphan inode 11 (err -117) [ 140.797368][T10503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.815645][T10513] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2786'. [ 140.862976][T10503] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 140.864835][T10526] loop6: detected capacity change from 0 to 512 [ 140.897906][T10526] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.923270][T10526] EXT4-fs (loop6): 1 truncate cleaned up [ 140.932167][T10526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.963143][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.006983][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.038184][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 141.045967][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 141.069668][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 141.107906][ T23] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 141.155746][T10555] fido_id[10555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.203561][T10561] ip6_vti0: mtu greater than device maximum [ 141.372186][T10573] vhci_hcd: invalid port number 96 [ 141.377364][T10573] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 141.400200][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2817'. [ 141.434251][T10583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.459052][T10588] netlink: 'syz.5.2819': attribute type 30 has an invalid length. [ 141.473254][T10591] vlan2: entered allmulticast mode [ 141.478471][T10591] bond1: entered allmulticast mode [ 141.657915][ T3410] vhci_hcd: vhci_device speed not set [ 141.771798][T10622] loop6: detected capacity change from 0 to 1024 [ 141.780940][T10622] EXT4-fs: Ignoring removed nobh option [ 141.792788][T10622] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.818473][T10622] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 141.838342][T10622] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2832: couldn't read orphan inode 11 (err -117) [ 141.853115][T10622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.875433][T10622] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 141.902397][T10631] netlink: 'syz.2.2835': attribute type 30 has an invalid length. [ 141.991694][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.075218][T10643] bond2: entered promiscuous mode [ 142.080355][T10643] bond2: entered allmulticast mode [ 142.085989][T10643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.115410][T10643] bond2 (unregistering): Released all slaves [ 142.369624][T10672] sit0: entered allmulticast mode [ 142.390379][T10672] sit0: entered promiscuous mode [ 142.951763][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2862'. [ 143.153793][T10714] loop6: detected capacity change from 0 to 128 [ 143.181563][T10714] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.209284][T10714] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.330051][ T9820] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.449655][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 143.449674][ T29] audit: type=1400 audit(1756225389.154:11049): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=3297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.498223][ T29] audit: type=1400 audit(1756225389.194:11050): avc: denied { watch_reads } for pid=10734 comm="syz.6.2877" path="/57/file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.602033][ T29] audit: type=1400 audit(1756225389.294:11051): avc: denied { read } for pid=10744 comm="syz.3.2883" path="socket:[29425]" dev="sockfs" ino=29425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.888295][ T29] audit: type=1400 audit(1756225389.584:11052): avc: denied { mount } for pid=10770 comm="syz.5.2892" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 143.947070][T10780] sch_fq: defrate 4294967295 ignored. [ 143.964001][ T29] audit: type=1400 audit(1756225389.664:11053): avc: denied { lock } for pid=10781 comm="syz.6.2896" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.088648][T10795] netlink: 'syz.5.2902': attribute type 1 has an invalid length. [ 144.103915][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.125668][T10795] bond0: (slave veth11): Enslaving as an active interface with a down link [ 144.143340][T10795] bond0: (slave dummy0): making interface the new active one [ 144.153499][T10795] dummy0: entered promiscuous mode [ 144.158879][T10795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.221818][ T29] audit: type=1326 audit(1756225389.924:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 144.245642][ T29] audit: type=1326 audit(1756225389.924:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 144.294082][ T29] audit: type=1326 audit(1756225389.974:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 144.317817][ T29] audit: type=1326 audit(1756225389.974:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 144.341701][ T29] audit: type=1326 audit(1756225389.974:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 144.607051][T10833] tipc: Started in network mode [ 144.612147][T10833] tipc: Node identity ac14140f, cluster identity 4711 [ 144.620473][T10833] tipc: New replicast peer: 255.255.255.255 [ 144.626696][T10833] tipc: Enabled bearer , priority 10 [ 144.655040][T10833] __nla_validate_parse: 3 callbacks suppressed [ 144.655059][T10833] netlink: 340 bytes leftover after parsing attributes in process `syz.5.2919'. [ 144.692574][T10837] loop0: detected capacity change from 0 to 128 [ 144.697611][ T10] vhci_hcd: vhci_device speed not set [ 144.841303][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.841303][ T5292] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 144.854987][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.854987][ T5292] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 144.872271][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.872271][ T5292] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 144.887306][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.887306][ T5292] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 144.916605][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.916605][ T5292] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 144.930467][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.930467][ T5292] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 144.945884][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.945884][ T5292] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 144.983299][ T5292] kworker/u8:20: attempt to access beyond end of device [ 144.983299][ T5292] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 145.014329][ T5292] kworker/u8:20: attempt to access beyond end of device [ 145.014329][ T5292] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 145.034414][ T5292] kworker/u8:20: attempt to access beyond end of device [ 145.034414][ T5292] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 145.096953][T10874] $Hÿ: renamed from bond0 [ 145.106561][T10874] $Hÿ: entered promiscuous mode [ 145.112232][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 145.123300][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 145.147087][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 145.156705][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 145.175756][T10883] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 145.184080][T10883] syz_tun: entered promiscuous mode [ 145.192883][T10883] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 145.418150][T10905] $Hÿ: renamed from bond0 (while UP) [ 145.435150][T10905] $Hÿ: entered promiscuous mode [ 145.440355][T10905] bond_slave_0: entered promiscuous mode [ 145.446123][T10905] bond_slave_1: entered promiscuous mode [ 145.640334][ T3410] tipc: Node number set to 2886997007 [ 145.840409][T10939] loop3: detected capacity change from 0 to 2048 [ 145.866639][T10939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.910419][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.278061][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 146.426432][T10991] netlink: 'syz.5.2992': attribute type 10 has an invalid length. [ 146.440084][T10991] syz_tun: entered promiscuous mode [ 146.880657][T11036] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3013'. [ 146.964130][T11044] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.000943][T11047] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3018'. [ 147.031048][T11044] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.080623][T11051] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 147.081497][T11044] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.172903][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3023'. [ 147.210656][T11044] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.267953][ T5292] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.293515][ T5292] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.327641][ T5297] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.336032][ T5297] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.519245][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3032'. [ 147.633662][T11092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11092 comm=syz.0.3037 [ 147.830155][T11116] netlink: 'syz.0.3043': attribute type 39 has an invalid length. [ 147.867103][T11122] netlink: 'syz.3.3044': attribute type 13 has an invalid length. [ 148.027942][T11135] gretap0: left allmulticast mode [ 148.033131][T11135] gretap0: left promiscuous mode [ 148.038345][T11135] bridge0: port 3(gretap0) entered disabled state [ 148.064468][T11135] bridge_slave_1: left allmulticast mode [ 148.070343][T11135] bridge_slave_1: left promiscuous mode [ 148.076209][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.085132][T11147] netlink: 'syz.5.3055': attribute type 1 has an invalid length. [ 148.085277][T11144] loop3: detected capacity change from 0 to 128 [ 148.112356][T11135] bridge_slave_0: left allmulticast mode [ 148.118301][T11135] bridge_slave_0: left promiscuous mode [ 148.124089][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.136927][T11144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.153828][T11144] ext4 filesystem being mounted at /635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.276972][T11161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11161 comm=syz.0.3061 [ 148.289678][T11161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11161 comm=syz.0.3061 [ 148.361308][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.422571][T11179] loop0: detected capacity change from 0 to 512 [ 148.440849][T11179] EXT4-fs (loop0): too many log groups per flexible block group [ 148.448626][T11179] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 148.460977][T11188] netlink: 'syz.5.3073': attribute type 3 has an invalid length. [ 148.484998][T11179] EXT4-fs (loop0): mount failed [ 148.504416][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 148.504434][ T29] audit: type=1326 audit(1756225394.204:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119e12d550 code=0x7ffc0000 [ 148.539346][ T29] audit: type=1326 audit(1756225394.204:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119e12e7eb code=0x7ffc0000 [ 148.563144][ T29] audit: type=1326 audit(1756225394.204:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f119e12d84a code=0x7ffc0000 [ 148.586708][ T29] audit: type=1326 audit(1756225394.204:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119e12ebe9 code=0x7ffc0000 [ 148.610559][ T29] audit: type=1326 audit(1756225394.214:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119e12ebe9 code=0x7ffc0000 [ 148.634410][ T29] audit: type=1326 audit(1756225394.214:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f119e12ebe9 code=0x7ffc0000 [ 148.657938][ T29] audit: type=1326 audit(1756225394.214:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119e12ebe9 code=0x7ffc0000 [ 148.681758][ T29] audit: type=1326 audit(1756225394.214:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119e12ebe9 code=0x7ffc0000 [ 148.853240][ T29] audit: type=1326 audit(1756225394.554:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.3.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d769bebe9 code=0x7ffc0000 [ 148.876903][ T29] audit: type=1326 audit(1756225394.554:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.3.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d769bebe9 code=0x7ffc0000 [ 148.911522][T11214] bridge: RTM_NEWNEIGH with invalid ether address [ 149.026466][T11230] loop3: detected capacity change from 0 to 512 [ 149.052434][T11230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.081294][T11230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.093981][T11230] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.111483][T11230] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 149.126856][T11230] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 11 with error 28 [ 149.139391][T11230] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.139391][T11230] [ 149.149238][T11230] EXT4-fs (loop3): Total free blocks count 0 [ 149.155416][T11230] EXT4-fs (loop3): Free/Dirty block details [ 149.161366][T11230] EXT4-fs (loop3): free_blocks=39626 [ 149.166721][T11230] EXT4-fs (loop3): dirty_blocks=11 [ 149.171908][T11230] EXT4-fs (loop3): Block reservation details [ 149.177949][T11230] EXT4-fs (loop3): i_reserved_data_blocks=11 [ 149.218446][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.438923][T11279] random: crng reseeded on system resumption [ 149.451568][T11281] veth0_to_team: entered promiscuous mode [ 149.737619][ T36] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 149.860096][T11317] netlink: 'syz.2.3122': attribute type 13 has an invalid length. [ 149.960058][T11326] __nla_validate_parse: 5 callbacks suppressed [ 149.960074][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3124'. [ 150.338030][T11339] loop0: detected capacity change from 0 to 2048 [ 150.439363][T11339] EXT4-fs (loop0): failed to initialize system zone (-117) [ 150.458556][T11339] EXT4-fs (loop0): mount failed [ 150.540573][T11346] loop0: detected capacity change from 0 to 1024 [ 150.547341][T11346] ext4: Unknown parameter 'nouser_xattr' [ 150.601985][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'. [ 150.693024][T11360] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3138'. [ 150.730459][T11360] hsr_slave_0: left promiscuous mode [ 150.752866][T11360] hsr_slave_1: left promiscuous mode [ 150.851938][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3143'. [ 150.934755][T11374] infiniband syz!: set down [ 150.939415][T11374] infiniband syz!: added team_slave_0 [ 150.960420][T11374] RDS/IB: syz!: added [ 150.980213][T11374] smc: adding ib device syz! with port count 1 [ 151.002529][T11374] smc: ib device syz! port 1 has pnetid [ 151.049592][T11311] syz.3.3119 (11311) used greatest stack depth: 7336 bytes left [ 151.596520][T11411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3158'. [ 151.766304][T11430] loop3: detected capacity change from 0 to 512 [ 151.825366][T11430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.840289][T11430] ext4 filesystem being mounted at /653/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.852803][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3167: corrupted inode contents [ 151.866365][T11430] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3167: mark_inode_dirty error [ 151.879202][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3167: corrupted inode contents [ 151.917535][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.996562][T11447] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3174'. [ 152.091003][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'. [ 152.489793][T11479] loop0: detected capacity change from 0 to 164 [ 152.513463][T11479] bio_check_eod: 101 callbacks suppressed [ 152.513482][T11479] syz.0.3189: attempt to access beyond end of device [ 152.513482][T11479] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.540634][T11479] syz.0.3189: attempt to access beyond end of device [ 152.540634][T11479] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.625960][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3191'. [ 152.650800][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3192'. [ 152.905422][T11511] loop6: detected capacity change from 0 to 2048 [ 152.954501][T11511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.006756][T11519] loop3: detected capacity change from 0 to 512 [ 153.018082][T11519] EXT4-fs: Ignoring removed orlov option [ 153.030876][T11511] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.073680][T11519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.105294][T11519] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.122122][T11511] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 153.134567][T11511] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.134567][T11511] [ 153.144334][T11511] EXT4-fs (loop6): Total free blocks count 0 [ 153.150399][T11511] EXT4-fs (loop6): Free/Dirty block details [ 153.156356][T11511] EXT4-fs (loop6): free_blocks=2415919104 [ 153.162192][T11511] EXT4-fs (loop6): dirty_blocks=48 [ 153.167332][T11511] EXT4-fs (loop6): Block reservation details [ 153.173496][T11511] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 153.213525][T11519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3205: bg 0: block 248: padding at end of block bitmap is not set [ 153.270080][T11519] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3205: Failed to acquire dquot type 1 [ 153.337794][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.349674][T11519] EXT4-fs (loop3): 1 truncate cleaned up [ 153.382520][T11519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.412543][T11527] loop6: detected capacity change from 0 to 256 [ 153.437906][T11527] vfat: Bad value for 'fmask' [ 153.488020][T11519] EXT4-fs: Ignoring removed orlov option [ 153.516604][T11519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.546105][T11519] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 153.606414][T11519] EXT4-fs error (device loop3): __ext4_remount:6740: comm syz.3.3205: Abort forced by user [ 153.637159][T11519] EXT4-fs (loop3): Remounting filesystem read-only [ 153.643740][T11519] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 153.677644][T11519] ext4 filesystem being remounted at /656/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.730142][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.872919][T11534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.197830][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 154.197844][ T29] audit: type=1400 audit(1756225399.904:11380): avc: denied { wake_alarm } for pid=11552 comm="syz.2.3215" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.293897][ T29] audit: type=1400 audit(1756225399.994:11381): avc: denied { mounton } for pid=11559 comm="syz.2.3218" path="/proc/1410/net/pfkey" dev="proc" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.318489][ T29] audit: type=1326 audit(1756225399.994:11382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.342417][ T29] audit: type=1326 audit(1756225399.994:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.369268][ T29] audit: type=1326 audit(1756225400.064:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.393336][ T29] audit: type=1326 audit(1756225400.064:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.417131][ T29] audit: type=1326 audit(1756225400.064:11386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.440870][ T29] audit: type=1326 audit(1756225400.064:11387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.465164][ T29] audit: type=1326 audit(1756225400.064:11388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.488908][ T29] audit: type=1326 audit(1756225400.064:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 154.629353][T11569] program syz.6.3222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.641433][T11569] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.704367][T11498] syz.0.3198 (11498) used greatest stack depth: 7160 bytes left [ 154.736244][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3226'. [ 154.890590][T11598] ref_ctr_offset mismatch. inode: 0xd8b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 155.498638][ T5297] dummy0: left promiscuous mode [ 155.635467][T11636] ref_ctr_offset mismatch. inode: 0x248 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 155.793861][T11643] loop6: detected capacity change from 0 to 1024 [ 155.815042][T11643] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.842169][T11643] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 155.857881][T11643] EXT4-fs (loop6): orphan cleanup on readonly fs [ 155.865740][T11643] EXT4-fs error (device loop6): ext4_quota_enable:7128: inode #3: comm syz.6.3254: iget: bad i_size value: 1407374883559424 [ 155.887826][T11643] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.3254: Bad quota inode: 3, type: 0 [ 155.899847][T11643] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 155.914513][T11643] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 155.921581][T11643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.981981][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.174914][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.182394][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.192440][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.199903][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.207346][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.214943][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.222461][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.229971][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.237440][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.244910][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 156.258758][ T3410] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 156.295725][T11665] fido_id[11665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.014048][T11714] __nla_validate_parse: 1 callbacks suppressed [ 157.014069][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3282'. [ 157.480385][ T5297] bond1 (unregistering): (slave gretap1): Releasing active interface [ 157.685880][ T5297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.741258][ T5297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.757655][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 157.766591][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 157.785999][ T5297] bond0 (unregistering): Released all slaves [ 157.795151][ T5297] bond1 (unregistering): Released all slaves [ 157.920277][ T5297] tipc: Left network mode [ 158.007209][T11767] tipc: Started in network mode [ 158.012284][T11767] tipc: Node identity b642b11095b7, cluster identity 4711 [ 158.019479][T11767] tipc: Enabled bearer , priority 0 [ 158.067359][T11767] tipc: Disabling bearer [ 158.118455][ T5297] hsr_slave_0: left promiscuous mode [ 158.143677][ T5297] hsr_slave_1: left promiscuous mode [ 158.157289][T11783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3308'. [ 158.176941][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.192558][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.326865][ T5297] team0 (unregistering): Port device team_slave_1 removed [ 158.339221][T11793] SELinux: failed to load policy [ 158.345005][ T5297] team0 (unregistering): Port device team_slave_0 removed [ 158.580622][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3322'. [ 158.602693][T11827] loop0: detected capacity change from 0 to 1024 [ 158.727220][T11827] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.773540][T11827] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 158.802822][T11827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.826352][T11827] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #3: comm syz.0.3321: iget: bad i_size value: 1407374883559424 [ 158.842279][T11827] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.3321: Bad quota inode: 3, type: 0 [ 158.853677][T11827] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 158.868553][T11827] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 158.876070][T11827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.441357][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.501511][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 159.501570][ T29] audit: type=1400 audit(1756225405.204:11487): avc: denied { listen } for pid=11889 comm="syz.6.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.565963][ T29] audit: type=1400 audit(1756225405.214:11488): avc: denied { create } for pid=11892 comm="syz.0.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.586343][ T29] audit: type=1400 audit(1756225405.234:11489): avc: denied { write } for pid=11892 comm="syz.0.3336" path="socket:[33445]" dev="sockfs" ino=33445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.647594][ T29] audit: type=1400 audit(1756225405.344:11490): avc: denied { write } for pid=11899 comm="syz.6.3338" path="socket:[32314]" dev="sockfs" ino=32314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.740266][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3342'. [ 159.787410][T11915] loop6: detected capacity change from 0 to 512 [ 159.794839][T11915] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 159.807125][T11915] EXT4-fs (loop6): 1 truncate cleaned up [ 159.813357][T11915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.835942][ T29] audit: type=1400 audit(1756225405.534:11491): avc: denied { setattr } for pid=11914 comm="syz.6.3343" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.884196][ T29] audit: type=1400 audit(1756225405.584:11492): avc: denied { remove_name } for pid=11914 comm="syz.6.3343" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.907177][ T29] audit: type=1400 audit(1756225405.584:11493): avc: denied { unlink } for pid=11914 comm="syz.6.3343" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.020941][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.033395][T11925] loop3: detected capacity change from 0 to 1024 [ 160.042490][ T29] audit: type=1326 audit(1756225405.744:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 160.050406][T11925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.066236][ T29] audit: type=1326 audit(1756225405.744:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 160.097630][ T29] audit: type=1326 audit(1756225405.744:11496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9246f6ebe9 code=0x7ffc0000 [ 160.142729][T11925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.193194][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.205013][T11939] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 160.284017][T11945] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 160.332394][T11957] loop3: detected capacity change from 0 to 512 [ 160.349808][T11957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.381109][T11957] EXT4-fs (loop3): 1 truncate cleaned up [ 160.387409][T11957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.486247][T11961] pim6reg: entered allmulticast mode [ 160.507670][T11961] pim6reg: left allmulticast mode [ 160.619863][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.710420][T11973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11973 comm=syz.3.3366 [ 160.877815][T11994] ipip0: left promiscuous mode [ 160.897750][ T5290] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.929016][ T5290] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.939314][ T5290] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.950287][T12000] loop3: detected capacity change from 0 to 128 [ 160.956530][T12004] bridge0: port 1(macsec1) entered blocking state [ 160.963569][T12004] bridge0: port 1(macsec1) entered disabled state [ 160.970730][T12004] macsec1: entered allmulticast mode [ 160.976172][T12004] bridge0: entered allmulticast mode [ 160.982468][T12004] macsec1: left allmulticast mode [ 160.987627][T12004] bridge0: left allmulticast mode [ 161.004341][T12000] syz.3.3378: attempt to access beyond end of device [ 161.004341][T12000] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 161.018846][ T5292] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.131556][T12016] tipc: New replicast peer: 255.255.255.83 [ 161.137767][T12016] tipc: Enabled bearer , priority 10 [ 161.323648][T12040] loop6: detected capacity change from 0 to 512 [ 161.338040][T12040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.441584][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.464458][T12047] loop6: detected capacity change from 0 to 1024 [ 161.471723][T12047] EXT4-fs: Ignoring removed oldalloc option [ 161.478650][T12047] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 161.499974][T12047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.528894][ T9820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.550064][T12052] SELinux: Context Ü is not valid (left unmapped). [ 161.596165][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3400'. [ 161.779057][T12058] ================================================================== [ 161.787196][T12058] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 161.795043][T12058] [ 161.797374][T12058] write to 0xffffea0004b1ac58 of 8 bytes by task 12063 on cpu 1: [ 161.805106][T12058] __filemap_remove_folio+0x1a5/0x2a0 [ 161.810503][T12058] filemap_remove_folio+0x6d/0x1d0 [ 161.815639][T12058] truncate_inode_folio+0x42/0x50 [ 161.820677][T12058] shmem_undo_range+0x244/0xa80 [ 161.825537][T12058] shmem_fallocate+0x799/0x840 [ 161.830312][T12058] vfs_fallocate+0x3b6/0x400 [ 161.835127][T12058] __x64_sys_fallocate+0x7a/0xd0 [ 161.840180][T12058] x64_sys_call+0x2514/0x2ff0 [ 161.844868][T12058] do_syscall_64+0xd2/0x200 [ 161.849474][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.855374][T12058] [ 161.857694][T12058] read to 0xffffea0004b1ac58 of 8 bytes by task 12058 on cpu 0: [ 161.865313][T12058] folio_mapping+0xa1/0x120 [ 161.869912][T12058] evict_folios+0xdd9/0x3520 [ 161.874506][T12058] try_to_shrink_lruvec+0x5b5/0x950 [ 161.879730][T12058] shrink_lruvec+0x22e/0x1b50 [ 161.884423][T12058] shrink_node+0x686/0x2120 [ 161.888946][T12058] do_try_to_free_pages+0x3f6/0xcd0 [ 161.894173][T12058] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 161.900069][T12058] try_charge_memcg+0x358/0x9e0 [ 161.904919][T12058] obj_cgroup_charge_pages+0xa6/0x150 [ 161.910312][T12058] __memcg_kmem_charge_page+0x9f/0x170 [ 161.915784][T12058] __alloc_frozen_pages_noprof+0x188/0x360 [ 161.921718][T12058] alloc_pages_mpol+0xb3/0x250 [ 161.926582][T12058] alloc_pages_noprof+0x90/0x130 [ 161.931551][T12058] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 161.937377][T12058] __kvmalloc_node_noprof+0x30f/0x4e0 [ 161.942779][T12058] ip_set_alloc+0x1f/0x30 [ 161.947391][T12058] hash_netiface_create+0x282/0x740 [ 161.952619][T12058] ip_set_create+0x3cc/0x960 [ 161.957209][T12058] nfnetlink_rcv_msg+0x4c6/0x590 [ 161.962169][T12058] netlink_rcv_skb+0x120/0x220 [ 161.967095][T12058] nfnetlink_rcv+0x16b/0x1690 [ 161.971812][T12058] netlink_unicast+0x5c0/0x690 [ 161.976593][T12058] netlink_sendmsg+0x58b/0x6b0 [ 161.981359][T12058] __sock_sendmsg+0x142/0x180 [ 161.986042][T12058] ____sys_sendmsg+0x31e/0x4e0 [ 161.990812][T12058] ___sys_sendmsg+0x17b/0x1d0 [ 161.995594][T12058] __x64_sys_sendmsg+0xd4/0x160 [ 162.000445][T12058] x64_sys_call+0x191e/0x2ff0 [ 162.005130][T12058] do_syscall_64+0xd2/0x200 [ 162.009645][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.015543][T12058] [ 162.017859][T12058] value changed: 0xffff888104926aa0 -> 0x0000000000000000 [ 162.024968][T12058] [ 162.027284][T12058] Reported by Kernel Concurrency Sanitizer on: [ 162.033462][T12058] CPU: 0 UID: 0 PID: 12058 Comm: syz.6.3401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.043267][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.053337][T12058] ================================================================== [ 162.208122][ T3410] tipc: Node number set to 603304208 [ 162.486056][T12058] syz.6.3401 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 162.500304][T12058] CPU: 0 UID: 0 PID: 12058 Comm: syz.6.3401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.500395][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.500408][T12058] Call Trace: [ 162.500414][T12058] [ 162.500421][T12058] __dump_stack+0x1d/0x30 [ 162.500440][T12058] dump_stack_lvl+0xe8/0x140 [ 162.500457][T12058] dump_stack+0x15/0x1b [ 162.500520][T12058] dump_header+0x81/0x220 [ 162.500562][T12058] oom_kill_process+0x342/0x400 [ 162.500592][T12058] out_of_memory+0x979/0xb80 [ 162.500650][T12058] try_charge_memcg+0x5e6/0x9e0 [ 162.500676][T12058] obj_cgroup_charge_pages+0xa6/0x150 [ 162.500715][T12058] __memcg_kmem_charge_page+0x9f/0x170 [ 162.500744][T12058] __alloc_frozen_pages_noprof+0x188/0x360 [ 162.500851][T12058] alloc_pages_mpol+0xb3/0x250 [ 162.500881][T12058] alloc_pages_noprof+0x90/0x130 [ 162.500918][T12058] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 162.500964][T12058] __kvmalloc_node_noprof+0x30f/0x4e0 [ 162.501028][T12058] ? ip_set_alloc+0x1f/0x30 [ 162.501059][T12058] ? ip_set_alloc+0x1f/0x30 [ 162.501090][T12058] ? __kmalloc_cache_noprof+0x189/0x320 [ 162.501183][T12058] ip_set_alloc+0x1f/0x30 [ 162.501212][T12058] hash_netiface_create+0x282/0x740 [ 162.501290][T12058] ? __pfx_hash_netiface_create+0x10/0x10 [ 162.501335][T12058] ip_set_create+0x3cc/0x960 [ 162.501362][T12058] ? __nla_parse+0x40/0x60 [ 162.501384][T12058] nfnetlink_rcv_msg+0x4c6/0x590 [ 162.501479][T12058] netlink_rcv_skb+0x120/0x220 [ 162.501500][T12058] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 162.501606][T12058] nfnetlink_rcv+0x16b/0x1690 [ 162.501635][T12058] ? nlmon_xmit+0x4f/0x60 [ 162.501658][T12058] ? consume_skb+0x49/0x150 [ 162.501697][T12058] ? nlmon_xmit+0x4f/0x60 [ 162.501756][T12058] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 162.501828][T12058] ? __dev_queue_xmit+0x1200/0x2000 [ 162.501846][T12058] ? __dev_queue_xmit+0x182/0x2000 [ 162.501948][T12058] ? ref_tracker_free+0x37d/0x3e0 [ 162.501986][T12058] ? __netlink_deliver_tap+0x4dc/0x500 [ 162.502009][T12058] netlink_unicast+0x5c0/0x690 [ 162.502054][T12058] netlink_sendmsg+0x58b/0x6b0 [ 162.502076][T12058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.502122][T12058] __sock_sendmsg+0x142/0x180 [ 162.502149][T12058] ____sys_sendmsg+0x31e/0x4e0 [ 162.502173][T12058] ___sys_sendmsg+0x17b/0x1d0 [ 162.502205][T12058] __x64_sys_sendmsg+0xd4/0x160 [ 162.502294][T12058] x64_sys_call+0x191e/0x2ff0 [ 162.502317][T12058] do_syscall_64+0xd2/0x200 [ 162.502349][T12058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.502371][T12058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.502446][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.502500][T12058] RIP: 0033:0x7f4a9119ebe9 [ 162.502522][T12058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.502546][T12058] RSP: 002b:00007f4a8fbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.502573][T12058] RAX: ffffffffffffffda RBX: 00007f4a913c5fa0 RCX: 00007f4a9119ebe9 [ 162.502600][T12058] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 162.502612][T12058] RBP: 00007f4a91221e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.502623][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.502634][T12058] R13: 00007f4a913c6038 R14: 00007f4a913c5fa0 R15: 00007ffdf0c11a68 [ 162.502651][T12058] [ 162.502657][T12058] memory: usage 307200kB, limit 307200kB, failcnt 390 [ 162.839176][T12058] memory+swap: usage 307280kB, limit 9007199254740988kB, failcnt 0 [ 162.847167][T12058] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 162.854557][T12058] Memory cgroup stats for /syz6: [ 162.854817][T12058] cache 0 [ 162.862717][T12058] rss 36864 [ 162.865831][T12058] shmem 0 [ 162.868849][T12058] mapped_file 0 [ 162.872344][T12058] dirty 0 [ 162.875284][T12058] writeback 0 [ 162.878603][T12058] workingset_refault_anon 100 [ 162.883272][T12058] workingset_refault_file 47 [ 162.887868][T12058] swap 81920 [ 162.891075][T12058] swapcached 114688 [ 162.894871][T12058] pgpgin 63027 [ 162.898276][T12058] pgpgout 62998 [ 162.901734][T12058] pgfault 53185 [ 162.905183][T12058] pgmajfault 41 [ 162.908654][T12058] inactive_anon 106496 [ 162.912727][T12058] active_anon 8192 [ 162.916514][T12058] inactive_file 4096 [ 162.920588][T12058] active_file 0 [ 162.924180][T12058] unevictable 0 [ 162.927740][T12058] hierarchical_memory_limit 314572800 [ 162.933327][T12058] hierarchical_memsw_limit 9223372036854771712 [ 162.939600][T12058] total_cache 0 [ 162.943071][T12058] total_rss 36864 [ 162.946699][T12058] total_shmem 0 [ 162.950186][T12058] total_mapped_file 0 [ 162.954161][T12058] total_dirty 0 [ 162.957648][T12058] total_writeback 0 [ 162.961462][T12058] total_workingset_refault_anon 100 [ 162.966744][T12058] total_workingset_refault_file 47 [ 162.971868][T12058] total_swap 81920 [ 162.975583][T12058] total_swapcached 114688 [ 162.979914][T12058] total_pgpgin 63027 [ 162.983808][T12058] total_pgpgout 62998 [ 162.987792][T12058] total_pgfault 53185 [ 162.991768][T12058] total_pgmajfault 41 [ 162.995741][T12058] total_inactive_anon 106496 [ 163.000335][T12058] total_active_anon 8192 [ 163.004740][T12058] total_inactive_file 4096 [ 163.009201][T12058] total_active_file 0 [ 163.013185][T12058] total_unevictable 0 [ 163.017166][T12058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3401,pid=12057,uid=0 [ 163.031856][T12058] Memory cgroup out of memory: Killed process 12058 (syz.6.3401) total-vm:95812kB, anon-rss:944kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 163.167319][T12058] syz.6.3401 (12058) used greatest stack depth: 6384 bytes left