last executing test programs: 6.547771741s ago: executing program 4 (id=3381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0xfc, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x7c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x219e4ae2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x49e00293e0ae15c1}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000540)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r4, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000880)={0x0, 0xe0, 0x4}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000c80)={r5, 0x3, 0xfff}) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x5013c0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaae3aaaa48ffa4318cfae1d6f295d31800140600fc000000000000000000000000000001fe8000000000800000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=r6, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @remote, {[], {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.045752254s ago: executing program 4 (id=3385): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) unshare(0x26040600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) 5.256516819s ago: executing program 4 (id=3393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x21, 0x9, 0x6, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7d0, 0x7, 0x3}}) readlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 4.597537153s ago: executing program 4 (id=3398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 4.550719373s ago: executing program 4 (id=3399): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@usrquota}, {@nodiscard}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80081, 0x36) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x0, &(0x7f0000000240)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10580, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004003600dd0000008000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000ef00"/28], 0x48) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) eventfd2(0xce77, 0x800) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001740)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10, 0x0}, 0x4000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.798134023s ago: executing program 4 (id=3416): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_setup(0x4822, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) 2.796680294s ago: executing program 0 (id=3417): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000001000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xd0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) 2.703906044s ago: executing program 0 (id=3422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.687059064s ago: executing program 0 (id=3423): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x40, 0x8, 0x8, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x402, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000004}, 0x5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xa85, 0xf) 2.542478845s ago: executing program 3 (id=3426): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@usrquota}, {@nodiscard}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80081, 0x36) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x0, &(0x7f0000000240)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10580, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004003600dd0000008000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000ef00"/28], 0x48) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) eventfd2(0xce77, 0x800) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001740)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10, 0x0}, 0x4000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.541865305s ago: executing program 1 (id=3427): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) unshare(0x26040600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) 1.354430512s ago: executing program 3 (id=3430): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2925, 0xffff, 0x9dff, 0xf, "9402080100"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xa) syz_open_pts(r2, 0x600) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f0000000080)=r4}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.329078133s ago: executing program 3 (id=3431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 1.273430253s ago: executing program 3 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.272855003s ago: executing program 2 (id=3433): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000001000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xd0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) 1.221508013s ago: executing program 3 (id=3434): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.196638263s ago: executing program 2 (id=3435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.159918173s ago: executing program 1 (id=3436): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 1.102495554s ago: executing program 2 (id=3437): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x1000000, 0x0, 0x8041}, 0x2004c8c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) sendmmsg$inet(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x20000000) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xea67}, 0x18) setpriority(0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) umount2(&(0x7f0000000040)='.\x00', 0x2) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x5f) socket$kcm(0x29, 0x2, 0x0) 1.057453164s ago: executing program 2 (id=3438): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 999.552544ms ago: executing program 0 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e", 0x7}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) unshare(0x26040600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) 892.336895ms ago: executing program 3 (id=3440): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@usrquota}, {@nodiscard}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80081, 0x36) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x0, &(0x7f0000000240)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10580, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004003600dd0000008000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000ef00"/28], 0x48) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) eventfd2(0xce77, 0x800) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001740)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10, 0x0}, 0x4000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 735.204876ms ago: executing program 0 (id=3441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 716.406906ms ago: executing program 0 (id=3442): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x6) 213.522739ms ago: executing program 1 (id=3443): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0xc0011122) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 178.456759ms ago: executing program 2 (id=3444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 72.89099ms ago: executing program 1 (id=3445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 69.99837ms ago: executing program 2 (id=3446): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 59.87694ms ago: executing program 1 (id=3447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x10, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 1 (id=3448): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): : 1 callbacks suppressed [ 181.229235][ T29] audit: type=1400 audit(1762615405.810:4046): avc: denied { ioctl } for pid=9114 comm="syz.0.1955" path="socket:[24655]" dev="sockfs" ino=24655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.273016][ T9117] syzkaller0: entered promiscuous mode [ 181.278554][ T9117] syzkaller0: entered allmulticast mode [ 181.662519][ T9147] __nla_validate_parse: 4 callbacks suppressed [ 181.662539][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 181.677723][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 184.381880][ T9191] wireguard1: entered promiscuous mode [ 184.387433][ T9191] wireguard1: entered allmulticast mode [ 184.512909][ T29] audit: type=1400 audit(1762615409.070:4047): avc: denied { name_bind } for pid=9223 comm="syz.4.2000" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 184.534902][ T29] audit: type=1400 audit(1762615409.070:4048): avc: denied { name_connect } for pid=9223 comm="syz.4.2000" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 185.598784][ T9251] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 185.644330][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 185.679340][ T9252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.895239][ T29] audit: type=1400 audit(1762615410.470:4049): avc: denied { ioctl } for pid=9259 comm="syz.2.2015" path="socket:[24858]" dev="sockfs" ino=24858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.970714][ T9269] syz.0.2016 uses obsolete (PF_INET,SOCK_PACKET) [ 186.040070][ T29] audit: type=1400 audit(1762615410.610:4050): avc: denied { name_bind } for pid=9276 comm="syz.2.2019" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 186.267357][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'. [ 186.701224][ T9298] wireguard0: entered promiscuous mode [ 186.706776][ T9298] wireguard0: entered allmulticast mode [ 187.119529][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 187.173007][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.180353][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.211679][ T9332] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 187.262608][ T9315] ip6gre1: left promiscuous mode [ 187.267669][ T9315] ip6gre1: left allmulticast mode [ 187.287957][ T9315] wireguard0: left promiscuous mode [ 187.293252][ T9315] wireguard0: left allmulticast mode [ 187.300532][ T9339] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 187.308580][ T9315] wireguard1: left promiscuous mode [ 187.314822][ T9315] wireguard1: left allmulticast mode [ 187.342116][ T3407] syz1: Port: 1 Link DOWN [ 187.346576][ T3452] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.369616][ T3452] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.397199][ T3452] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.417183][ T3452] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.418080][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 187.489156][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2041'. [ 187.528629][ T29] audit: type=1400 audit(1762615412.100:4051): avc: denied { getopt } for pid=9353 comm="syz.0.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.580847][ T29] audit: type=1400 audit(1762615412.150:4052): avc: denied { bind } for pid=9359 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.620394][ T9370] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2053'. [ 187.623852][ T29] audit: type=1400 audit(1762615412.180:4053): avc: denied { setopt } for pid=9359 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.847488][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2061'. [ 188.131231][ T9403] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2066'. [ 188.538004][ T9438] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2082'. [ 189.023545][ T9463] wireguard0: entered promiscuous mode [ 189.029129][ T9463] wireguard0: entered allmulticast mode [ 190.044586][ T9501] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2110'. [ 190.578700][ T29] audit: type=1400 audit(1762615414.940:4054): avc: denied { connect } for pid=9525 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.773676][ T9542] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2127'. [ 190.800881][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 190.986780][ T29] audit: type=1400 audit(1762615415.560:4055): avc: denied { mounton } for pid=9551 comm="syz.3.2133" path="/proc/1005/cgroup" dev="proc" ino=24182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 191.324130][ T29] audit: type=1400 audit(1762615415.900:4056): avc: denied { getopt } for pid=9572 comm="syz.4.2142" laddr=::ffff:172.0.0.0 lport=33815 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.524751][ T29] audit: type=1400 audit(1762615416.100:4057): avc: denied { create } for pid=9580 comm="syz.1.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 191.580628][ T29] audit: type=1400 audit(1762615416.100:4058): avc: denied { sys_admin } for pid=9580 comm="syz.1.2146" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 191.602354][ T29] audit: type=1400 audit(1762615416.150:4059): avc: denied { ioctl } for pid=9589 comm="syz.1.2150" path="socket:[24257]" dev="sockfs" ino=24257 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.747560][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.766573][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.903386][ T29] audit: type=1400 audit(1762615416.480:4060): avc: denied { create } for pid=9626 comm="syz.0.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.658051][ T9645] __nla_validate_parse: 1 callbacks suppressed [ 192.658071][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 192.682541][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 192.726355][ T29] audit: type=1400 audit(1762615417.300:4061): avc: denied { shutdown } for pid=9637 comm="syz.2.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.295328][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.336749][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.419240][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 193.428657][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 193.803095][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.971385][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.570985][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 195.027614][ T29] audit: type=1400 audit(1762615419.570:4062): avc: denied { mount } for pid=9702 comm="syz.2.2197" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.689966][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 195.705708][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 195.724954][ T29] audit: type=1400 audit(1762615420.250:4063): avc: denied { create } for pid=9733 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.728641][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 195.745228][ T29] audit: type=1400 audit(1762615420.260:4064): avc: denied { write } for pid=9733 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.773741][ T29] audit: type=1400 audit(1762615420.280:4065): avc: denied { read } for pid=9733 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.793153][ T29] audit: type=1400 audit(1762615420.280:4066): avc: denied { ioctl } for pid=9733 comm="syz.1.2209" path="socket:[24519]" dev="sockfs" ino=24519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.873779][ T9749] dvmrp0: left allmulticast mode [ 195.903703][ T9753] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2218'. [ 195.913592][ T9753] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2218'. [ 197.131916][ T29] audit: type=1400 audit(1762615421.710:4067): avc: denied { create } for pid=9820 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 197.274226][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.281506][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.087050][ T29] audit: type=1400 audit(1762615422.640:4068): avc: denied { create } for pid=9838 comm="syz.4.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.323750][ T9834] geneve2: left promiscuous mode [ 199.142189][ T9834] ip6gre1: left promiscuous mode [ 199.147192][ T9834] ip6gre1: left allmulticast mode [ 199.212984][ T9834] wireguard0: left promiscuous mode [ 199.218355][ T9834] wireguard0: left allmulticast mode [ 199.236480][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.248738][ T9873] __nla_validate_parse: 4 callbacks suppressed [ 199.248754][ T9873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2264'. [ 199.264255][ T123] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.274172][ T123] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.291252][ T9873] ip6gre2: entered promiscuous mode [ 199.296515][ T9873] ip6gre2: entered allmulticast mode [ 199.356929][ T123] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.369143][ T9886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2269'. [ 200.150234][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 200.372704][ T9924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2284'. [ 200.399091][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2285'. [ 201.035434][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 201.550460][ T9953] loop3: detected capacity change from 0 to 512 [ 201.609149][ T9953] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 201.657717][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2296'. [ 201.694603][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 202.764146][ T9974] ip6gre2: left promiscuous mode [ 202.769264][ T9974] ip6gre2: left allmulticast mode [ 203.031550][ T9989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2305'. [ 203.355449][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 203.364680][ T29] audit: type=1400 audit(1762615427.930:4069): avc: denied { ioctl } for pid=10008 comm="syz.1.2315" path="socket:[26685]" dev="sockfs" ino=26685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.391557][T10009] team0: Port device team_slave_1 removed [ 204.253968][T10054] __nla_validate_parse: 4 callbacks suppressed [ 204.253987][T10054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2326'. [ 205.235861][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 205.299337][T10073] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2340'. [ 205.764345][T10088] ip6tnl1: entered promiscuous mode [ 205.769684][T10088] ip6tnl1: entered allmulticast mode [ 205.863278][ T29] audit: type=1400 audit(1762615430.440:4070): avc: denied { setopt } for pid=10062 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.308465][ T29] audit: type=1400 audit(1762615430.440:4071): avc: denied { bind } for pid=10062 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.318680][T10113] gretap0: left allmulticast mode [ 207.323859][T10113] gretap0: left promiscuous mode [ 207.329051][T10113] bridge0: port 3(gretap0) entered disabled state [ 207.933254][ T29] audit: type=1400 audit(1762615432.510:4072): avc: denied { setopt } for pid=10119 comm="syz.4.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.051467][ T29] audit: type=1400 audit(1762615432.600:4073): avc: denied { block_suspend } for pid=10116 comm="syz.1.2357" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.081374][T10121] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2358'. [ 208.091181][ T29] audit: type=1400 audit(1762615432.660:4074): avc: denied { nlmsg_read } for pid=10119 comm="syz.4.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.024699][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2366'. [ 209.064045][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 209.073013][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 209.762922][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 209.978319][T10182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2378'. [ 209.988131][T10182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2378'. [ 210.356904][ T29] audit: type=1400 audit(1762615434.930:4075): avc: denied { read write } for pid=10206 comm="syz.3.2388" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 210.380511][ T29] audit: type=1400 audit(1762615434.930:4076): avc: denied { open } for pid=10206 comm="syz.3.2388" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 210.645601][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 210.935096][T10228] netlink: 'syz.4.2395': attribute type 10 has an invalid length. [ 210.944057][T10228] netlink: 'syz.4.2395': attribute type 10 has an invalid length. [ 210.953115][T10228] team0: Port device dummy0 removed [ 210.966316][T10228] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.079821][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2401'. [ 211.233979][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2401'. [ 211.403792][T10253] lo speed is unknown, defaulting to 1000 [ 211.418352][T10253] lo speed is unknown, defaulting to 1000 [ 211.424413][T10253] lo speed is unknown, defaulting to 1000 [ 211.461129][T10253] infiniband sz1: set active [ 211.465910][T10253] infiniband sz1: added lo [ 211.470618][ T9333] lo speed is unknown, defaulting to 1000 [ 212.030760][T10253] RDS/IB: sz1: added [ 212.056551][T10253] smc: adding ib device sz1 with port count 1 [ 212.099089][T10253] smc: ib device sz1 port 1 has no pnetid [ 212.105382][ T9336] lo speed is unknown, defaulting to 1000 [ 212.148424][T10253] lo speed is unknown, defaulting to 1000 [ 212.277356][T10262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2410'. [ 212.364234][T10253] lo speed is unknown, defaulting to 1000 [ 212.414087][T10268] ip6gre1: entered promiscuous mode [ 212.419337][T10268] ip6gre1: entered allmulticast mode [ 212.498375][T10253] lo speed is unknown, defaulting to 1000 [ 212.706471][T10279] wireguard1: entered promiscuous mode [ 212.712037][T10279] wireguard1: entered allmulticast mode [ 212.742254][ T29] audit: type=1400 audit(1762615437.310:4077): avc: denied { create } for pid=10269 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.762017][ T29] audit: type=1400 audit(1762615437.310:4078): avc: denied { connect } for pid=10269 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.802293][T10253] lo speed is unknown, defaulting to 1000 [ 213.584574][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 213.593516][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 213.727138][T10253] lo speed is unknown, defaulting to 1000 [ 213.965346][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2429'. [ 214.000105][ T29] audit: type=1400 audit(1762615438.570:4079): avc: denied { bind } for pid=10326 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.020608][ T29] audit: type=1400 audit(1762615438.570:4080): avc: denied { setopt } for pid=10326 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.066635][T10332] loop3: detected capacity change from 0 to 512 [ 214.096959][T10332] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2439: inode has both inline data and extents flags [ 214.190352][T10327] lo speed is unknown, defaulting to 1000 [ 214.228379][T10332] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2439: couldn't read orphan inode 15 (err -117) [ 214.248319][T10332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.285963][ T29] audit: type=1400 audit(1762615438.850:4081): avc: denied { mount } for pid=10331 comm="syz.3.2439" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.330787][T10332] EXT4-fs (loop3): shut down requested (0) [ 214.331404][ T29] audit: type=1400 audit(1762615438.890:4082): avc: denied { add_name } for pid=10331 comm="syz.3.2439" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.357904][ T29] audit: type=1400 audit(1762615438.890:4083): avc: denied { create } for pid=10331 comm="syz.3.2439" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.378324][ T29] audit: type=1400 audit(1762615438.890:4084): avc: denied { write open } for pid=10331 comm="syz.3.2439" path="/449/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.468805][T10345] lo speed is unknown, defaulting to 1000 [ 214.550375][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.453905][T10356] loop3: detected capacity change from 0 to 512 [ 215.483688][T10356] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2444: bad orphan inode 11862016 [ 215.487275][T10364] lo speed is unknown, defaulting to 1000 [ 215.517274][T10356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 215.541259][T10356] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.640160][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.885067][T10378] __nla_validate_parse: 3 callbacks suppressed [ 215.885088][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2449'. [ 215.996117][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 216.285689][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 216.285707][ T29] audit: type=1400 audit(1762615440.860:4098): avc: denied { write } for pid=10402 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.132456][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 217.169596][ T29] audit: type=1326 audit(1762615441.740:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.193969][ T29] audit: type=1326 audit(1762615441.740:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.289043][T10427] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2472'. [ 217.300568][ T29] audit: type=1326 audit(1762615441.800:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.324700][ T29] audit: type=1326 audit(1762615441.800:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.348406][ T29] audit: type=1326 audit(1762615441.800:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.372611][ T29] audit: type=1326 audit(1762615441.800:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.396227][ T29] audit: type=1326 audit(1762615441.800:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.420454][ T29] audit: type=1326 audit(1762615441.800:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.422491][T10398] lo speed is unknown, defaulting to 1000 [ 217.444519][ T29] audit: type=1326 audit(1762615441.800:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 217.635093][T10436] loop3: detected capacity change from 0 to 512 [ 217.651792][T10436] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2476: inode has both inline data and extents flags [ 217.667599][T10436] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2476: couldn't read orphan inode 15 (err -117) [ 217.691661][T10436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.807024][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 217.832883][T10431] lo speed is unknown, defaulting to 1000 [ 217.942346][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 218.244531][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.265301][T10453] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 219.038921][T10470] ip6gre2: entered promiscuous mode [ 219.044685][T10470] ip6gre2: entered allmulticast mode [ 219.242758][T10472] lo speed is unknown, defaulting to 1000 [ 219.366694][T10496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2498'. [ 219.376723][T10496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2498'. [ 219.411097][T10501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10501 comm=wg1 [ 220.037638][T10515] lo speed is unknown, defaulting to 1000 [ 220.088658][T10524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2510'. [ 220.411484][T10530] lo speed is unknown, defaulting to 1000 [ 220.596442][T10552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10552 comm=wg1 [ 221.203910][T10566] __nla_validate_parse: 1 callbacks suppressed [ 221.203927][T10566] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 221.749103][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 221.749123][ T29] audit: type=1326 audit(1762615446.270:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924151f6c9 code=0x7ffc0000 [ 221.778546][ T29] audit: type=1326 audit(1762615446.270:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924151f6c9 code=0x7ffc0000 [ 221.952452][T10580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10580 comm=wg1 [ 222.160221][T10605] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 222.458663][ T29] audit: type=1326 audit(1762615446.750:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.482897][ T29] audit: type=1326 audit(1762615446.750:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.506465][ T29] audit: type=1326 audit(1762615446.750:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.530662][ T29] audit: type=1326 audit(1762615446.750:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.554742][ T29] audit: type=1326 audit(1762615446.750:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.578355][ T29] audit: type=1326 audit(1762615446.750:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.602768][ T29] audit: type=1326 audit(1762615446.750:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.626330][ T29] audit: type=1326 audit(1762615446.750:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02c51f6c9 code=0x7ffc0000 [ 222.691774][T10606] wireguard1: entered promiscuous mode [ 222.697278][T10606] wireguard1: entered allmulticast mode [ 222.951534][T10622] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2549'. [ 223.638610][T10627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10627 comm=wg1 [ 224.041739][T10643] ip6gre2: left promiscuous mode [ 224.046763][T10643] ip6gre2: left allmulticast mode [ 224.071348][T10643] wireguard1: left promiscuous mode [ 224.076625][T10643] wireguard1: left allmulticast mode [ 224.095851][T10642] wireguard2: entered promiscuous mode [ 224.101440][T10642] wireguard2: entered allmulticast mode [ 224.241961][T10655] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2561'. [ 224.635382][T10673] netlink: 'syz.2.2568': attribute type 10 has an invalid length. [ 225.575215][T10712] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 225.575990][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2584'. [ 227.539429][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 227.539497][ T29] audit: type=1400 audit(1762615452.110:4218): avc: denied { connect } for pid=10769 comm="syz.3.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.711798][T10779] wireguard0: entered promiscuous mode [ 227.717489][T10779] wireguard0: entered allmulticast mode [ 228.001944][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.009198][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.117909][T10782] ipip0: left promiscuous mode [ 228.126233][T10782] ip6gre1: left promiscuous mode [ 228.131617][T10782] ip6gre1: left allmulticast mode [ 228.138443][T10782] ip6tnl1: left promiscuous mode [ 228.143440][T10782] ip6tnl1: left allmulticast mode [ 228.149456][T10782] wireguard0: left promiscuous mode [ 228.155119][T10782] wireguard0: left allmulticast mode [ 228.175598][ T9800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.184802][ T9800] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.201108][ T9800] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.223162][ T9800] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.261565][T10797] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 228.272429][ T29] audit: type=1326 audit(1762615452.850:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.296052][ T29] audit: type=1326 audit(1762615452.850:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.319964][ T29] audit: type=1326 audit(1762615452.850:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.343568][ T29] audit: type=1326 audit(1762615452.850:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.367285][ T29] audit: type=1326 audit(1762615452.850:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.390839][ T29] audit: type=1326 audit(1762615452.850:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.414602][ T29] audit: type=1326 audit(1762615452.850:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.557583][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 228.566729][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 228.677138][T10799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10799 comm=wg1 [ 228.904692][ T29] audit: type=1326 audit(1762615452.850:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 228.928420][ T29] audit: type=1326 audit(1762615452.850:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40655f6c9 code=0x7ffc0000 [ 229.076465][T10822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2623'. [ 229.530688][T10839] lo speed is unknown, defaulting to 1000 [ 229.569327][T10853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2636'. [ 229.838415][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'. [ 229.907663][T10863] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 230.322369][T10872] netlink: 'syz.0.2642': attribute type 10 has an invalid length. [ 230.395551][T10869] lo speed is unknown, defaulting to 1000 [ 231.185554][T10897] loop3: detected capacity change from 0 to 512 [ 231.344748][T10897] 9pnet_fd: Insufficient options for proto=fd [ 231.360905][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 231.771863][T10907] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 234.093641][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'. [ 234.343655][T10950] lo speed is unknown, defaulting to 1000 [ 234.423352][T10958] netlink: 'syz.4.2672': attribute type 10 has an invalid length. [ 234.449365][T10958] bond0: (slave dummy0): Releasing backup interface [ 234.468323][T10958] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.486119][T10958] team0: Failed to send options change via netlink (err -105) [ 234.493674][T10958] team0: Port device dummy0 added [ 234.935139][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 234.935172][ T29] audit: type=1400 audit(1762615459.510:4272): avc: denied { mounton } for pid=10973 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 235.099400][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.134469][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.194290][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.228856][T10973] lo speed is unknown, defaulting to 1000 [ 235.255065][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.332013][ T29] audit: type=1400 audit(1762615459.910:4273): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 235.404290][ T31] team0: left allmulticast mode [ 235.409233][ T31] dummy0: left allmulticast mode [ 235.414524][ T31] bridge0: port 1(team0) entered disabled state [ 235.452155][ T29] audit: type=1400 audit(1762615460.030:4274): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 235.663756][ T31] bond0 (unregistering): Released all slaves [ 235.770857][ T29] audit: type=1400 audit(1762615460.340:4275): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.793158][ T29] audit: type=1400 audit(1762615460.340:4276): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.814749][ T29] audit: type=1400 audit(1762615460.340:4277): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.837158][ T29] audit: type=1400 audit(1762615460.340:4278): avc: denied { read } for pid=3042 comm="dhcpcd" name="n33" dev="tmpfs" ino=7846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.858838][ T29] audit: type=1400 audit(1762615460.340:4279): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=7846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.882416][ T29] audit: type=1400 audit(1762615460.340:4280): avc: denied { getattr } for pid=3042 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=7846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.949952][ T29] audit: type=1400 audit(1762615460.520:4281): avc: denied { read open } for pid=10999 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.952087][T10973] chnl_net:caif_netlink_parms(): no params data found [ 236.088427][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.095712][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.146198][T10973] bridge_slave_0: entered allmulticast mode [ 236.161396][T10973] bridge_slave_0: entered promiscuous mode [ 236.178436][ T31] hsr_slave_0: left promiscuous mode [ 236.184637][ T31] hsr_slave_1: left promiscuous mode [ 236.199479][ T31] veth1_macvtap: left promiscuous mode [ 236.211392][ T31] veth0_macvtap: left promiscuous mode [ 236.347088][ T52] smc: removing ib device syz0 [ 236.413321][ T31] dummy0 (unregistering): left promiscuous mode [ 236.441389][ T31] team0 (unregistering): Port device dummy0 removed [ 236.480881][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.488156][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.501250][T10973] bridge_slave_1: entered allmulticast mode [ 236.621815][T10973] bridge_slave_1: entered promiscuous mode [ 236.645220][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.669488][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.716674][T10973] team0: Port device team_slave_0 added [ 236.741449][T10973] team0: Port device team_slave_1 added [ 236.744646][T11012] syz.2.2684 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 236.757790][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.2.2684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.757869][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.757882][T11012] Call Trace: [ 236.757888][T11012] [ 236.757896][T11012] __dump_stack+0x1d/0x30 [ 236.757919][T11012] dump_stack_lvl+0xe8/0x140 [ 236.757939][T11012] dump_stack+0x15/0x1b [ 236.757960][T11012] dump_header+0x81/0x220 [ 236.758040][T11012] oom_kill_process+0x342/0x400 [ 236.758075][T11012] out_of_memory+0x979/0xb80 [ 236.758109][T11012] try_charge_memcg+0x610/0xa10 [ 236.758297][T11012] charge_memcg+0x51/0xc0 [ 236.758326][T11012] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 236.758356][T11012] __read_swap_cache_async+0x17b/0x2d0 [ 236.758387][T11012] swap_cluster_readahead+0x262/0x3c0 [ 236.758495][T11012] swapin_readahead+0xde/0x6f0 [ 236.758521][T11012] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 236.758569][T11012] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 236.758690][T11012] ? __rcu_read_unlock+0x4f/0x70 [ 236.758721][T11012] ? swap_cache_get_folio+0x277/0x280 [ 236.758747][T11012] do_swap_page+0x2ae/0x2370 [ 236.758776][T11012] ? css_rstat_updated+0xb7/0x240 [ 236.758858][T11012] ? __pfx_default_wake_function+0x10/0x10 [ 236.758890][T11012] handle_mm_fault+0x9a5/0x2be0 [ 236.758952][T11012] ? vma_start_read+0x141/0x1f0 [ 236.759025][T11012] do_user_addr_fault+0x630/0x1080 [ 236.759054][T11012] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 236.759164][T11012] exc_page_fault+0x62/0xa0 [ 236.759194][T11012] asm_exc_page_fault+0x26/0x30 [ 236.759214][T11012] RIP: 0033:0x7f92413f5918 [ 236.759250][T11012] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d aa 24 38 00 00 0f 8e 09 fe ff ff e8 d3 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 [ 236.759270][T11012] RSP: 002b:00007fff211afff0 EFLAGS: 00010212 [ 236.759299][T11012] RAX: 0000000000039c93 RBX: 00007f9241777da0 RCX: 00000000000399e0 [ 236.759311][T11012] RDX: 00000000000002b3 RSI: 00007fff211affd0 RDI: 0000000000000001 [ 236.759326][T11012] RBP: 00007f9241777da0 R08: 0000000029395ebf R09: 7fffffffffffffff [ 236.759341][T11012] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000039d52 [ 236.759355][T11012] R13: 00007f9241776090 R14: ffffffffffffffff R15: 00007fff211b0100 [ 236.759377][T11012] [ 236.759436][T11012] memory: usage 307200kB, limit 307200kB, failcnt 8144 [ 236.991971][T11012] memory+swap: usage 912kB, limit 9007199254740988kB, failcnt 0 [ 236.999661][T11012] kmem: usage 540kB, limit 9007199254740988kB, failcnt 0 [ 237.006822][T11012] Memory cgroup stats for /syz2: [ 237.007103][T11012] cache 0 [ 237.014997][T11012] rss 24576 [ 237.018129][T11012] shmem 0 [ 237.021101][T11012] mapped_file 0 [ 237.024591][T11012] dirty 0 [ 237.027517][T11012] writeback 0 [ 237.030786][T11012] workingset_refault_anon 3410 [ 237.035554][T11012] workingset_refault_file 2444 [ 237.040312][T11012] swap 249856 [ 237.043621][T11012] swapcached 12288 [ 237.047385][T11012] pgpgin 353704 [ 237.050837][T11012] pgpgout 353698 [ 237.054391][T11012] pgfault 314487 [ 237.058102][T11012] pgmajfault 519 [ 237.061662][T11012] inactive_anon 0 [ 237.065382][T11012] active_anon 24576 [ 237.069214][T11012] inactive_file 0 [ 237.072872][T11012] active_file 0 [ 237.076335][T11012] unevictable 0 [ 237.079886][T11012] hierarchical_memory_limit 314572800 [ 237.085265][T11012] hierarchical_memsw_limit 9223372036854771712 [ 237.091439][T11012] total_cache 0 [ 237.094902][T11012] total_rss 24576 [ 237.098533][T11012] total_shmem 0 [ 237.102001][T11012] total_mapped_file 0 [ 237.105982][T11012] total_dirty 0 [ 237.109494][T11012] total_writeback 0 [ 237.113312][T11012] total_workingset_refault_anon 3410 [ 237.118682][T11012] total_workingset_refault_file 2444 [ 237.123976][T11012] total_swap 249856 [ 237.127784][T11012] total_swapcached 12288 [ 237.132060][T11012] total_pgpgin 353704 [ 237.136126][T11012] total_pgpgout 353698 [ 237.140193][T11012] total_pgfault 314487 [ 237.144274][T11012] total_pgmajfault 519 [ 237.148385][T11012] total_inactive_anon 0 [ 237.152569][T11012] total_active_anon 24576 [ 237.156950][T11012] total_inactive_file 0 [ 237.161226][T11012] total_active_file 0 [ 237.165205][T11012] total_unevictable 0 [ 237.169169][T11012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2684,pid=11012,uid=0 [ 237.183868][T11012] Memory cgroup out of memory: Killed process 11012 (syz.2.2684) total-vm:93956kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 237.219165][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.226201][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.252150][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.274812][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.281856][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.308577][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.333481][T11056] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 237.388271][T10973] hsr_slave_0: entered promiscuous mode [ 237.402373][T10973] hsr_slave_1: entered promiscuous mode [ 237.416056][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 237.421877][T10973] Cannot create hsr debugfs directory [ 237.920441][T10973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.938944][T10973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.948419][T10973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.958638][T10973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.998195][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.012554][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.023857][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.031015][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.043181][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.050267][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.130458][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.235223][T10973] veth0_vlan: entered promiscuous mode [ 238.269318][T10973] veth1_vlan: entered promiscuous mode [ 238.300509][T10973] veth0_macvtap: entered promiscuous mode [ 238.315712][T10973] veth1_macvtap: entered promiscuous mode [ 238.332855][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.347769][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.362284][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.385665][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.415876][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.436229][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.877259][T11154] loop3: detected capacity change from 0 to 512 [ 239.000662][T11154] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2704: bad orphan inode 11862016 [ 239.031125][T11154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.051343][T11154] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.129951][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 240.125993][T11215] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 240.136137][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 240.136215][ T29] audit: type=1326 audit(1762615464.710:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.168734][ T29] audit: type=1326 audit(1762615464.710:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.192462][ T29] audit: type=1326 audit(1762615464.710:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.216160][ T29] audit: type=1326 audit(1762615464.710:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.239728][ T29] audit: type=1326 audit(1762615464.710:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.242008][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 240.263374][ T29] audit: type=1326 audit(1762615464.710:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.263466][ T29] audit: type=1326 audit(1762615464.710:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.263497][ T29] audit: type=1326 audit(1762615464.710:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.263601][ T29] audit: type=1326 audit(1762615464.710:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.263631][ T29] audit: type=1326 audit(1762615464.710:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 240.365965][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2719'. [ 241.545978][T11248] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 241.605348][T11251] wireguard0: entered promiscuous mode [ 241.610870][T11251] wireguard0: entered allmulticast mode [ 241.706685][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'. [ 241.748609][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 241.962403][T11291] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 242.032530][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 242.099990][T11303] netlink: 'syz.1.2754': attribute type 10 has an invalid length. [ 242.104888][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'. [ 242.369284][T11302] loop3: detected capacity change from 0 to 512 [ 242.382936][T11324] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 242.414781][T11302] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2755: bad orphan inode 11862016 [ 242.455726][T11302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 242.457202][T11328] netlink: 'syz.4.2766': attribute type 10 has an invalid length. [ 242.494664][T11302] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.763012][T11336] lo speed is unknown, defaulting to 1000 [ 242.827914][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 243.585180][T11386] lo speed is unknown, defaulting to 1000 [ 243.870277][T10973] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 243.881830][T10973] CPU: 0 UID: 0 PID: 10973 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.881901][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.881914][T10973] Call Trace: [ 243.881921][T10973] [ 243.881929][T10973] __dump_stack+0x1d/0x30 [ 243.881952][T10973] dump_stack_lvl+0xe8/0x140 [ 243.882049][T10973] dump_stack+0x15/0x1b [ 243.882067][T10973] dump_header+0x81/0x220 [ 243.882153][T10973] oom_kill_process+0x342/0x400 [ 243.882189][T10973] out_of_memory+0x979/0xb80 [ 243.882228][T10973] try_charge_memcg+0x610/0xa10 [ 243.882277][T10973] charge_memcg+0x51/0xc0 [ 243.882364][T10973] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 243.882398][T10973] __read_swap_cache_async+0x17b/0x2d0 [ 243.882429][T10973] swap_cluster_readahead+0x362/0x3c0 [ 243.882463][T10973] swapin_readahead+0xde/0x6f0 [ 243.882556][T10973] ? copy_from_kernel_nofault+0x188/0x200 [ 243.882583][T10973] ? __rcu_read_unlock+0x4f/0x70 [ 243.882683][T10973] ? __rcu_read_unlock+0x4f/0x70 [ 243.882713][T10973] ? swap_cache_get_folio+0x277/0x280 [ 243.882736][T10973] do_swap_page+0x2ae/0x2370 [ 243.882823][T10973] ? ___perf_sw_event+0x2d6/0x310 [ 243.882884][T10973] ? _raw_spin_unlock+0x26/0x50 [ 243.882910][T10973] ? finish_task_switch+0xad/0x2b0 [ 243.882935][T10973] ? __pfx_default_wake_function+0x10/0x10 [ 243.882967][T10973] handle_mm_fault+0x9a5/0x2be0 [ 243.883120][T10973] ? vma_start_read+0x141/0x1f0 [ 243.883154][T10973] do_user_addr_fault+0x630/0x1080 [ 243.883231][T10973] ? fpregs_restore_userregs+0xe2/0x1d0 [ 243.883342][T10973] ? switch_fpu_return+0xe/0x20 [ 243.883370][T10973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.883467][T10973] exc_page_fault+0x62/0xa0 [ 243.883498][T10973] asm_exc_page_fault+0x26/0x30 [ 243.883585][T10973] RIP: 0033:0x7fe1d1e01f45 [ 243.883604][T10973] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 243.883695][T10973] RSP: 002b:00007ffd79adda68 EFLAGS: 00010246 [ 243.883714][T10973] RAX: 0000000000000000 RBX: 000000000000001e RCX: 00007fe1d1e01f43 [ 243.883730][T10973] RDX: 00007ffd79adda80 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.883744][T10973] RBP: 00007ffd79addaec R08: 0000000030dc622d R09: 0000000000000000 [ 243.883803][T10973] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 243.883819][T10973] R13: 00000000000927c0 R14: 000000000003b7b5 R15: 00007ffd79addb40 [ 243.883840][T10973] [ 243.883848][T10973] memory: usage 307200kB, limit 307200kB, failcnt 22570 [ 243.911977][T11394] lo speed is unknown, defaulting to 1000 [ 243.915209][T10973] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 244.155364][T10973] kmem: usage 221600kB, limit 9007199254740988kB, failcnt 0 [ 244.162718][T10973] Memory cgroup stats for /syz0: [ 244.164227][T10973] cache 0 [ 244.172172][T10973] rss 0 [ 244.174967][T10973] shmem 0 [ 244.177913][T10973] mapped_file 0 [ 244.182005][T10973] dirty 0 [ 244.184952][T10973] writeback 8192 [ 244.188586][T10973] workingset_refault_anon 4254 [ 244.193395][T10973] workingset_refault_file 5996 [ 244.198203][T10973] swap 176128 [ 244.201526][T10973] swapcached 16384 [ 244.205304][T10973] pgpgin 393794 [ 244.208764][T10973] pgpgout 393790 [ 244.212992][T10973] pgfault 396301 [ 244.216610][T10973] pgmajfault 556 [ 244.220158][T10973] inactive_anon 12288 [ 244.224180][T10973] active_anon 4096 [ 244.227903][T10973] inactive_file 0 [ 244.231567][T10973] active_file 0 [ 244.235043][T10973] unevictable 0 [ 244.238530][T10973] hierarchical_memory_limit 314572800 [ 244.244527][T10973] hierarchical_memsw_limit 9223372036854771712 [ 244.250685][T10973] total_cache 0 [ 244.254198][T10973] total_rss 0 [ 244.257508][T10973] total_shmem 0 [ 244.261002][T10973] total_mapped_file 0 [ 244.265049][T10973] total_dirty 0 [ 244.268521][T10973] total_writeback 8192 [ 244.273264][T10973] total_workingset_refault_anon 4254 [ 244.278561][T10973] total_workingset_refault_file 5996 [ 244.283900][T10973] total_swap 176128 [ 244.287717][T10973] total_swapcached 16384 [ 244.291988][T10973] total_pgpgin 393794 [ 244.295985][T10973] total_pgpgout 393790 [ 244.300063][T10973] total_pgfault 396301 [ 244.304748][T10973] total_pgmajfault 556 [ 244.308819][T10973] total_inactive_anon 12288 [ 244.313420][T10973] total_active_anon 4096 [ 244.317672][T10973] total_inactive_file 0 [ 244.321870][T10973] total_active_file 0 [ 244.325860][T10973] total_unevictable 0 [ 244.329909][T10973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2788,pid=11387,uid=0 [ 244.345276][T10973] Memory cgroup out of memory: Killed process 11387 (syz.0.2788) total-vm:93884kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 244.907189][T11436] lo speed is unknown, defaulting to 1000 [ 245.920943][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 245.920964][ T29] audit: type=1326 audit(1762615470.480:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 245.950902][ T29] audit: type=1326 audit(1762615470.480:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 245.974613][ T29] audit: type=1326 audit(1762615470.480:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 245.998191][ T29] audit: type=1326 audit(1762615470.480:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.022169][ T29] audit: type=1326 audit(1762615470.480:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.046026][ T29] audit: type=1326 audit(1762615470.480:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.069561][ T29] audit: type=1326 audit(1762615470.490:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.093287][ T29] audit: type=1326 audit(1762615470.490:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.116838][ T29] audit: type=1326 audit(1762615470.490:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.140507][ T29] audit: type=1326 audit(1762615470.490:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 246.150918][T11486] __nla_validate_parse: 7 callbacks suppressed [ 246.150951][T11486] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 246.238654][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'. [ 246.247802][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'. [ 246.269734][T11484] lo speed is unknown, defaulting to 1000 [ 246.868921][T11512] wireguard1: entered promiscuous mode [ 246.875094][T11512] wireguard1: entered allmulticast mode [ 247.127695][T11515] lo speed is unknown, defaulting to 1000 [ 247.794093][T11552] lo speed is unknown, defaulting to 1000 [ 248.625047][T11593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2862'. [ 248.732985][T11595] lo speed is unknown, defaulting to 1000 [ 249.658565][T11615] lo speed is unknown, defaulting to 1000 [ 249.777512][T11627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2874'. [ 249.861680][T11634] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 250.013845][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 250.067887][T11653] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2886'. [ 250.315762][T11661] netlink: 'syz.4.2889': attribute type 10 has an invalid length. [ 250.380226][T11681] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2899'. [ 250.489037][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'. [ 250.519327][T11682] lo speed is unknown, defaulting to 1000 [ 251.648584][T11720] netlink: 'syz.4.2911': attribute type 10 has an invalid length. [ 251.658867][T11723] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2912'. [ 251.907508][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 251.907528][ T29] audit: type=1326 audit(1762615476.480:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.046432][ T29] audit: type=1326 audit(1762615476.510:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.070562][ T29] audit: type=1326 audit(1762615476.560:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.094942][ T29] audit: type=1326 audit(1762615476.560:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.118460][ T29] audit: type=1326 audit(1762615476.560:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.142641][ T29] audit: type=1326 audit(1762615476.560:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.166175][ T29] audit: type=1326 audit(1762615476.560:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.190573][ T29] audit: type=1326 audit(1762615476.560:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.214976][ T29] audit: type=1326 audit(1762615476.560:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.238478][ T29] audit: type=1326 audit(1762615476.560:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.3.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798889f6c9 code=0x7ffc0000 [ 252.444506][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'. [ 252.798095][T11757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2924'. [ 252.851961][T11766] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 252.935799][T11770] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 253.197752][T11790] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2937'. [ 253.258155][T11787] lo speed is unknown, defaulting to 1000 [ 253.413121][T11801] netlink: 'syz.3.2941': attribute type 10 has an invalid length. [ 253.973402][T11821] lo speed is unknown, defaulting to 1000 [ 254.977039][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 254.978758][T11858] lo speed is unknown, defaulting to 1000 [ 255.114160][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.174399][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.221455][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2968'. [ 255.256649][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.279089][T11857] lo speed is unknown, defaulting to 1000 [ 255.384329][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.403721][T11891] wireguard1: entered promiscuous mode [ 255.409268][T11891] wireguard1: entered allmulticast mode [ 255.479498][ T41] bridge_slave_1: left allmulticast mode [ 255.485240][ T41] bridge_slave_1: left promiscuous mode [ 255.491105][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.567664][ T41] bridge_slave_0: left allmulticast mode [ 255.573392][ T41] bridge_slave_0: left promiscuous mode [ 255.579222][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.894377][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.909520][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.918972][ T41] bond0 (unregistering): Released all slaves [ 255.945945][T11857] chnl_net:caif_netlink_parms(): no params data found [ 256.406976][T11857] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.414178][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.477327][T11857] bridge_slave_0: entered allmulticast mode [ 256.493337][T11857] bridge_slave_0: entered promiscuous mode [ 256.506573][T11857] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.513748][T11857] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.522100][T11857] bridge_slave_1: entered allmulticast mode [ 256.528757][T11857] bridge_slave_1: entered promiscuous mode [ 256.561635][T11898] lo speed is unknown, defaulting to 1000 [ 256.572457][T11857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.596367][T11857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.702881][T11857] team0: Port device team_slave_0 added [ 256.715818][T11857] team0: Port device team_slave_1 added [ 256.743091][ T41] hsr_slave_0: left promiscuous mode [ 256.748846][ T41] hsr_slave_1: left promiscuous mode [ 256.756465][ T41] veth1_macvtap: left promiscuous mode [ 256.762101][ T41] veth0_macvtap: left promiscuous mode [ 256.797221][ T41] team0 (unregistering): Port device team_slave_1 removed [ 256.806714][ T41] team0 (unregistering): Port device team_slave_0 removed [ 256.840792][ T41] team0 (unregistering): Port device dummy0 removed [ 256.852611][ T3452] smc: removing ib device sz1 [ 256.858866][T11857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.865879][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.892561][T11857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.903585][ T9330] lo speed is unknown, defaulting to 1000 [ 256.909441][ T9330] sz1: Port: 1 Link DOWN [ 256.931329][T11857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.938317][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.964972][T11857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.104374][T11857] hsr_slave_0: entered promiscuous mode [ 257.110538][T11857] hsr_slave_1: entered promiscuous mode [ 257.286387][T11956] netlink: 'syz.2.2978': attribute type 10 has an invalid length. [ 257.338653][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2980'. [ 257.394756][T11857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.413991][T11857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.594765][T11857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.611558][T11857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.757527][T11857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.775243][T11857] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.804891][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.812107][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.840184][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.847313][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.990411][T11857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.163763][T11857] veth0_vlan: entered promiscuous mode [ 258.178988][T11857] veth1_vlan: entered promiscuous mode [ 258.208694][T11857] veth0_macvtap: entered promiscuous mode [ 258.294128][T11857] veth1_macvtap: entered promiscuous mode [ 258.316047][T11857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.327067][T11857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.339009][ T3452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.351610][ T3452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.375452][ T3452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.395143][ T3452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.615304][T12039] loop4: detected capacity change from 0 to 512 [ 258.632974][T12039] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2961: bad orphan inode 11862016 [ 258.651801][T12039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 258.664921][T12039] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.754730][T12044] netlink: 'syz.2.2990': attribute type 10 has an invalid length. [ 258.844211][T12050] wireguard2: entered promiscuous mode [ 258.849858][T12050] wireguard2: entered allmulticast mode [ 258.863552][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 259.095201][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 259.095218][ T29] audit: type=1326 audit(1762615483.670:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.145114][ T29] audit: type=1326 audit(1762615483.700:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.168725][ T29] audit: type=1326 audit(1762615483.700:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.192301][ T29] audit: type=1326 audit(1762615483.700:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.215932][ T29] audit: type=1326 audit(1762615483.700:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.239827][ T29] audit: type=1326 audit(1762615483.700:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.263394][ T29] audit: type=1326 audit(1762615483.700:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.287004][ T29] audit: type=1326 audit(1762615483.700:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.310584][ T29] audit: type=1326 audit(1762615483.700:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.334413][ T29] audit: type=1326 audit(1762615483.700:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97d0bf6c9 code=0x7ffc0000 [ 259.338342][T12069] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 260.345839][T12109] netlink: 'syz.1.3013': attribute type 10 has an invalid length. [ 260.392252][T12091] chnl_net:caif_netlink_parms(): no params data found [ 260.466821][T12091] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.474594][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.523094][T12091] bridge_slave_0: entered allmulticast mode [ 260.535607][T12091] bridge_slave_0: entered promiscuous mode [ 260.631242][T12091] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.638339][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.646026][T12091] bridge_slave_1: entered allmulticast mode [ 260.653180][T12091] bridge_slave_1: entered promiscuous mode [ 260.672891][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.702887][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.788948][T12136] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 260.800679][T12136] team0: Port device dummy0 added [ 260.828297][T12091] team0: Port device team_slave_0 added [ 260.875252][T12091] team0: Port device team_slave_1 added [ 261.065462][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.073099][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.099043][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.210951][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.217985][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.244494][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.643556][T12091] hsr_slave_0: entered promiscuous mode [ 261.657245][T12160] loop4: detected capacity change from 0 to 512 [ 261.661509][T12091] hsr_slave_1: entered promiscuous mode [ 261.669472][T12091] debugfs: 'hsr0' already exists in 'hsr' [ 261.675893][T12091] Cannot create hsr debugfs directory [ 261.793431][T12160] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3031: inode has both inline data and extents flags [ 261.854412][T12160] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3031: couldn't read orphan inode 15 (err -117) [ 261.961582][T12160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.250652][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.251268][T12091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.307619][T12091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.330606][T12091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.352004][T12091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.485568][T12091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.506787][T12091] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.523606][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 262.536719][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.543843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.555444][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.562555][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.623363][T12091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.768382][T12091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.775870][T12208] loop4: detected capacity change from 0 to 512 [ 262.811815][T12208] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3045: inode has both inline data and extents flags [ 262.844141][T12208] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3045: couldn't read orphan inode 15 (err -117) [ 262.884657][T12208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.925911][T12091] veth0_vlan: entered promiscuous mode [ 262.944183][T12091] veth1_vlan: entered promiscuous mode [ 262.983215][T12091] veth0_macvtap: entered promiscuous mode [ 262.997914][T12091] veth1_macvtap: entered promiscuous mode [ 263.024037][T12091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.055347][T12091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.078722][ T123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.119347][ T123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.149309][ T123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.167130][ T123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.197038][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.222098][T12233] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 263.280064][T12237] wireguard0: entered promiscuous mode [ 263.285593][T12237] wireguard0: entered allmulticast mode [ 264.264484][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 264.264579][ T29] audit: type=1400 audit(1762615488.840:4710): avc: denied { read } for pid=12271 comm="syz.2.3066" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.264700][T12272] sd 0:0:1:0: device reset [ 264.270700][ T29] audit: type=1400 audit(1762615488.840:4711): avc: denied { open } for pid=12271 comm="syz.2.3066" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.324094][ T29] audit: type=1400 audit(1762615488.840:4712): avc: denied { ioctl } for pid=12271 comm="syz.2.3066" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.811294][T12303] wireguard2: entered promiscuous mode [ 264.816890][T12303] wireguard2: entered allmulticast mode [ 264.838548][T12266] chnl_net:caif_netlink_parms(): no params data found [ 264.877111][T12306] loop4: detected capacity change from 0 to 512 [ 264.938367][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3074: inode has both inline data and extents flags [ 264.982209][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.989411][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.021615][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3074: couldn't read orphan inode 15 (err -117) [ 265.048762][T12266] bridge_slave_0: entered allmulticast mode [ 265.068690][T12306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.086177][T12266] bridge_slave_0: entered promiscuous mode [ 265.123468][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.130577][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.160611][T12266] bridge_slave_1: entered allmulticast mode [ 265.167913][T12266] bridge_slave_1: entered promiscuous mode [ 265.200667][T12266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.213754][T12266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.237523][T12266] team0: Port device team_slave_0 added [ 265.244387][T12266] team0: Port device team_slave_1 added [ 265.263699][T12266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.270730][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.296853][T12266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.315712][T12266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.322764][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.324033][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.349348][T12266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.433175][T12266] hsr_slave_0: entered promiscuous mode [ 265.440620][T12266] hsr_slave_1: entered promiscuous mode [ 265.447058][T12266] debugfs: 'hsr0' already exists in 'hsr' [ 265.452943][T12266] Cannot create hsr debugfs directory [ 265.713980][T12266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.723112][T12266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.732792][T12266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.743603][T12266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.795967][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.811119][T12266] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.822314][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.829553][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.840799][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.847887][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.930542][T12266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.998824][T12266] veth0_vlan: entered promiscuous mode [ 266.007554][T12266] veth1_vlan: entered promiscuous mode [ 266.023945][T12266] veth0_macvtap: entered promiscuous mode [ 266.068842][T12266] veth1_macvtap: entered promiscuous mode [ 266.082113][T12266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.091708][T12266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.159940][ T3452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.176671][ T3452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.193076][ T3452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.218892][ T9800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.372452][T12366] loop4: detected capacity change from 0 to 512 [ 266.406299][T12366] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3087: inode has both inline data and extents flags [ 266.426308][T12366] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3087: couldn't read orphan inode 15 (err -117) [ 266.471829][T12366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.645077][ T29] audit: type=1400 audit(1762615491.210:4713): avc: denied { bind } for pid=12369 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.869573][ T29] audit: type=1400 audit(1762615491.260:4714): avc: denied { setopt } for pid=12369 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.890343][ T29] audit: type=1400 audit(1762615491.260:4715): avc: denied { write } for pid=12369 comm="syz.0.3088" path="socket:[34974]" dev="sockfs" ino=34974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.021225][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.556482][T12412] loop1: detected capacity change from 0 to 512 [ 267.582072][T12412] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3103: inode has both inline data and extents flags [ 267.648496][T12412] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3103: couldn't read orphan inode 15 (err -117) [ 267.711670][T12412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.783551][T12418] netlink: 'syz.2.3105': attribute type 10 has an invalid length. [ 267.874730][T12418] team0: Port device dummy0 added [ 268.003007][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.065336][T12437] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 268.078134][T12437] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 268.273207][T12423] chnl_net:caif_netlink_parms(): no params data found [ 268.458595][T12423] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.465880][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.481865][T12460] loop1: detected capacity change from 0 to 512 [ 268.502145][T12460] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3117: inode has both inline data and extents flags [ 268.529412][T12423] bridge_slave_0: entered allmulticast mode [ 268.549785][T12460] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3117: couldn't read orphan inode 15 (err -117) [ 268.551136][T12423] bridge_slave_0: entered promiscuous mode [ 268.569134][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.576290][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.583595][T12423] bridge_slave_1: entered allmulticast mode [ 268.590154][T12423] bridge_slave_1: entered promiscuous mode [ 268.590674][T12460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.617202][T12454] loop4: detected capacity change from 0 to 512 [ 268.651749][T12454] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3115: bad orphan inode 11862016 [ 268.665319][T12423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.666483][T12423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.687631][T12454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.713123][T12454] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.782014][T12423] team0: Port device team_slave_0 added [ 268.789118][T12423] team0: Port device team_slave_1 added [ 268.840200][T12423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.847321][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.873264][T12423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.909259][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 268.920875][T12423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.927871][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.953990][T12423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.993266][T12423] hsr_slave_0: entered promiscuous mode [ 268.999543][T12423] hsr_slave_1: entered promiscuous mode [ 269.005639][T12423] debugfs: 'hsr0' already exists in 'hsr' [ 269.012071][T12423] Cannot create hsr debugfs directory [ 269.035591][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.392939][T12423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.402995][T12423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.411743][T12423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.421253][T12423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.477892][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.493524][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.504286][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.511524][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.530323][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.537725][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.557899][T12423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.568388][T12423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.635091][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.713378][T12423] veth0_vlan: entered promiscuous mode [ 269.721891][T12423] veth1_vlan: entered promiscuous mode [ 269.741028][T12423] veth0_macvtap: entered promiscuous mode [ 269.749028][T12423] veth1_macvtap: entered promiscuous mode [ 269.762747][T12423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.775008][T12423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.785851][ T9800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.795780][ T9800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.822019][ T9800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.835622][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.909378][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3124'. [ 270.122778][T12519] loop1: detected capacity change from 0 to 512 [ 270.131799][T12519] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3129: inode has both inline data and extents flags [ 270.151723][T12519] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3129: couldn't read orphan inode 15 (err -117) [ 270.164649][T12519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.282370][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.292558][T12532] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 270.304238][ T29] audit: type=1326 audit(1762615494.880:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.327900][ T29] audit: type=1326 audit(1762615494.880:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.354088][ T29] audit: type=1326 audit(1762615494.900:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.377688][ T29] audit: type=1326 audit(1762615494.900:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.401294][ T29] audit: type=1326 audit(1762615494.900:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.425031][ T29] audit: type=1326 audit(1762615494.900:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.448561][ T29] audit: type=1326 audit(1762615494.900:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.472088][ T29] audit: type=1326 audit(1762615494.910:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.495941][ T29] audit: type=1326 audit(1762615494.910:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 270.519720][ T29] audit: type=1326 audit(1762615494.910:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12531 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d1dcf6c9 code=0x7ffc0000 [ 271.052040][T12549] loop4: detected capacity change from 0 to 512 [ 271.163866][T12549] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3142: bad orphan inode 11862016 [ 271.224918][T12549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 271.278421][T12549] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.911320][T12571] wireguard1: entered promiscuous mode [ 271.916956][T12571] wireguard1: entered allmulticast mode [ 271.984466][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 272.328382][T12576] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 272.680761][T12588] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 272.776025][T12593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3156'. [ 272.805291][T12595] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3157'. [ 274.213456][T12635] wireguard0: entered promiscuous mode [ 274.218969][T12635] wireguard0: entered allmulticast mode [ 274.324482][T12638] loop1: detected capacity change from 0 to 512 [ 274.368966][T12638] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3172: inode has both inline data and extents flags [ 274.393258][T12638] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3172: couldn't read orphan inode 15 (err -117) [ 274.462712][T12638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.542000][T12648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3172'. [ 274.586341][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.500049][T12683] sd 0:0:1:0: device reset [ 275.676493][T12686] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 276.135765][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 276.135810][ T29] audit: type=1326 audit(1762615500.710:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.212590][ T29] audit: type=1326 audit(1762615500.750:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.236773][ T29] audit: type=1326 audit(1762615500.750:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.260663][T12699] loop1: detected capacity change from 0 to 512 [ 276.267921][ T29] audit: type=1326 audit(1762615500.750:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.292003][ T29] audit: type=1326 audit(1762615500.750:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.315556][ T29] audit: type=1326 audit(1762615500.750:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.339728][ T29] audit: type=1326 audit(1762615500.750:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.363985][ T29] audit: type=1326 audit(1762615500.750:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.387425][ T29] audit: type=1326 audit(1762615500.750:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.411580][ T29] audit: type=1326 audit(1762615500.750:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb771c7f6c9 code=0x7ffc0000 [ 276.462645][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 276.472388][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3198'. [ 276.520846][T12699] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3191: bad orphan inode 11862016 [ 276.535268][T12699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 276.551620][T12699] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.737395][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.745706][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 277.762235][T12753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3210'. [ 278.763230][T12771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3216'. [ 278.936689][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.944009][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.022653][T12787] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 279.215046][T12781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.304425][T12781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.529762][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.553903][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.563446][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.617220][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.665054][T12793] loop1: detected capacity change from 0 to 512 [ 279.742485][T12793] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3224: inode has both inline data and extents flags [ 279.762213][T12793] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3224: couldn't read orphan inode 15 (err -117) [ 279.794678][T12793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.875064][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 279.884811][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 279.995644][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.184477][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888119346c00: rx timeout, send abort [ 280.201077][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888119346c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.314210][T12829] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 280.698501][T12845] loop1: detected capacity change from 0 to 512 [ 280.712529][T12845] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3243: inode has both inline data and extents flags [ 280.727164][T12845] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3243: couldn't read orphan inode 15 (err -117) [ 280.734680][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 280.748895][T12845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.898749][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3243'. [ 280.907860][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3243'. [ 280.988971][T12854] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3245'. [ 281.112185][T12855] wireguard3: entered promiscuous mode [ 281.117710][T12855] wireguard3: entered allmulticast mode [ 281.376455][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.567517][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'. [ 281.948619][T12892] netlink: 'syz.3.3260': attribute type 10 has an invalid length. [ 281.960851][T12892] team0: Port device dummy0 added [ 283.517125][T12908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3266'. [ 283.799298][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 285.867568][T12985] __nla_validate_parse: 4 callbacks suppressed [ 285.867590][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 285.882722][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3293'. [ 285.899375][T12974] loop1: detected capacity change from 0 to 512 [ 286.003043][T12991] sd 0:0:1:0: device reset [ 286.090925][T12995] loop4: detected capacity change from 0 to 2048 [ 286.184078][T12995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.200888][T12974] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3288: bad orphan inode 11862016 [ 286.372279][T12974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 286.480862][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 286.480877][ T29] audit: type=1400 audit(1762615510.920:4781): avc: denied { write } for pid=12994 comm="syz.4.3298" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.509337][ T29] audit: type=1400 audit(1762615510.920:4782): avc: denied { open } for pid=12994 comm="syz.4.3298" path="/53/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.935032][T12974] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.024529][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 287.063955][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 287.097541][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 287.109955][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 287.109955][ T12] [ 287.119651][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 287.126008][ T12] EXT4-fs (loop4): Free/Dirty block details [ 287.132118][ T12] EXT4-fs (loop4): free_blocks=66060288 [ 287.137677][ T12] EXT4-fs (loop4): dirty_blocks=64 [ 287.142888][ T12] EXT4-fs (loop4): Block reservation details [ 287.148967][ T12] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 287.156462][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 44 with error 28 [ 287.233249][T13027] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3306'. [ 287.243024][T13027] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3306'. [ 287.294374][T13018] loop1: detected capacity change from 0 to 512 [ 287.336219][T13018] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3302: bad orphan inode 11862016 [ 287.361554][T13018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 287.374518][T13018] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.545171][T13042] ip6gre1: entered promiscuous mode [ 287.550501][T13042] ip6gre1: entered allmulticast mode [ 287.579764][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 287.722030][T13052] sd 0:0:1:0: device reset [ 288.348061][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 288.358569][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3322'. [ 288.460510][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 288.671103][T13090] netlink: 'syz.3.3331': attribute type 10 has an invalid length. [ 288.854746][T13085] loop4: detected capacity change from 0 to 512 [ 288.914283][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 289.323546][T13085] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3329: bad orphan inode 11862016 [ 289.404305][T13085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.432261][T13085] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.642787][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 289.790756][T13135] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 289.818411][T13135] team0: Port device dummy0 added [ 291.364870][T13170] netlink: 'syz.0.3359': attribute type 10 has an invalid length. [ 292.818364][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811a5d9a00: rx timeout, send abort [ 292.826780][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a5d9a00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.208823][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3370'. [ 293.265174][T13211] loop1: detected capacity change from 0 to 512 [ 293.289868][T13211] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3372: inode has both inline data and extents flags [ 293.385837][T13211] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3372: couldn't read orphan inode 15 (err -117) [ 293.412152][T13211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.456860][T13218] netlink: 'syz.4.3374': attribute type 10 has an invalid length. [ 293.490362][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'. [ 293.726502][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.449584][T13256] loop4: detected capacity change from 0 to 512 [ 295.487133][T13256] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3385: bad orphan inode 11862016 [ 295.538743][T13256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 295.578649][T13256] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.700040][T11857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 296.049993][T13291] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 296.095034][ T29] audit: type=1326 audit(1762615520.670:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.119197][ T29] audit: type=1326 audit(1762615520.670:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.143535][ T29] audit: type=1326 audit(1762615520.670:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.167157][ T29] audit: type=1326 audit(1762615520.670:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.190714][ T29] audit: type=1326 audit(1762615520.670:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.214905][ T29] audit: type=1326 audit(1762615520.670:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.238520][ T29] audit: type=1326 audit(1762615520.670:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.262998][ T29] audit: type=1326 audit(1762615520.670:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.286519][ T29] audit: type=1326 audit(1762615520.670:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.310369][ T29] audit: type=1326 audit(1762615520.670:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syscall" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb82c3bf6c9 code=0x7ffc0000 [ 296.455255][T13299] loop4: detected capacity change from 0 to 2048 [ 296.506814][T13299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.916412][ T9800] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 296.929955][T13310] loop1: detected capacity change from 0 to 512 [ 296.931742][ T9800] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 296.949510][ T9800] EXT4-fs (loop4): This should not happen!! Data will be lost [ 296.949510][ T9800] [ 296.959190][ T9800] EXT4-fs (loop4): Total free blocks count 0 [ 296.965913][ T9800] EXT4-fs (loop4): Free/Dirty block details [ 296.971850][ T9800] EXT4-fs (loop4): free_blocks=66060288 [ 296.977415][ T9800] EXT4-fs (loop4): dirty_blocks=64 [ 296.982559][ T9800] EXT4-fs (loop4): Block reservation details [ 296.988564][ T9800] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 297.012185][T13321] netlink: 'syz.2.3406': attribute type 10 has an invalid length. [ 297.055321][T13310] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3403: bad orphan inode 11862016 [ 297.085207][T13310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 297.141281][T13310] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.278782][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.289205][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 44 with error 28 [ 297.506154][T13298] syz.4.3399 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 297.517229][T13298] CPU: 0 UID: 0 PID: 13298 Comm: syz.4.3399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.517258][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.517271][T13298] Call Trace: [ 297.517279][T13298] [ 297.517289][T13298] __dump_stack+0x1d/0x30 [ 297.517316][T13298] dump_stack_lvl+0xe8/0x140 [ 297.517398][T13298] dump_stack+0x15/0x1b [ 297.517415][T13298] dump_header+0x81/0x220 [ 297.517435][T13298] oom_kill_process+0x342/0x400 [ 297.517500][T13298] out_of_memory+0x979/0xb80 [ 297.517593][T13298] try_charge_memcg+0x610/0xa10 [ 297.517630][T13298] charge_memcg+0x51/0xc0 [ 297.517658][T13298] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 297.517759][T13298] __read_swap_cache_async+0x17b/0x2d0 [ 297.517783][T13298] swap_cluster_readahead+0x262/0x3c0 [ 297.517877][T13298] swapin_readahead+0xde/0x6f0 [ 297.517898][T13298] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 297.517934][T13298] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 297.518037][T13298] ? __rcu_read_unlock+0x4f/0x70 [ 297.518065][T13298] ? swap_cache_get_folio+0x277/0x280 [ 297.518091][T13298] do_swap_page+0x2ae/0x2370 [ 297.518122][T13298] ? css_rstat_updated+0xb7/0x240 [ 297.518147][T13298] ? __pfx_default_wake_function+0x10/0x10 [ 297.518257][T13298] handle_mm_fault+0x9a5/0x2be0 [ 297.518285][T13298] ? vma_start_read+0x141/0x1f0 [ 297.518324][T13298] do_user_addr_fault+0x630/0x1080 [ 297.518426][T13298] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 297.518463][T13298] exc_page_fault+0x62/0xa0 [ 297.518577][T13298] asm_exc_page_fault+0x26/0x30 [ 297.518697][T13298] RIP: 0033:0x7fb771b41120 [ 297.518714][T13298] Code: 48 63 f6 4c 01 f6 e8 2f fb ff ff eb a6 b8 01 00 00 00 48 81 c4 b8 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 <80> 3d 82 6c 39 00 00 48 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 [ 297.518733][T13298] RSP: 002b:00007ffff984ccc8 EFLAGS: 00010246 [ 297.518751][T13298] RAX: 0000000000000000 RBX: 00007fb771ed5f40 RCX: 00007fb771c7f6c9 [ 297.518764][T13298] RDX: 0000000000000000 RSI: 000000000000001e RDI: 00007fb771ed5f40 [ 297.518776][T13298] RBP: 00007fb771ed7da0 R08: 00000000000005a0 R09: 00000018f984cfcf [ 297.518797][T13298] R10: 00007fb771ed7cb0 R11: 0000000000000246 R12: 0000000000048905 [ 297.518846][T13298] R13: 00007fb771ed6090 R14: ffffffffffffffff R15: 00007ffff984cdf0 [ 297.518865][T13298] [ 297.518872][T13298] memory: usage 307200kB, limit 307200kB, failcnt 10383 [ 297.755591][T13298] memory+swap: usage 256184kB, limit 9007199254740988kB, failcnt 0 [ 297.764149][T13298] kmem: usage 240804kB, limit 9007199254740988kB, failcnt 0 [ 297.771486][T13298] Memory cgroup stats for /syz4: [ 297.877872][T13298] cache 8192 [ 297.886724][T13298] rss 4096 [ 297.889752][T13298] shmem 0 [ 297.892794][T13298] mapped_file 0 [ 297.896262][T13298] dirty 0 [ 297.899197][T13298] writeback 4096 [ 297.902870][T13298] workingset_refault_anon 3374 [ 297.907649][T13298] workingset_refault_file 2458 [ 297.913003][T13298] swap 10059776 [ 297.916470][T13298] swapcached 8192 [ 297.920111][T13298] pgpgin 513174 [ 297.923604][T13298] pgpgout 513169 [ 297.927163][T13298] pgfault 425513 [ 297.930737][T13298] pgmajfault 451 [ 297.934379][T13298] inactive_anon 8192 [ 297.938331][T13298] active_anon 0 [ 297.942422][T13298] inactive_file 12288 [ 297.946413][T13298] active_file 0 [ 297.949923][T13298] unevictable 0 [ 297.953447][T13298] hierarchical_memory_limit 314572800 [ 297.958843][T13298] hierarchical_memsw_limit 9223372036854771712 [ 297.965071][T13298] total_cache 8192 [ 297.968789][T13298] total_rss 4096 [ 297.972971][T13298] total_shmem 0 [ 297.976446][T13298] total_mapped_file 0 [ 297.980428][T13298] total_dirty 0 [ 297.983931][T13298] total_writeback 4096 [ 297.988009][T13298] total_workingset_refault_anon 3374 [ 297.993355][T13298] total_workingset_refault_file 2458 [ 297.998724][T13298] total_swap 10059776 [ 298.003441][T13298] total_swapcached 8192 [ 298.007695][T13298] total_pgpgin 513174 [ 298.011735][T13298] total_pgpgout 513169 [ 298.015816][T13298] total_pgfault 425513 [ 298.019923][T13298] total_pgmajfault 451 [ 298.024020][T13298] total_inactive_anon 8192 [ 298.028437][T13298] total_active_anon 0 [ 298.033130][T13298] total_inactive_file 12288 [ 298.037731][T13298] total_active_file 0 [ 298.041776][T13298] total_unevictable 0 [ 298.045756][T13298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3399,pid=13298,uid=0 [ 298.060553][T13298] Memory cgroup out of memory: Killed process 13298 (syz.4.3399) total-vm:93956kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 298.190093][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 298.820361][T13372] syz.3.3426 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 298.831244][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.3.3426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.831274][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.831287][T13372] Call Trace: [ 298.831293][T13372] [ 298.831301][T13372] __dump_stack+0x1d/0x30 [ 298.831364][T13372] dump_stack_lvl+0xe8/0x140 [ 298.831390][T13372] dump_stack+0x15/0x1b [ 298.831413][T13372] dump_header+0x81/0x220 [ 298.831432][T13372] oom_kill_process+0x342/0x400 [ 298.831492][T13372] out_of_memory+0x979/0xb80 [ 298.831528][T13372] try_charge_memcg+0x610/0xa10 [ 298.831561][T13372] charge_memcg+0x51/0xc0 [ 298.831652][T13372] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 298.831683][T13372] __read_swap_cache_async+0x17b/0x2d0 [ 298.831708][T13372] swap_cluster_readahead+0x262/0x3c0 [ 298.831807][T13372] swapin_readahead+0xde/0x6f0 [ 298.831834][T13372] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 298.831949][T13372] ? __rcu_read_unlock+0x34/0x70 [ 298.831976][T13372] ? __rcu_read_unlock+0x4f/0x70 [ 298.832001][T13372] ? swap_cache_get_folio+0x277/0x280 [ 298.832046][T13372] do_swap_page+0x2ae/0x2370 [ 298.832084][T13372] ? css_rstat_updated+0xb7/0x240 [ 298.832110][T13372] ? __pfx_default_wake_function+0x10/0x10 [ 298.832195][T13372] handle_mm_fault+0x9a5/0x2be0 [ 298.832228][T13372] ? vma_start_read+0x141/0x1f0 [ 298.832269][T13372] do_user_addr_fault+0x630/0x1080 [ 298.832311][T13372] exc_page_fault+0x62/0xa0 [ 298.832349][T13372] asm_exc_page_fault+0x26/0x30 [ 298.832371][T13372] RIP: 0033:0x7f5df875593c [ 298.832388][T13372] Code: 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 298.832471][T13372] RSP: 002b:00007ffe9aabadb0 EFLAGS: 00010283 [ 298.832493][T13372] RAX: 0000000000000000 RBX: 00007f5df8ad7080 RCX: 0000000000000000 [ 298.832509][T13372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555593ca0808 [ 298.832524][T13372] RBP: 00007f5df8ad7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 298.832539][T13372] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000490bc [ 298.832554][T13372] R13: 00007f5df8ad6090 R14: ffffffffffffffff R15: 00007ffe9aabaec0 [ 298.832577][T13372] [ 298.832586][T13372] memory: usage 307200kB, limit 307200kB, failcnt 28470 [ 299.057578][T13372] memory+swap: usage 283560kB, limit 9007199254740988kB, failcnt 0 [ 299.065537][T13372] kmem: usage 265968kB, limit 9007199254740988kB, failcnt 0 [ 299.072889][T13372] Memory cgroup stats for /syz3: [ 299.073763][T13372] cache 0 [ 299.081833][T13372] rss 0 [ 299.084685][T13372] shmem 0 [ 299.087631][T13372] mapped_file 0 [ 299.091117][T13372] dirty 0 [ 299.094059][T13372] writeback 4096 [ 299.097613][T13372] workingset_refault_anon 116 [ 299.102329][T13372] workingset_refault_file 2329 [ 299.107135][T13372] swap 17854464 [ 299.110713][T13372] swapcached 12288 [ 299.114474][T13372] pgpgin 434224 [ 299.117946][T13372] pgpgout 434221 [ 299.121699][T13372] pgfault 364750 [ 299.125278][T13372] pgmajfault 65 [ 299.128739][T13372] inactive_anon 8192 [ 299.132701][T13372] active_anon 0 [ 299.136180][T13372] inactive_file 0 [ 299.139879][T13372] active_file 0 [ 299.143378][T13372] unevictable 0 [ 299.146863][T13372] hierarchical_memory_limit 314572800 [ 299.152268][T13372] hierarchical_memsw_limit 9223372036854771712 [ 299.158431][T13372] total_cache 0 [ 299.161992][T13372] total_rss 0 [ 299.165290][T13372] total_shmem 0 [ 299.168756][T13372] total_mapped_file 0 [ 299.172787][T13372] total_dirty 0 [ 299.176244][T13372] total_writeback 4096 [ 299.180329][T13372] total_workingset_refault_anon 116 [ 299.185560][T13372] total_workingset_refault_file 2329 [ 299.190865][T13372] total_swap 17854464 [ 299.194961][T13372] total_swapcached 12288 [ 299.199206][T13372] total_pgpgin 434224 [ 299.203210][T13372] total_pgpgout 434221 [ 299.207280][T13372] total_pgfault 364750 [ 299.211365][T13372] total_pgmajfault 65 [ 299.215354][T13372] total_inactive_anon 8192 [ 299.219879][T13372] total_active_anon 0 [ 299.223918][T13372] total_inactive_file 0 [ 299.228086][T13372] total_active_file 0 [ 299.232112][T13372] total_unevictable 0 [ 299.236347][T13372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3426,pid=13372,uid=0 [ 299.251184][T13372] Memory cgroup out of memory: Killed process 13372 (syz.3.3426) total-vm:93884kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 299.497483][T13375] loop1: detected capacity change from 0 to 512 [ 299.538369][T13375] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3427: bad orphan inode 11862016 [ 299.578093][T13375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.648723][T13375] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.698199][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'. [ 299.797334][T12266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 300.625654][ T41] bridge_slave_1: left allmulticast mode [ 300.631391][ T41] bridge_slave_1: left promiscuous mode [ 300.637241][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.793242][ T41] bridge_slave_0: left allmulticast mode [ 300.798935][ T41] bridge_slave_0: left promiscuous mode [ 300.804766][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.894248][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.905475][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.932554][ T41] bond0 (unregistering): Released all slaves [ 300.983214][ T41] tipc: Disabling bearer [ 300.988490][ T41] tipc: Left network mode [ 301.001056][T12423] ================================================================== [ 301.009274][T12423] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 301.019207][T12423] [ 301.021622][T12423] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 301.029791][T12423] tick_do_update_jiffies64+0x113/0x1c0 [ 301.035371][T12423] tick_nohz_handler+0x7f/0x2d0 [ 301.040249][T12423] __hrtimer_run_queues+0x20f/0x5a0 [ 301.045463][T12423] hrtimer_interrupt+0x21a/0x460 [ 301.050409][T12423] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 301.056315][T12423] sysvec_apic_timer_interrupt+0x6f/0x80 [ 301.061963][T12423] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.067953][T12423] __tsan_read8+0x122/0x190 [ 301.072468][T12423] build_skb_around+0x103/0x200 [ 301.077940][T12423] __xdp_build_skb_from_frame+0xaa/0x2f0 [ 301.083584][T12423] bpf_test_run_xdp_live+0xe15/0x11c0 [ 301.088974][T12423] bpf_prog_test_run_xdp+0x525/0x970 [ 301.094273][T12423] bpf_prog_test_run+0x22a/0x390 [ 301.099226][T12423] __sys_bpf+0x4c0/0x7c0 [ 301.103473][T12423] __x64_sys_bpf+0x41/0x50 [ 301.107905][T12423] x64_sys_call+0x2aee/0x3000 [ 301.112590][T12423] do_syscall_64+0xd2/0x200 [ 301.117119][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.123019][T12423] [ 301.125346][T12423] read to 0xffffffff868099c0 of 8 bytes by task 12423 on cpu 0: [ 301.132974][T12423] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 301.139239][T12423] count_shadow_nodes+0x6a/0x230 [ 301.144187][T12423] do_shrink_slab+0x63/0x680 [ 301.148790][T12423] shrink_slab+0x448/0x760 [ 301.153400][T12423] shrink_node+0x6c3/0x2120 [ 301.157917][T12423] do_try_to_free_pages+0x3f6/0xcd0 [ 301.163130][T12423] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 301.169037][T12423] try_charge_memcg+0x383/0xa10 [ 301.173897][T12423] charge_memcg+0x51/0xc0 [ 301.178238][T12423] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 301.184227][T12423] __read_swap_cache_async+0x17b/0x2d0 [ 301.189695][T12423] swap_cluster_readahead+0x362/0x3c0 [ 301.195186][T12423] swapin_readahead+0xde/0x6f0 [ 301.199974][T12423] do_swap_page+0x2ae/0x2370 [ 301.204586][T12423] handle_mm_fault+0x9a5/0x2be0 [ 301.209453][T12423] do_user_addr_fault+0x630/0x1080 [ 301.214573][T12423] exc_page_fault+0x62/0xa0 [ 301.219093][T12423] asm_exc_page_fault+0x26/0x30 [ 301.223950][T12423] [ 301.226274][T12423] value changed: 0x000000010000002b -> 0x000000010000002c [ 301.233382][T12423] [ 301.235705][T12423] Reported by Kernel Concurrency Sanitizer on: [ 301.241857][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.251840][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.261906][T12423] ================================================================== [ 301.304409][T13409] syz.3.3440 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 301.315350][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.3.3440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.315381][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.315394][T13409] Call Trace: [ 301.315402][T13409] [ 301.315492][T13409] __dump_stack+0x1d/0x30 [ 301.315520][T13409] dump_stack_lvl+0xe8/0x140 [ 301.315542][T13409] dump_stack+0x15/0x1b [ 301.315634][T13409] dump_header+0x81/0x220 [ 301.315657][T13409] oom_kill_process+0x342/0x400 [ 301.315696][T13409] out_of_memory+0x979/0xb80 [ 301.315732][T13409] try_charge_memcg+0x610/0xa10 [ 301.315765][T13409] charge_memcg+0x51/0xc0 [ 301.315889][T13409] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 301.315922][T13409] __read_swap_cache_async+0x17b/0x2d0 [ 301.315948][T13409] swap_cluster_readahead+0x362/0x3c0 [ 301.316052][T13409] swapin_readahead+0xde/0x6f0 [ 301.316080][T13409] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 301.316112][T13409] ? __rcu_read_unlock+0x34/0x70 [ 301.316144][T13409] ? __rcu_read_unlock+0x4f/0x70 [ 301.316175][T13409] ? swap_cache_get_folio+0x277/0x280 [ 301.316202][T13409] do_swap_page+0x2ae/0x2370 [ 301.316234][T13409] ? css_rstat_updated+0xb7/0x240 [ 301.316255][T13409] ? __pfx_default_wake_function+0x10/0x10 [ 301.316335][T13409] handle_mm_fault+0x9a5/0x2be0 [ 301.316361][T13409] ? vma_start_read+0x141/0x1f0 [ 301.316513][T13409] do_user_addr_fault+0x630/0x1080 [ 301.316545][T13409] exc_page_fault+0x62/0xa0 [ 301.316660][T13409] asm_exc_page_fault+0x26/0x30 [ 301.316681][T13409] RIP: 0033:0x7f5df8755754 [ 301.316698][T13409] Code: 01 00 00 e8 7e 9f 12 00 48 85 c0 74 18 bb 03 00 00 00 0f 1f 40 00 89 df 83 c3 01 e8 a6 8b 12 00 83 fb 1e 75 f1 e8 9c c5 ff ff <80> 3d 84 ff ea 00 00 74 4a 48 8b 44 24 58 b9 64 00 00 00 31 d2 31 [ 301.316717][T13409] RSP: 002b:00007ffe9aabadb0 EFLAGS: 00010246 [ 301.316737][T13409] RAX: 0000000000000000 RBX: 00007f5df8ad7da0 RCX: 00007f5df7ae1000 [ 301.316754][T13409] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f5df8ad5f40 [ 301.316775][T13409] RBP: 00007f5df8ad7da0 R08: 000000000000074c R09: 000000189aabb09f [ 301.316791][T13409] R10: 00007f5df8ad7cb0 R11: 0000000000000246 R12: 0000000000049757 [ 301.316806][T13409] R13: 00007f5df8ad6090 R14: ffffffffffffffff R15: 00007ffe9aabaec0 [ 301.316827][T13409] [ 301.316834][T13409] memory: usage 307200kB, limit 307200kB, failcnt 28841 [ 301.546508][T13409] memory+swap: usage 194624kB, limit 9007199254740988kB, failcnt 0 [ 301.554457][T13409] kmem: usage 166768kB, limit 9007199254740988kB, failcnt 0 [ 301.561796][T13409] Memory cgroup stats for /syz3: [ 301.562421][T13409] cache 4096 [ 301.570580][T13409] rss 8192 [ 301.574230][T13409] shmem 0 [ 301.577181][T13409] mapped_file 4096 [ 301.580915][T13409] dirty 0 [ 301.583910][T13409] writeback 0 [ 301.587203][T13409] workingset_refault_anon 173 [ 301.591968][T13409] workingset_refault_file 2466 [ 301.596857][T13409] swap 17850368 [ 301.600329][T13409] swapcached 12288 [ 301.604653][T13409] pgpgin 434867 [ 301.608141][T13409] pgpgout 434862 [ 301.611724][T13409] pgfault 365589 [ 301.615282][T13409] pgmajfault 95 [ 301.618748][T13409] inactive_anon 0 [ 301.622414][T13409] active_anon 16384 [ 301.626281][T13409] inactive_file 0 [ 301.629932][T13409] active_file 4096 [ 301.634351][T13409] unevictable 0 [ 301.637824][T13409] hierarchical_memory_limit 314572800 [ 301.643234][T13409] hierarchical_memsw_limit 9223372036854771712 [ 301.649460][T13409] total_cache 4096 [ 301.653197][T13409] total_rss 8192 [ 301.656746][T13409] total_shmem 0 [ 301.660213][T13409] total_mapped_file 4096 [ 301.665182][T13409] total_dirty 0 [ 301.668710][T13409] total_writeback 0 [ 301.672545][T13409] total_workingset_refault_anon 173 [ 301.677747][T13409] total_workingset_refault_file 2466 [ 301.683118][T13409] total_swap 17850368 [ 301.687195][T13409] total_swapcached 12288 [ 301.692080][T13409] total_pgpgin 434867 [ 301.696135][T13409] total_pgpgout 434862 [ 301.700216][T13409] total_pgfault 365589 [ 301.704382][T13409] total_pgmajfault 95 [ 301.708379][T13409] total_inactive_anon 0 [ 301.712590][T13409] total_active_anon 16384 [ 301.716937][T13409] total_inactive_file 0 [ 301.721708][T13409] total_active_file 4096 [ 301.726057][T13409] total_unevictable 0 [ 301.730174][T13409] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3440,pid=13409,uid=0 [ 301.744953][T13409] Memory cgroup out of memory: Killed process 13409 (syz.3.3440) total-vm:93884kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 301.805466][ T41] hsr_slave_0: left promiscuous mode [ 301.821755][ T41] hsr_slave_1: left promiscuous mode [ 301.852910][ T41] team0 (unregistering): Port device team_slave_1 removed [ 301.862703][ T41] team0 (unregistering): Port device team_slave_0 removed [ 301.892369][ T41] team0 (unregistering): Port device dummy0 removed [ 302.283873][ T41] IPVS: stop unused estimator thread 0... [ 305.682915][ T3452] bridge_slave_1: left allmulticast mode [ 305.688689][ T3452] bridge_slave_1: left promiscuous mode [ 305.694400][ T3452] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.701953][ T3452] bridge_slave_0: left allmulticast mode [ 305.707768][ T3452] bridge_slave_0: left promiscuous mode [ 305.713604][ T3452] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.793408][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.802730][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.812003][ T3452] bond0 (unregistering): Released all slaves [ 305.856055][ T3452] hsr_slave_0: left promiscuous mode [ 305.861696][ T3452] hsr_slave_1: left promiscuous mode [ 305.884338][ T3452] team0 (unregistering): Port device team_slave_1 removed [ 305.894566][ T3452] team0 (unregistering): Port device team_slave_0 removed [ 305.901996][ T41] smc: removing ib device syz! [ 305.918810][ T3452] team0 (unregistering): Port device dummy0 removed [ 310.802616][ T41] bridge_slave_1: left allmulticast mode [ 310.808298][ T41] bridge_slave_1: left promiscuous mode [ 310.814102][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.823424][ T41] bridge_slave_0: left allmulticast mode [ 310.829097][ T41] bridge_slave_0: left promiscuous mode [ 310.835434][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.972905][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.982043][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.991219][ T41] bond0 (unregistering): Released all slaves