last executing test programs: 1.399698389s ago: executing program 2 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.199758635s ago: executing program 4 (id=836): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000003000001"], 0x36) 1.199436595s ago: executing program 2 (id=837): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.019665099s ago: executing program 2 (id=838): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.0084365s ago: executing program 2 (id=839): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) 966.770253ms ago: executing program 2 (id=840): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() prlimit64(r3, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, 0x0}) 636.19663ms ago: executing program 3 (id=848): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f00000047c0)="eb5b1ed1fb0f5503061c60f543e001ce7a16a6e596e742f88f5b4d8646b01ea013e40ebe8fe6b882", 0x28}, {&(0x7f0000004840)="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", 0x5ab}], 0x2}}], 0x6, 0x40000) 559.674525ms ago: executing program 1 (id=850): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x2400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xf000, 0x863, 0x0) 559.199316ms ago: executing program 3 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x29, 0x0, 0x0) 496.085741ms ago: executing program 1 (id=855): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 466.584133ms ago: executing program 1 (id=857): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x10000001}) close_range(r1, 0xffffffffffffffff, 0x0) 439.504535ms ago: executing program 1 (id=858): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) 428.830476ms ago: executing program 0 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r3 = dup2(r2, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x38, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x24000800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 395.834419ms ago: executing program 0 (id=860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x80800) 337.981243ms ago: executing program 3 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 337.463013ms ago: executing program 0 (id=862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 286.129557ms ago: executing program 4 (id=863): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0) r0 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd_index=0xa, 0x0, 0x0, 0xffffffdc, 0x2, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x66ae, 0x4, 0x2, 0x0, 0x0) 285.671128ms ago: executing program 0 (id=864): r0 = socket(0x23, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) close_range(r0, r1, 0x0) 285.146517ms ago: executing program 3 (id=865): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 275.278278ms ago: executing program 4 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x802, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) 246.30462ms ago: executing program 0 (id=867): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) 142.832869ms ago: executing program 1 (id=868): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 142.582699ms ago: executing program 3 (id=869): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 142.420609ms ago: executing program 4 (id=870): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x100042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 80.169484ms ago: executing program 2 (id=871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 74.755374ms ago: executing program 4 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="bf42bfd8", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="669d40a53da5528383", 0x9}], 0x1}}], 0x3, 0x28048005) 58.754805ms ago: executing program 4 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 46.634527ms ago: executing program 3 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 441.44µs ago: executing program 0 (id=875): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 0s ago: executing program 1 (id=876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x202142, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xc4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) kernel console output (not intermixed with test programs): [ 18.621890][ T29] audit: type=1400 audit(1765701096.395:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.643850][ T29] audit: type=1400 audit(1765701096.395:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.666384][ T29] audit: type=1400 audit(1765701096.395:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.689327][ T29] audit: type=1400 audit(1765701096.395:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.712270][ T29] audit: type=1400 audit(1765701096.395:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 23.418546][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 23.418560][ T29] audit: type=1400 audit(1765701101.185:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.447498][ T29] audit: type=1400 audit(1765701101.215:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.448253][ T3305] cgroup: Unknown subsys name 'net' [ 23.475125][ T29] audit: type=1400 audit(1765701101.245:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.592433][ T3305] cgroup: Unknown subsys name 'cpuset' [ 23.598586][ T3305] cgroup: Unknown subsys name 'rlimit' [ 23.747514][ T29] audit: type=1400 audit(1765701101.515:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.773865][ T29] audit: type=1400 audit(1765701101.515:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.786702][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.794492][ T29] audit: type=1400 audit(1765701101.515:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.823555][ T29] audit: type=1400 audit(1765701101.515:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.843808][ T29] audit: type=1400 audit(1765701101.525:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.868691][ T29] audit: type=1400 audit(1765701101.525:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.878411][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.891879][ T29] audit: type=1400 audit(1765701101.535:79): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.753241][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.820911][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.861065][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.868212][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.875655][ T3317] bridge_slave_0: entered allmulticast mode [ 25.882451][ T3317] bridge_slave_0: entered promiscuous mode [ 25.897886][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.905016][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.912147][ T3317] bridge_slave_1: entered allmulticast mode [ 25.918730][ T3317] bridge_slave_1: entered promiscuous mode [ 25.940551][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 25.952575][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 25.980167][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.006605][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.023922][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.030971][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.038115][ T3316] bridge_slave_0: entered allmulticast mode [ 26.044480][ T3316] bridge_slave_0: entered promiscuous mode [ 26.062042][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.069105][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.076321][ T3316] bridge_slave_1: entered allmulticast mode [ 26.082696][ T3316] bridge_slave_1: entered promiscuous mode [ 26.093110][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.113324][ T3317] team0: Port device team_slave_0 added [ 26.133430][ T3317] team0: Port device team_slave_1 added [ 26.152562][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.161687][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.168751][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.176123][ T3320] bridge_slave_0: entered allmulticast mode [ 26.182494][ T3320] bridge_slave_0: entered promiscuous mode [ 26.202625][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.211756][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.218786][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.226064][ T3320] bridge_slave_1: entered allmulticast mode [ 26.232566][ T3320] bridge_slave_1: entered promiscuous mode [ 26.245643][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.252712][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.259831][ T3325] bridge_slave_0: entered allmulticast mode [ 26.266251][ T3325] bridge_slave_0: entered promiscuous mode [ 26.285811][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.292853][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.318788][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.332129][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.339212][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.346424][ T3325] bridge_slave_1: entered allmulticast mode [ 26.352824][ T3325] bridge_slave_1: entered promiscuous mode [ 26.359650][ T3316] team0: Port device team_slave_0 added [ 26.370165][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.377188][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.403244][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.421179][ T3316] team0: Port device team_slave_1 added [ 26.427803][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.452989][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.472544][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.491851][ T3320] team0: Port device team_slave_0 added [ 26.497451][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.504530][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.511788][ T3315] bridge_slave_0: entered allmulticast mode [ 26.518073][ T3315] bridge_slave_0: entered promiscuous mode [ 26.525513][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.540669][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.547647][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.573546][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.585168][ T3320] team0: Port device team_slave_1 added [ 26.590992][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.598033][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.623989][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.639714][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.646801][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.654001][ T3315] bridge_slave_1: entered allmulticast mode [ 26.660270][ T3315] bridge_slave_1: entered promiscuous mode [ 26.687861][ T3325] team0: Port device team_slave_0 added [ 26.700453][ T3317] hsr_slave_0: entered promiscuous mode [ 26.706464][ T3317] hsr_slave_1: entered promiscuous mode [ 26.717554][ T3325] team0: Port device team_slave_1 added [ 26.723464][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.730381][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.756329][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.767819][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.774776][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.800903][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.812842][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.840938][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.861812][ T3316] hsr_slave_0: entered promiscuous mode [ 26.867743][ T3316] hsr_slave_1: entered promiscuous mode [ 26.873650][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 26.879371][ T3316] Cannot create hsr debugfs directory [ 26.895601][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.902579][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.928477][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.948945][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.955966][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.981872][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.005103][ T3315] team0: Port device team_slave_0 added [ 27.017619][ T3320] hsr_slave_0: entered promiscuous mode [ 27.023921][ T3320] hsr_slave_1: entered promiscuous mode [ 27.029844][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 27.035589][ T3320] Cannot create hsr debugfs directory [ 27.048677][ T3315] team0: Port device team_slave_1 added [ 27.091579][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.098580][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.124468][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.137261][ T3325] hsr_slave_0: entered promiscuous mode [ 27.143340][ T3325] hsr_slave_1: entered promiscuous mode [ 27.149165][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 27.155013][ T3325] Cannot create hsr debugfs directory [ 27.169591][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.176568][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.202599][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.286043][ T3315] hsr_slave_0: entered promiscuous mode [ 27.292124][ T3315] hsr_slave_1: entered promiscuous mode [ 27.297867][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.303609][ T3315] Cannot create hsr debugfs directory [ 27.363710][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.377500][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.393289][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.406216][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.439375][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.454712][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.464532][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.480331][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.507035][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.515830][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.528145][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.536811][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.559086][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.567859][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.592915][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.601808][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.610204][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.619396][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.627888][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.636562][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.678871][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.718182][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.729799][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.741927][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.749060][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.760782][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.775148][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.782218][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.800266][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.809367][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.822490][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.829533][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.841569][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.851314][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.858382][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.873433][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.880602][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.889151][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.896245][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.906577][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.927627][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.941068][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.954655][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.961772][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.976306][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.983374][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.997511][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.004591][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.017614][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.024817][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.118321][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.164120][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.175538][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.208929][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.220040][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.299489][ T3325] veth0_vlan: entered promiscuous mode [ 28.325072][ T3325] veth1_vlan: entered promiscuous mode [ 28.353436][ T3316] veth0_vlan: entered promiscuous mode [ 28.379544][ T3315] veth0_vlan: entered promiscuous mode [ 28.387047][ T3316] veth1_vlan: entered promiscuous mode [ 28.403332][ T3315] veth1_vlan: entered promiscuous mode [ 28.415551][ T3320] veth0_vlan: entered promiscuous mode [ 28.424213][ T3320] veth1_vlan: entered promiscuous mode [ 28.442699][ T3315] veth0_macvtap: entered promiscuous mode [ 28.449207][ T3325] veth0_macvtap: entered promiscuous mode [ 28.461126][ T3325] veth1_macvtap: entered promiscuous mode [ 28.470071][ T3315] veth1_macvtap: entered promiscuous mode [ 28.490674][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.499117][ T3317] veth0_vlan: entered promiscuous mode [ 28.507523][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.517874][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.529426][ T3316] veth0_macvtap: entered promiscuous mode [ 28.536469][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.549989][ T3320] veth0_macvtap: entered promiscuous mode [ 28.556746][ T1809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.566859][ T1809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.578403][ T3316] veth1_macvtap: entered promiscuous mode [ 28.585110][ T3317] veth1_vlan: entered promiscuous mode [ 28.591020][ T1809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600633][ T3320] veth1_macvtap: entered promiscuous mode [ 28.608215][ T1809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.620544][ T1809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629402][ T1809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.641166][ T1809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.653421][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 28.653435][ T29] audit: type=1400 audit(1765701106.425:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.nCbgu6/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.653857][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.671655][ T29] audit: type=1400 audit(1765701106.425:91): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.712789][ T29] audit: type=1400 audit(1765701106.425:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.nCbgu6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.737988][ T29] audit: type=1400 audit(1765701106.425:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.759729][ T29] audit: type=1400 audit(1765701106.425:94): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.nCbgu6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.786299][ T29] audit: type=1400 audit(1765701106.425:95): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.nCbgu6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.813702][ T29] audit: type=1400 audit(1765701106.425:96): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.834191][ T29] audit: type=1400 audit(1765701106.605:97): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.865582][ T354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.876336][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.883959][ T3317] veth0_macvtap: entered promiscuous mode [ 28.896886][ T29] audit: type=1400 audit(1765701106.605:98): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.922904][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.943165][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.956642][ T29] audit: type=1400 audit(1765701106.725:99): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.988492][ T3317] veth1_macvtap: entered promiscuous mode [ 28.995581][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.005526][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.024355][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.056956][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.068759][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.085297][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.108540][ T323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155705][ T323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.168034][ T323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.203356][ T323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.234719][ T1809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.275344][ T1809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.322820][ T3513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.336219][ T3516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.361638][ T1809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.384332][ T1809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.417534][ T1809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.554960][ T3529] loop0: detected capacity change from 0 to 256 [ 29.565536][ T3529] FAT-fs (loop0): bogus number of FAT sectors [ 29.571791][ T3529] FAT-fs (loop0): Can't find a valid FAT filesystem [ 29.691858][ C0] hrtimer: interrupt took 47924 ns [ 29.707183][ T3513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.779594][ T3513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.816250][ T3546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.062013][ T3513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.101018][ T3559] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.26'. [ 30.115199][ T3559] netlink: zone id is out of range [ 30.120321][ T3559] netlink: zone id is out of range [ 30.148311][ T3559] netlink: zone id is out of range [ 30.162541][ T3559] netlink: zone id is out of range [ 30.167841][ T3559] netlink: zone id is out of range [ 30.173155][ T3559] netlink: zone id is out of range [ 30.178315][ T3559] netlink: zone id is out of range [ 30.183553][ T3559] netlink: zone id is out of range [ 30.188651][ T3559] netlink: zone id is out of range [ 30.193861][ T3559] netlink: zone id is out of range [ 30.227366][ T3546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.249317][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 30.273719][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 30.283245][ T354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.294956][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.309437][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.324725][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355864][ T3569] loop3: detected capacity change from 0 to 128 [ 30.454616][ T3521] Process accounting resumed [ 30.466267][ T3546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.702377][ T3593] geneve2: entered promiscuous mode [ 30.707709][ T3593] geneve2: entered allmulticast mode [ 30.797784][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 31.124244][ T3546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.155713][ T3660] mmap: syz.2.43 (3660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.372073][ T3598] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404255][ T3613] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.422334][ T3613] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.430875][ T3613] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.584832][ T3694] loop4: detected capacity change from 0 to 128 [ 31.627822][ T3694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.49'. [ 32.061410][ T3727] syz.4.65 (3727) used greatest stack depth: 10192 bytes left [ 32.321295][ T3749] netlink: 9 bytes leftover after parsing attributes in process `syz.3.75'. [ 32.451896][ T3749] netlink: 9 bytes leftover after parsing attributes in process `syz.3.75'. [ 32.598802][ T3762] loop1: detected capacity change from 0 to 1024 [ 32.607480][ T3762] ======================================================= [ 32.607480][ T3762] WARNING: The mand mount option has been deprecated and [ 32.607480][ T3762] and is ignored by this kernel. Remove the mand [ 32.607480][ T3762] option from the mount to silence this warning. [ 32.607480][ T3762] ======================================================= [ 32.668841][ T3762] EXT4-fs: Ignoring removed nobh option [ 32.684399][ T3767] loop0: detected capacity change from 0 to 1024 [ 32.694260][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.714829][ T3767] EXT4-fs: inline encryption not supported [ 32.720676][ T3767] EXT4-fs: Ignoring removed orlov option [ 32.730715][ T3767] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 32.744449][ T3762] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 32.773575][ T3775] loop2: detected capacity change from 0 to 1024 [ 32.786256][ T3767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 32.789038][ T3775] EXT4-fs: Ignoring removed nobh option [ 32.801327][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.820755][ T3767] System zones: 0-1, 3-12 [ 32.835491][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.866733][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.879374][ T3781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.917797][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.978738][ T3775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.991149][ T3775] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.066388][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.295529][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 33.339095][ T3812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.648416][ T3835] vlan2: entered allmulticast mode [ 33.656801][ T3839] syz.0.108 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.667657][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 33.667669][ T29] audit: type=1326 audit(1765701111.435:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.722114][ T29] audit: type=1326 audit(1765701111.435:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745461][ T29] audit: type=1326 audit(1765701111.445:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745559][ T29] audit: type=1326 audit(1765701111.475:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745587][ T29] audit: type=1326 audit(1765701111.475:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745614][ T29] audit: type=1326 audit(1765701111.475:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745660][ T29] audit: type=1326 audit(1765701111.475:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745683][ T29] audit: type=1326 audit(1765701111.475:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745705][ T29] audit: type=1326 audit(1765701111.475:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.745751][ T29] audit: type=1326 audit(1765701111.475:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf15cd2005 code=0x7ffc0000 [ 33.767228][ T3843] loop4: detected capacity change from 0 to 512 [ 33.767620][ T3843] EXT4-fs: dax option not supported [ 33.844984][ T3846] SELinux: failed to load policy [ 33.879588][ T3847] loop0: detected capacity change from 0 to 1024 [ 33.879935][ T3847] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 33.970702][ T3853] loop3: detected capacity change from 0 to 8192 [ 33.979144][ T3844] loop2: detected capacity change from 0 to 512 [ 33.986693][ T3844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.026349][ T3844] EXT4-fs (loop2): 1 orphan inode deleted [ 34.026650][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.026783][ T3844] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.239816][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.302303][ T3870] Zero length message leads to an empty skb [ 34.428337][ T3888] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 34.460783][ T3890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.483505][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.519795][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.548094][ T3898] sd 0:0:1:0: device reset [ 34.654813][ T3910] set_capacity_and_notify: 2 callbacks suppressed [ 34.654828][ T3910] loop0: detected capacity change from 0 to 1024 [ 34.670853][ T3910] EXT4-fs: Ignoring removed nobh option [ 34.701329][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.726041][ T3910] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 34.764635][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.806251][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.813679][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.821937][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.829340][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.842810][ T3923] loop1: detected capacity change from 0 to 1024 [ 34.849589][ T3923] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 35.029676][ T3937] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=3937 comm=syz.1.147 [ 35.280329][ T3946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.335694][ T3946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.422632][ T3946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.462078][ T3956] __nla_validate_parse: 12 callbacks suppressed [ 35.462091][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 35.479138][ T3946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.491217][ T3956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.498846][ T3956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.506903][ T3956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.514346][ T3956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.581875][ T3615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.597049][ T3615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.625508][ T3615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.652776][ T3615] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.743054][ T3959] bridge_slave_0: left allmulticast mode [ 35.748769][ T3959] bridge_slave_0: left promiscuous mode [ 35.754610][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.792447][ T3959] bridge_slave_1: left allmulticast mode [ 35.798139][ T3959] bridge_slave_1: left promiscuous mode [ 35.803869][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.821673][ T3964] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=3964 comm=syz.0.158 [ 35.840109][ T3966] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 35.866975][ T3959] bond0: (slave bond_slave_0): Releasing backup interface [ 35.885723][ T3959] bond0: (slave bond_slave_1): Releasing backup interface [ 35.900681][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 35.919568][ T3959] team0: Port device team_slave_0 removed [ 35.942505][ T3959] team0: Port device team_slave_1 removed [ 35.956884][ T3959] net_ratelimit: 3 callbacks suppressed [ 35.956898][ T3959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.989465][ T3966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.006410][ T3966] team0: Port device bond0 added [ 36.011546][ T3968] tipc: Started in network mode [ 36.016573][ T3968] tipc: Node identity 84e, cluster identity 4711 [ 36.022960][ T3968] tipc: Node number set to 2126 [ 36.203600][ T3982] futex_wake_op: syz.4.164 tries to shift op by -1; fix this program [ 36.346515][ T3994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.169'. [ 36.380572][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.508273][ T4003] bridge_slave_0: left allmulticast mode [ 36.514118][ T4003] bridge_slave_0: left promiscuous mode [ 36.515319][ T4008] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 36.519796][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.544544][ T4003] bridge_slave_1: left allmulticast mode [ 36.550297][ T4003] bridge_slave_1: left promiscuous mode [ 36.555979][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.565912][ T4003] bond0: (slave bond_slave_0): Releasing backup interface [ 36.575902][ T4003] bond0: (slave bond_slave_1): Releasing backup interface [ 36.587918][ T4003] team0: Port device team_slave_0 removed [ 36.618023][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 36.664167][ T4003] team0: Port device team_slave_1 removed [ 36.730066][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.737585][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.754320][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.761873][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.773755][ T4003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 36.854191][ T4008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.865259][ T4008] team0: Port device bond0 added [ 36.887873][ T4010] team0 (unregistering): Port device bond0 removed [ 36.950504][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.957732][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.990872][ T4014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.000391][ T4014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.036465][ T3615] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.049306][ T3615] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.069374][ T3615] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.088652][ T3615] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.128034][ T4025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 37.190195][ T4032] capability: warning: `syz.1.185' uses deprecated v2 capabilities in a way that may be insecure [ 37.223128][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 37.269172][ T4038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 37.283238][ T4041] loop0: detected capacity change from 0 to 256 [ 37.416884][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 37.426473][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.441790][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.471617][ T4056] geneve2: entered promiscuous mode [ 37.476898][ T4056] geneve2: entered allmulticast mode [ 37.714844][ T4071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 37.864624][ T4084] loop3: detected capacity change from 0 to 128 [ 37.877462][ T4084] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.890087][ T4084] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.915663][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.929995][ T4090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.999905][ T4101] loop3: detected capacity change from 0 to 128 [ 38.010473][ T4103] netlink: 'syz.4.218': attribute type 30 has an invalid length. [ 38.019165][ T4101] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.036542][ T4101] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.062772][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.118275][ T4110] batman_adv: batadv0: Adding interface: dummy0 [ 38.124606][ T4110] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.150563][ T4110] batman_adv: batadv0: Interface activated: dummy0 [ 38.162206][ T4110] batadv0: mtu less than device minimum [ 38.168468][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.179390][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.190405][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.201459][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.212454][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.223362][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.234421][ T4110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.390845][ T4131] process 'syz.3.231' launched './file1' with NULL argv: empty string added [ 38.490546][ T4146] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4146 comm=syz.4.236 [ 38.570672][ T4150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.670145][ T4150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.692134][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 38.692149][ T29] audit: type=1326 audit(1765701116.465:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.753674][ T29] audit: type=1326 audit(1765701116.465:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.777151][ T29] audit: type=1326 audit(1765701116.465:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.800448][ T29] audit: type=1326 audit(1765701116.465:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.823692][ T29] audit: type=1326 audit(1765701116.465:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.847169][ T29] audit: type=1326 audit(1765701116.465:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.870415][ T29] audit: type=1326 audit(1765701116.465:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.893642][ T29] audit: type=1326 audit(1765701116.465:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.916858][ T29] audit: type=1400 audit(1765701116.465:652): avc: denied { write } for pid=4152 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.935769][ T29] audit: type=1326 audit(1765701116.465:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 38.995911][ T4150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.066853][ T4150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.110545][ T4169] loop0: detected capacity change from 0 to 1024 [ 39.119531][ T4169] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.246: bad orphan inode 134217728 [ 39.134204][ T4169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.154044][ T3642] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.165907][ T3604] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.177919][ T3642] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.189109][ T3642] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.405019][ T4175] xt_hashlimit: max too large, truncated to 1048576 [ 39.442836][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.720946][ T4219] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 39.910723][ T4231] bridge_slave_0: left allmulticast mode [ 39.916500][ T4231] bridge_slave_0: left promiscuous mode [ 39.922274][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.952041][ T4232] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 39.955695][ T4231] bridge_slave_1: left allmulticast mode [ 39.965846][ T4231] bridge_slave_1: left promiscuous mode [ 39.971567][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.996936][ T4231] bond0: (slave bond_slave_0): Releasing backup interface [ 40.006892][ T4231] bond0: (slave bond_slave_1): Releasing backup interface [ 40.019116][ T4231] team0: Port device team_slave_0 removed [ 40.028034][ T4231] team0: Port device team_slave_1 removed [ 40.051215][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.061275][ T4232] team0: Port device bond0 added [ 40.100720][ T4239] team0 (unregistering): Port device bond0 removed [ 40.123205][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.142804][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.150838][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.170012][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.180176][ T4251] batman_adv: batadv0: Interface deactivated: dummy0 [ 40.186987][ T4251] batman_adv: batadv0: Removing interface: dummy0 [ 40.421271][ T4276] Driver unsupported XDP return value 0 on prog (id 212) dev N/A, expect packet loss! [ 40.549299][ T4288] loop3: detected capacity change from 0 to 512 [ 40.563693][ T4288] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.575431][ T4288] EXT4-fs (loop3): invalid journal inode [ 40.581221][ T4288] EXT4-fs (loop3): can't get journal size [ 40.590932][ T4288] EXT4-fs (loop3): 1 truncate cleaned up [ 40.597298][ T4288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.679452][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.884033][ T3642] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.524299][ T4326] __nla_validate_parse: 4 callbacks suppressed [ 41.524316][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 41.838119][ T4333] loop0: detected capacity change from 0 to 512 [ 41.852124][ T4333] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 42.006249][ T4338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.088557][ T4338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.188149][ T4338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.291313][ T4338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.358088][ T3604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.370706][ T3604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.386628][ T3604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.396081][ T3604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.921772][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.392297][ T4406] ip6erspan0: entered promiscuous mode [ 43.466524][ T4410] netlink: 3 bytes leftover after parsing attributes in process `{/}\'. [ 43.491168][ T4410] 0X: renamed from caif0 [ 43.510286][ T4410] 0X: entered allmulticast mode [ 43.515555][ T4410] net_ratelimit: 53 callbacks suppressed [ 43.515596][ T4410] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 43.555850][ T4397] Set syz1 is full, maxelem 65536 reached [ 43.579544][ T4414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 43.884461][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 43.933440][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 43.933500][ T29] audit: type=1400 audit(1765701121.705:790): avc: denied { bind } for pid=4432 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.968305][ T29] audit: type=1400 audit(1765701121.705:791): avc: denied { name_bind } for pid=4432 comm="syz.0.357" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 43.989038][ T29] audit: type=1400 audit(1765701121.705:792): avc: denied { node_bind } for pid=4432 comm="syz.0.357" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 44.011310][ T29] audit: type=1400 audit(1765701121.735:793): avc: denied { listen } for pid=4432 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.066230][ T4441] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.133690][ T4441] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.144603][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 44.223576][ T4441] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.262936][ T29] audit: type=1404 audit(1765701122.025:794): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 44.277848][ T29] audit: type=1404 audit(1765701122.035:795): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 44.314116][ T4441] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.323821][ T29] audit: type=1400 audit(1765701122.045:796): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.348007][ T29] audit: type=1400 audit(1765701122.045:797): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.372089][ T29] audit: type=1400 audit(1765701122.045:798): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.397707][ T29] audit: type=1400 audit(1765701122.055:799): avc: denied { map_create } for pid=4460 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.417164][ T4457] netlink: 'syz.4.369': attribute type 5 has an invalid length. [ 44.719823][ T4486] loop2: detected capacity change from 0 to 1024 [ 44.745487][ T4486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 44.809966][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 45.507041][ T4554] syz.3.409 (4554) used greatest stack depth: 9984 bytes left [ 45.519008][ T4556] netlink: 52 bytes leftover after parsing attributes in process `syz.3.410'. [ 45.531394][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4556 comm=syz.3.410 [ 45.543983][ T4556] netlink: 52 bytes leftover after parsing attributes in process `syz.3.410'. [ 45.804509][ T4561] loop1: detected capacity change from 0 to 1024 [ 45.812742][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.412: bad orphan inode 134217728 [ 45.823782][ T4561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.951730][ T3611] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.966049][ T3611] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.974670][ T3611] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.983857][ T3611] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.056151][ T4579] syz.0.417 uses obsolete (PF_INET,SOCK_PACKET) [ 46.226814][ T4588] pimreg: entered allmulticast mode [ 46.234048][ T4588] pimreg: left allmulticast mode [ 46.252529][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.365749][ T4597] loop2: detected capacity change from 0 to 1024 [ 46.372694][ T4597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.393375][ T4597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.422427][ T4605] loop4: detected capacity change from 0 to 512 [ 46.475727][ T4605] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 46.488343][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 46.534548][ T4605] EXT4-fs (loop4): 1 truncate cleaned up [ 46.551338][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 46.581800][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.752896][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.066122][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 47.109347][ T4630] loop3: detected capacity change from 0 to 1024 [ 47.140691][ T4630] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.436: Failed to acquire dquot type 0 [ 47.164660][ T4630] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.181882][ T4630] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.436: corrupted inode contents [ 47.220352][ T4630] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.436: mark_inode_dirty error [ 47.261338][ T4630] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.436: corrupted inode contents [ 47.262693][ T4596] syz.2.424 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 47.284178][ T4596] CPU: 0 UID: 0 PID: 4596 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.284226][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.284238][ T4596] Call Trace: [ 47.284250][ T4596] [ 47.284259][ T4596] __dump_stack+0x1d/0x30 [ 47.284284][ T4596] dump_stack_lvl+0xe8/0x140 [ 47.284307][ T4596] dump_stack+0x15/0x1b [ 47.284327][ T4596] dump_header+0x81/0x240 [ 47.284374][ T4596] oom_kill_process+0x295/0x350 [ 47.284395][ T4596] out_of_memory+0x97b/0xb80 [ 47.284449][ T4596] try_charge_memcg+0x610/0xa10 [ 47.284472][ T4596] charge_memcg+0x51/0xc0 [ 47.284499][ T4596] __mem_cgroup_charge+0x28/0xb0 [ 47.284553][ T4596] filemap_add_folio+0x111/0x360 [ 47.284653][ T4596] __filemap_get_folio_mpol+0x326/0x650 [ 47.284681][ T4596] filemap_fault+0x44d/0xb70 [ 47.284771][ T4596] ? css_rstat_updated+0xb7/0x240 [ 47.284790][ T4596] ? __rcu_read_lock+0x37/0x50 [ 47.284807][ T4596] __do_fault+0xbc/0x200 [ 47.284822][ T4596] handle_mm_fault+0xd9c/0x2c60 [ 47.284866][ T4596] do_user_addr_fault+0x630/0x1080 [ 47.284934][ T4596] ? switch_fpu_return+0xe/0x20 [ 47.285018][ T4596] exc_page_fault+0x62/0xa0 [ 47.285081][ T4596] asm_exc_page_fault+0x26/0x30 [ 47.285099][ T4596] RIP: 0033:0x7f0091cefa46 [ 47.285116][ T4596] Code: 07 0f 87 54 fe ff ff e9 47 fe ff ff 4c 89 fe 48 89 df e8 6d 94 fe ff 48 8b 43 38 44 01 7b 28 4c 29 f8 41 83 e4 06 48 89 43 38 00 00 0f 84 35 fe ff ff b8 01 00 00 00 0f 1f 40 00 48 8b 53 38 [ 47.285131][ T4596] RSP: 002b:00007fff73d42230 EFLAGS: 00010202 [ 47.285146][ T4596] RAX: 0000001b34208130 RBX: 00007f0092b95720 RCX: ffffffff8575492c [ 47.285158][ T4596] RDX: 0000001b33c24220 RSI: 0000000000000004 RDI: 00007f0092b95720 [ 47.285230][ T4596] RBP: 0000000000000891 R08: 00007f009187f060 R09: 00007f0092052000 [ 47.285243][ T4596] R10: 00007f009187f008 R11: 0000000000000005 R12: 0000000000000004 [ 47.285254][ T4596] R13: 00007f0092066038 R14: 0000000000004488 R15: 0000000000000004 [ 47.285270][ T4596] ? xa_load+0xac/0xe0 [ 47.285333][ T4596] [ 47.285340][ T4596] memory: usage 307200kB, limit 307200kB, failcnt 510 [ 47.293884][ T4630] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.436: mark_inode_dirty error [ 47.294999][ T4596] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 47.319575][ T4630] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.436: corrupted inode contents [ 47.320150][ T4596] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 47.330005][ T4630] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 47.333566][ T4596] Memory cgroup stats for [ 47.347208][ T4630] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.436: corrupted inode contents [ 47.347284][ T4596] /syz2 [ 47.357888][ T4630] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.436: mark_inode_dirty error [ 47.362757][ T4596] : [ 47.501869][ T4596] cache 8192 [ 47.572358][ T4596] rss 0 [ 47.575115][ T4596] shmem 0 [ 47.578042][ T4596] mapped_file 0 [ 47.581546][ T4596] dirty 0 [ 47.584508][ T4596] writeback 0 [ 47.587780][ T4596] workingset_refault_anon 1131 [ 47.592565][ T4596] workingset_refault_file 44 [ 47.597141][ T4596] swap 729088 [ 47.600412][ T4596] swapcached 0 [ 47.601970][ T4630] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 47.603897][ T4596] pgpgin 13105 [ 47.616112][ T4596] pgpgout 13103 [ 47.619563][ T4596] pgfault 17698 [ 47.623035][ T4596] pgmajfault 135 [ 47.626607][ T4596] inactive_anon 0 [ 47.630229][ T4596] active_anon 0 [ 47.633715][ T4596] inactive_file 0 [ 47.637383][ T4596] active_file 8192 [ 47.641096][ T4596] unevictable 0 [ 47.644575][ T4596] hierarchical_memory_limit 314572800 [ 47.650022][ T4596] hierarchical_memsw_limit 9223372036854771712 [ 47.652492][ T4630] EXT4-fs (loop3): 1 truncate cleaned up [ 47.656209][ T4596] total_cache 8192 [ 47.665526][ T4596] total_rss 0 [ 47.668875][ T4596] total_shmem 0 [ 47.672348][ T4596] total_mapped_file 0 [ 47.673998][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.676339][ T4596] total_dirty 0 [ 47.676348][ T4596] total_writeback 0 [ 47.696032][ T4596] total_workingset_refault_anon 1131 [ 47.701307][ T4596] total_workingset_refault_file 44 [ 47.706522][ T4596] total_swap 729088 [ 47.710341][ T4596] total_swapcached 0 [ 47.714313][ T4596] total_pgpgin 13105 [ 47.718222][ T4596] total_pgpgout 13103 [ 47.722211][ T4596] total_pgfault 17698 [ 47.726183][ T4596] total_pgmajfault 135 [ 47.730248][ T4596] total_inactive_anon 0 [ 47.734431][ T4596] total_active_anon 0 [ 47.738408][ T4596] total_inactive_file 0 [ 47.742603][ T4596] total_active_file 8192 [ 47.746834][ T4596] total_unevictable 0 [ 47.750852][ T4596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.424,pid=4596,uid=0 [ 47.765514][ T4596] Memory cgroup out of memory: Killed process 4596 (syz.2.424) total-vm:96016kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 47.861469][ T4608] syz.2.424 (4608) used greatest stack depth: 9720 bytes left [ 47.892466][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.902530][ T4597] syz.2.424 (4597) used greatest stack depth: 6216 bytes left [ 47.956115][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.169476][ T4655] loop2: detected capacity change from 0 to 512 [ 48.174184][ T4658] netlink: 'syz.4.448': attribute type 10 has an invalid length. [ 48.183474][ T4658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.448'. [ 48.193068][ T4655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.205718][ T4658] ipvlan2: entered promiscuous mode [ 48.212107][ T4658] bridge0: port 3(ipvlan2) entered blocking state [ 48.218584][ T4658] bridge0: port 3(ipvlan2) entered disabled state [ 48.225901][ T4658] ipvlan2: entered allmulticast mode [ 48.231212][ T4658] bridge0: entered allmulticast mode [ 48.237693][ T4658] ipvlan2: left allmulticast mode [ 48.242770][ T4658] bridge0: left allmulticast mode [ 48.249073][ T4655] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.447: invalid indirect mapped block 4294967295 (level 0) [ 48.269056][ T4655] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.447: invalid indirect mapped block 4294967295 (level 1) [ 48.311695][ T4655] EXT4-fs (loop2): 1 orphan inode deleted [ 48.317463][ T4655] EXT4-fs (loop2): 1 truncate cleaned up [ 48.370814][ T4655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.410370][ T4670] loop3: detected capacity change from 0 to 1024 [ 48.433924][ T4670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.447408][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.462095][ T4670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.685876][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 48.707331][ T4683] IPVS: Error connecting to the multicast addr [ 49.067216][ T4670] syz.3.453 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 49.081275][ T4670] CPU: 0 UID: 0 PID: 4670 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.081304][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.081337][ T4670] Call Trace: [ 49.081345][ T4670] [ 49.081354][ T4670] __dump_stack+0x1d/0x30 [ 49.081378][ T4670] dump_stack_lvl+0xe8/0x140 [ 49.081400][ T4670] dump_stack+0x15/0x1b [ 49.081421][ T4670] dump_header+0x81/0x240 [ 49.081443][ T4670] oom_kill_process+0x295/0x350 [ 49.081482][ T4670] out_of_memory+0x97b/0xb80 [ 49.081502][ T4670] try_charge_memcg+0x610/0xa10 [ 49.081608][ T4670] obj_cgroup_charge_pages+0xa6/0x150 [ 49.081801][ T4670] __memcg_kmem_charge_page+0x9f/0x170 [ 49.081829][ T4670] __alloc_frozen_pages_noprof+0x18f/0x360 [ 49.081864][ T4670] alloc_pages_mpol+0xb3/0x260 [ 49.081951][ T4670] ? alloc_pages_noprof+0x61/0x130 [ 49.081982][ T4670] alloc_pages_noprof+0x90/0x130 [ 49.082014][ T4670] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 49.082070][ T4670] __kvmalloc_node_noprof+0x492/0x6b0 [ 49.082116][ T4670] ? ip_set_alloc+0x24/0x30 [ 49.082146][ T4670] ? ip_set_alloc+0x24/0x30 [ 49.082209][ T4670] ip_set_alloc+0x24/0x30 [ 49.082240][ T4670] hash_netiface_create+0x282/0x740 [ 49.082281][ T4670] ? __pfx_hash_netiface_create+0x10/0x10 [ 49.082308][ T4670] ip_set_create+0x3cc/0x970 [ 49.082391][ T4670] ? __nla_parse+0x40/0x60 [ 49.082413][ T4670] nfnetlink_rcv_msg+0x4c6/0x590 [ 49.082456][ T4670] netlink_rcv_skb+0x123/0x220 [ 49.082513][ T4670] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 49.082598][ T4670] nfnetlink_rcv+0x167/0x16c0 [ 49.082628][ T4670] ? kmem_cache_free+0xe3/0x3a0 [ 49.082657][ T4670] ? __kfree_skb+0x109/0x150 [ 49.082686][ T4670] ? nlmon_xmit+0x4f/0x60 [ 49.082704][ T4670] ? consume_skb+0x49/0x150 [ 49.082729][ T4670] ? nlmon_xmit+0x4f/0x60 [ 49.082871][ T4670] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 49.082965][ T4670] ? __dev_queue_xmit+0x138d/0x1ec0 [ 49.082992][ T4670] ? __dev_queue_xmit+0x148/0x1ec0 [ 49.083018][ T4670] ? ref_tracker_free+0x37d/0x3e0 [ 49.083043][ T4670] ? __netlink_deliver_tap+0x4dc/0x500 [ 49.083093][ T4670] netlink_unicast+0x5c0/0x690 [ 49.083171][ T4670] netlink_sendmsg+0x58b/0x6b0 [ 49.083208][ T4670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.083237][ T4670] __sock_sendmsg+0x145/0x180 [ 49.083254][ T4670] ____sys_sendmsg+0x31e/0x4a0 [ 49.083344][ T4670] ___sys_sendmsg+0x17b/0x1d0 [ 49.083378][ T4670] __x64_sys_sendmsg+0xd4/0x160 [ 49.083408][ T4670] x64_sys_call+0x17ba/0x3000 [ 49.083435][ T4670] do_syscall_64+0xd8/0x2c0 [ 49.083540][ T4670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.083560][ T4670] RIP: 0033:0x7fbf15c9f749 [ 49.083573][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.083589][ T4670] RSP: 002b:00007fbf146ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.083651][ T4670] RAX: ffffffffffffffda RBX: 00007fbf15ef5fa0 RCX: 00007fbf15c9f749 [ 49.083685][ T4670] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 49.083697][ T4670] RBP: 00007fbf15d23f91 R08: 0000000000000000 R09: 0000000000000000 [ 49.083761][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.083772][ T4670] R13: 00007fbf15ef6038 R14: 00007fbf15ef5fa0 R15: 00007ffc527df188 [ 49.083787][ T4670] [ 49.408554][ T4670] memory: usage 307200kB, limit 307200kB, failcnt 611 [ 49.415342][ T4670] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 49.423280][ T4670] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 49.430551][ T4670] Memory cgroup stats for /syz3: [ 49.437565][ T4670] cache 24576 [ 49.445878][ T4670] rss 0 [ 49.448618][ T4670] shmem 0 [ 49.451527][ T4670] mapped_file 0 [ 49.455045][ T4670] dirty 0 [ 49.457972][ T4670] writeback 0 [ 49.461231][ T4670] workingset_refault_anon 168 [ 49.465969][ T4670] workingset_refault_file 257 [ 49.470629][ T4670] swap 724992 [ 49.473912][ T4670] swapcached 4096 [ 49.477584][ T4670] pgpgin 38724 [ 49.480928][ T4670] pgpgout 38717 [ 49.484389][ T4670] pgfault 26609 [ 49.487849][ T4670] pgmajfault 19 [ 49.491300][ T4670] inactive_anon 0 [ 49.494979][ T4670] active_anon 4096 [ 49.498728][ T4670] inactive_file 0 [ 49.502378][ T4670] active_file 24576 [ 49.506202][ T4670] unevictable 0 [ 49.509638][ T4670] hierarchical_memory_limit 314572800 [ 49.515107][ T4670] hierarchical_memsw_limit 9223372036854771712 [ 49.521244][ T4670] total_cache 24576 [ 49.525149][ T4670] total_rss 0 [ 49.528426][ T4670] total_shmem 0 [ 49.531889][ T4670] total_mapped_file 0 [ 49.535855][ T4670] total_dirty 0 [ 49.539440][ T4670] total_writeback 0 [ 49.543255][ T4670] total_workingset_refault_anon 168 [ 49.548443][ T4670] total_workingset_refault_file 257 [ 49.553636][ T4670] total_swap 724992 [ 49.557501][ T4670] total_swapcached 4096 [ 49.561670][ T4670] total_pgpgin 38724 [ 49.565561][ T4670] total_pgpgout 38717 [ 49.569516][ T4670] total_pgfault 26609 [ 49.573500][ T4670] total_pgmajfault 19 [ 49.577506][ T4670] total_inactive_anon 0 [ 49.581673][ T4670] total_active_anon 4096 [ 49.585900][ T4670] total_inactive_file 0 [ 49.590079][ T4670] total_active_file 24576 [ 49.594482][ T4670] total_unevictable 0 [ 49.598514][ T4670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.453,pid=4669,uid=0 [ 49.613086][ T4670] Memory cgroup out of memory: Killed process 4669 (syz.3.453) total-vm:96016kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 49.680876][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.814318][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 49.814334][ T29] audit: type=1400 audit(1765701127.585:992): avc: denied { create } for pid=4705 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.880203][ T29] audit: type=1400 audit(1765701127.595:993): avc: denied { write } for pid=4703 comm="syz.3.467" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.900524][ T29] audit: type=1400 audit(1765701127.595:994): avc: denied { bind } for pid=4705 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.919228][ T29] audit: type=1400 audit(1765701127.595:995): avc: denied { write } for pid=4705 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.937947][ T29] audit: type=1400 audit(1765701127.595:996): avc: denied { setopt } for pid=4705 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.059475][ T29] audit: type=1326 audit(1765701127.825:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf15c9f749 code=0x7ffc0000 [ 50.082936][ T29] audit: type=1326 audit(1765701127.825:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf15c9f749 code=0x7ffc0000 [ 50.106218][ T29] audit: type=1326 audit(1765701127.825:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fbf15c9f749 code=0x7ffc0000 [ 50.129352][ T29] audit: type=1326 audit(1765701127.825:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf15c9f749 code=0x7ffc0000 [ 50.152732][ T29] audit: type=1326 audit(1765701127.825:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf15c9f749 code=0x7ffc0000 [ 51.044951][ T4767] syzkaller0: entered promiscuous mode [ 51.050459][ T4767] syzkaller0: entered allmulticast mode [ 51.139176][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 51.203851][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 51.352869][ T4798] ip6gre1: entered allmulticast mode [ 51.419124][ T4802] loop4: detected capacity change from 0 to 1024 [ 51.551360][ T4802] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.504: bad orphan inode 134217728 [ 51.582530][ T4802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.639371][ T4813] syzkaller0: entered promiscuous mode [ 51.644902][ T4813] syzkaller0: entered allmulticast mode [ 51.836229][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 51.866063][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 52.065789][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138873][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.181897][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.203474][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.267767][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 52.362913][ T4866] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 52.380577][ T4858] loop0: detected capacity change from 0 to 8192 [ 52.389807][ T4866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.555229][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 52.564203][ T4878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 52.573094][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 52.621425][ T4878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 52.646669][ T4880] loop3: detected capacity change from 0 to 1024 [ 52.690966][ T4880] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.532: bad orphan inode 134217728 [ 52.739810][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.017170][ T4912] loop4: detected capacity change from 0 to 512 [ 53.045985][ T4912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.105734][ T4912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.124721][ T4912] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.201803][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.261955][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.310416][ T3625] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.573554][ T4980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=4980 comm=syz.1.576 [ 54.589058][ T4980] netlink: 'syz.1.576': attribute type 29 has an invalid length. [ 54.646332][ T4988] netlink: 'syz.4.580': attribute type 1 has an invalid length. [ 54.667039][ T4988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.688175][ T4988] bond1: (slave ip6gretap1): making interface the new active one [ 54.697688][ T4988] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 54.767178][ T4994] loop4: detected capacity change from 0 to 8192 [ 54.831007][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 54.831021][ T29] audit: type=1326 audit(1765701132.595:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ba6b065e7 code=0x7ffc0000 [ 54.860830][ T29] audit: type=1326 audit(1765701132.595:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ba6aab829 code=0x7ffc0000 [ 54.884188][ T29] audit: type=1326 audit(1765701132.595:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 54.908026][ T29] audit: type=1326 audit(1765701132.655:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ba6b065e7 code=0x7ffc0000 [ 54.931397][ T29] audit: type=1326 audit(1765701132.655:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ba6aab829 code=0x7ffc0000 [ 54.954665][ T29] audit: type=1326 audit(1765701132.655:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 54.978083][ T29] audit: type=1326 audit(1765701132.655:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ba6b065e7 code=0x7ffc0000 [ 55.001442][ T29] audit: type=1326 audit(1765701132.655:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ba6aab829 code=0x7ffc0000 [ 55.024873][ T29] audit: type=1326 audit(1765701132.655:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9ba6b0f749 code=0x7ffc0000 [ 55.048287][ T29] audit: type=1326 audit(1765701132.665:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ba6b065e7 code=0x7ffc0000 [ 55.321946][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.383669][ T5035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5035 comm=syz.4.601 [ 55.523289][ T5046] veth6: entered promiscuous mode [ 55.528372][ T5046] veth6: entered allmulticast mode [ 56.466965][ T5088] loop3: detected capacity change from 0 to 512 [ 56.502567][ T5088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.558249][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.623647][ T5088] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.742689][ T5104] ref_ctr_offset mismatch. inode: 0x277 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 56.812145][ T5068] syz.1.613 (5068) used greatest stack depth: 6008 bytes left [ 56.848573][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.878199][ T5111] loop2: detected capacity change from 0 to 1024 [ 56.919530][ T5111] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.628: bad orphan inode 134217728 [ 57.025088][ T5111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.052311][ T5123] __nla_validate_parse: 9 callbacks suppressed [ 57.052369][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 57.147992][ T5127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 57.454415][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.470023][ T5139] loop0: detected capacity change from 0 to 1024 [ 57.485074][ T5139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.522584][ T5139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.565409][ T5148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=5148 comm=syz.4.643 [ 57.579896][ T5148] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 57.803267][ T5166] loop3: detected capacity change from 0 to 1024 [ 57.837227][ T5170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 57.839700][ T5166] EXT4-fs: Ignoring removed orlov option [ 57.891811][ T5166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.938396][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 58.049518][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.224357][ T5194] veth2: entered promiscuous mode [ 58.229473][ T5194] veth2: entered allmulticast mode [ 58.450561][ T5206] bridge: RTM_NEWNEIGH with invalid ether address [ 58.848743][ T5232] loop4: detected capacity change from 0 to 1024 [ 58.885657][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.911975][ T5232] EXT4-fs: Ignoring removed orlov option [ 58.925215][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'. [ 58.957698][ T5232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.093145][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.714892][ T5267] loop4: detected capacity change from 0 to 1024 [ 59.737496][ T5267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.775749][ T5267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.929419][ T5276] loop3: detected capacity change from 0 to 128 [ 59.940295][ T5276] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.968457][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 59.977988][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 60.000359][ T5276] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.692: corrupted xattr block 5: invalid header [ 60.017388][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 60.017401][ T29] audit: type=1400 audit(1765701137.785:1723): avc: denied { create } for pid=5284 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.044647][ T5276] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 60.051385][ T29] audit: type=1400 audit(1765701137.815:1724): avc: denied { connect } for pid=5284 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.071024][ T29] audit: type=1400 audit(1765701137.815:1725): avc: denied { bind } for pid=5284 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.090270][ T29] audit: type=1400 audit(1765701137.815:1726): avc: denied { write } for pid=5284 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.127420][ T5276] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.144059][ T29] audit: type=1400 audit(1765701137.915:1727): avc: denied { create } for pid=5289 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.188880][ T29] audit: type=1400 audit(1765701137.935:1728): avc: denied { create } for pid=5287 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.208611][ T29] audit: type=1400 audit(1765701137.945:1729): avc: denied { sys_module } for pid=5289 comm="syz.1.696" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.230286][ T29] audit: type=1400 audit(1765701137.955:1730): avc: denied { ioctl } for pid=5289 comm="syz.1.696" path="socket:[13031]" dev="sockfs" ino=13031 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.264922][ T29] audit: type=1400 audit(1765701138.035:1731): avc: denied { setopt } for pid=5293 comm="syz.1.698" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.288576][ T5295] pim6reg: entered allmulticast mode [ 60.300340][ T5295] pim6reg: left allmulticast mode [ 60.308972][ T29] audit: type=1400 audit(1765701138.075:1732): avc: denied { read } for pid=5294 comm="syz.3.699" dev="nsfs" ino=4026532567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.536822][ T5316] netlink: 'syz.3.708': attribute type 4 has an invalid length. [ 60.544615][ T5316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.708'. [ 60.584450][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 60.616543][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 60.780302][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.178882][ T5370] loop0: detected capacity change from 0 to 2048 [ 61.254737][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.342742][ T5370] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.369302][ T5370] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 61.382112][ T5370] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.382112][ T5370] [ 61.391895][ T5370] EXT4-fs (loop0): Total free blocks count 0 [ 61.398184][ T5370] EXT4-fs (loop0): Free/Dirty block details [ 61.404133][ T5370] EXT4-fs (loop0): free_blocks=2415919104 [ 61.409863][ T5370] EXT4-fs (loop0): dirty_blocks=32 [ 61.415021][ T5370] EXT4-fs (loop0): Block reservation details [ 61.421085][ T5370] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 61.455671][ T3615] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.504344][ T5399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5399 comm=syz.4.745 [ 61.516950][ T5399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5399 comm=syz.4.745 [ 61.571614][ T5405] vlan2: entered allmulticast mode [ 61.656032][ T5411] SELinux: failed to load policy [ 61.878094][ T5444] pim6reg: entered allmulticast mode [ 61.894550][ T5444] pim6reg: left allmulticast mode [ 61.965612][ T5452] loop4: detected capacity change from 0 to 512 [ 62.055075][ T5452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.192222][ T5452] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.210004][ T5469] __nla_validate_parse: 1 callbacks suppressed [ 62.210098][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 62.248696][ T5452] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.763: corrupted inode contents [ 62.289430][ T5452] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.763: mark_inode_dirty error [ 62.326286][ T5480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 62.339489][ T5452] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.763: corrupted inode contents [ 62.354074][ T5452] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.763: mark_inode_dirty error [ 62.380889][ T5483] pim6reg: entered allmulticast mode [ 62.423541][ T5483] pim6reg: left allmulticast mode [ 62.570482][ T5490] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 62.578222][ T5490] netlink: 152 bytes leftover after parsing attributes in process `syz.2.780'. [ 62.601238][ T5494] loop3: detected capacity change from 0 to 128 [ 62.626175][ T5490] .`: renamed from bond0 [ 62.684085][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.684085][ T1790] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 62.742355][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.742355][ T1790] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 62.795006][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.795006][ T1790] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 62.833072][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.833072][ T1790] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 62.854721][ T5507] loop2: detected capacity change from 0 to 1024 [ 62.876875][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.876875][ T1790] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 62.912405][ T5507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.924774][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.924774][ T1790] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 62.938525][ T5507] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.939180][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.949178][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.949178][ T1790] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 62.982374][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.982374][ T1790] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 62.995955][ T1790] kworker/u8:10: attempt to access beyond end of device [ 62.995955][ T1790] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 63.009613][ T1790] kworker/u8:10: attempt to access beyond end of device [ 63.009613][ T1790] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 63.032763][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.060327][ T5512] loop0: detected capacity change from 0 to 164 [ 63.426011][ T5532] netlink: 'syz.0.796': attribute type 4 has an invalid length. [ 63.433892][ T5532] netlink: 152 bytes leftover after parsing attributes in process `syz.0.796'. [ 63.489868][ T5532] .`: renamed from bond0 [ 63.524620][ T5537] loop3: detected capacity change from 0 to 512 [ 63.592962][ T5540] loop9: detected capacity change from 0 to 7 [ 63.602565][ T5540] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.603909][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 63.621374][ T5537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.643022][ T5540] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.650908][ T5540] loop9: unable to read partition table [ 63.651763][ T5537] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.684612][ T5540] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.684612][ T5540] ) failed (rc=-5) [ 63.686508][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.726418][ T5537] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 63.783988][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.792103][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.800187][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.825536][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.848404][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.154382][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 65.154396][ T29] audit: type=1326 audit(1765701142.925:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091e065e7 code=0x7ffc0000 [ 65.297794][ T29] audit: type=1326 audit(1765701142.965:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0091dab829 code=0x7ffc0000 [ 65.321268][ T29] audit: type=1326 audit(1765701142.965:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091e065e7 code=0x7ffc0000 [ 65.343223][ T5628] syzkaller1: entered promiscuous mode [ 65.345157][ T29] audit: type=1326 audit(1765701142.965:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0091dab829 code=0x7ffc0000 [ 65.350490][ T5628] syzkaller1: entered allmulticast mode [ 65.373767][ T29] audit: type=1326 audit(1765701142.965:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091e0f749 code=0x7ffc0000 [ 65.402669][ T29] audit: type=1326 audit(1765701142.965:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0091e0f749 code=0x7ffc0000 [ 65.425942][ T29] audit: type=1326 audit(1765701142.965:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091e0f749 code=0x7ffc0000 [ 65.449284][ T29] audit: type=1400 audit(1765701142.995:1886): avc: denied { create } for pid=5620 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.539819][ T29] audit: type=1326 audit(1765701143.295:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5633 comm="syz.2.840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0091e0f749 code=0x0 [ 65.623130][ T29] audit: type=1400 audit(1765701143.395:1888): avc: denied { create } for pid=5642 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.792916][ T5650] netlink: 96 bytes leftover after parsing attributes in process `syz.3.846'. [ 65.938294][ T5660] loop0: detected capacity change from 0 to 164 [ 65.955881][ T5660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.966144][ T5660] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 66.273461][ T5696] loop0: detected capacity change from 0 to 512 [ 66.315391][ T5696] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.867: inode has both inline data and extents flags [ 66.347998][ T5696] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.867: couldn't read orphan inode 15 (err -117) [ 66.382328][ T5696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.484818][ T5704] 8021q: adding VLAN 0 to HW filter on device .` [ 66.498941][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.511611][ T3320] ================================================================== [ 66.519709][ T3320] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 66.527272][ T3320] [ 66.529596][ T3320] read-write to 0xffff888237d26468 of 1 bytes by task 5712 on cpu 1: [ 66.537652][ T3320] folio_add_lru+0xa5/0x1f0 [ 66.542172][ T3320] shmem_get_folio_gfp+0x7a5/0xd50 [ 66.547301][ T3320] shmem_fault+0xf6/0x250 [ 66.551641][ T3320] __do_fault+0xbc/0x200 [ 66.555880][ T3320] handle_mm_fault+0xfab/0x2c60 [ 66.560749][ T3320] __get_user_pages+0x1024/0x1ed0 [ 66.565780][ T3320] __mm_populate+0x243/0x3a0 [ 66.570372][ T3320] vm_mmap_pgoff+0x232/0x2e0 [ 66.574954][ T3320] ksys_mmap_pgoff+0xc2/0x310 [ 66.579624][ T3320] x64_sys_call+0x16bb/0x3000 [ 66.584290][ T3320] do_syscall_64+0xd8/0x2c0 [ 66.588789][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.594671][ T3320] [ 66.596979][ T3320] read to 0xffff888237d26468 of 1 bytes by task 3320 on cpu 0: [ 66.604506][ T3320] __lru_add_drain_all+0x17e/0x450 [ 66.609697][ T3320] lru_add_drain_all+0x10/0x20 [ 66.614451][ T3320] invalidate_bdev+0x47/0x70 [ 66.619026][ T3320] ext4_put_super+0x624/0x7d0 [ 66.623692][ T3320] generic_shutdown_super+0xe6/0x210 [ 66.628974][ T3320] kill_block_super+0x2a/0x70 [ 66.633634][ T3320] ext4_kill_sb+0x42/0x80 [ 66.637949][ T3320] deactivate_locked_super+0x75/0x1c0 [ 66.643315][ T3320] deactivate_super+0x97/0xa0 [ 66.647984][ T3320] cleanup_mnt+0x2a9/0x320 [ 66.652396][ T3320] __cleanup_mnt+0x19/0x20 [ 66.656801][ T3320] task_work_run+0x131/0x1a0 [ 66.661376][ T3320] exit_to_user_mode_loop+0x1fe/0x740 [ 66.666732][ T3320] do_syscall_64+0x1ef/0x2c0 [ 66.671316][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.677193][ T3320] [ 66.679498][ T3320] value changed: 0x0b -> 0x0e [ 66.684150][ T3320] [ 66.686457][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 66.692589][ T3320] CPU: 0 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.702496][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.712542][ T3320] ================================================================== [ 66.725463][ T5704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.757841][ T5715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.793222][ T5717] netlink: 'syz.0.875': attribute type 12 has an invalid length.