last executing test programs: 4.183352495s ago: executing program 1 (id=1331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 4.071749424s ago: executing program 4 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") 3.833077504s ago: executing program 1 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.50089766s ago: executing program 0 (id=1338): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0) mlockall(0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) mmap$usbfs(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0xca) mlock(&(0x7f000033c000/0x1000)=nil, 0x1000) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x6, 0x40, 0x5, 0x7, 0x4, 0x1, 0x9, [0x2, 0xc]}}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.218724553s ago: executing program 4 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x8, 0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 3.192716415s ago: executing program 2 (id=1340): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.931691176s ago: executing program 3 (id=1341): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000000000001c0088b9"], 0x1c}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x6) 2.858174031s ago: executing program 0 (id=1343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 2.741319081s ago: executing program 3 (id=1345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.736703991s ago: executing program 1 (id=1346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 2.674101076s ago: executing program 0 (id=1347): capset(0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)={@local, @random="4910075ad2b9", @void, {@llc={0x4, {@llc={0xaa, 0xfc, 's', "b5"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.610068411s ago: executing program 3 (id=1348): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2.592366023s ago: executing program 0 (id=1349): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 2.569440615s ago: executing program 2 (id=1350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="b94a535b6e65527f9ac292f4ccd4ad64c192d6ea0eaa4197304b6a73578aae14a5fb04d8725ebc7b9937e8187604a89fbe7746292b1f55e2ff8d1f2436bb0ac7f8c703e96544b1f8be51b2ac122ae44190faaa3bc0b2e96055ee6cd602efa6bb7fa8340db3fdf543a28021cabdc175d3588fadfd34a512b221adad1ee4eb935d1110bd4bd10e5f226fd610308d523473e278cb2403e93edd7a616f28d1509754fe177509", 0xa4}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)="0819f942b9c6ed584d78436f65cb593fa7fbad6c6a97532a91e8662c1f1bccdd9e592123683d4f7c74291b807678c0b8b27411e8287b57f04f2a4b191a7e269d6db9fd0a47a5512f56ffbf3628854f99237a5ab18ce7095e53d42d6136d091b8c31f9ac45c3f2880e0d1ad730dcf9753ef323cee13bec923fdfb525f3d756e435504685475aba973c6cb592570efcb9a136aa3607d231b12210620212d86d41353a6356c8e60a2c8d13b885f5b", 0xad}, {&(0x7f0000000cc0)="8ab34c93720dd2a833a2c64a307dbc4f9c05867b6f7a325c132c5a9ab579c70af4ba3bdea7d50d3def4415907d2e7632", 0x30}], 0x2, &(0x7f0000000300)=ANY=[], 0x58}}], 0x2, 0x24040010) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x82f3, 0x80, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x97ff) close_range(r1, r3, 0x0) 2.560148255s ago: executing program 1 (id=1352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(r2, 0x73f, 0x9) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="ec", 0x1, 0xffffffffffffffff) accept(r0, 0x0, 0x0) 2.511552049s ago: executing program 0 (id=1353): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x9, 0x2000406) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x81c44f, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") 2.510976799s ago: executing program 2 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 2.37444904s ago: executing program 4 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) 2.37163119s ago: executing program 2 (id=1365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r4, 0x5437, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) socket$inet(0x2, 0x1, 0x1ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 2.369830381s ago: executing program 3 (id=1366): mount$tmpfs(0x0, 0x0, 0x0, 0x20810, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x5cffd6501e768e73) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 1.194546754s ago: executing program 2 (id=1355): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="870a00000000000061119c00000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) getrlimit(0x0, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1.193843864s ago: executing program 4 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x8) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.190676615s ago: executing program 1 (id=1369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 1.187220135s ago: executing program 3 (id=1370): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 748.27676ms ago: executing program 2 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 304.277696ms ago: executing program 4 (id=1357): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000000000001c0088b9"], 0x1c}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x6) 303.577646ms ago: executing program 0 (id=1373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x8, 0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 302.774436ms ago: executing program 1 (id=1374): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x9, 0x2000406) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x81c44f, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") 622.42µs ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) kernel console output (not intermixed with test programs): r:devpts_t tclass=filesystem permissive=1 [ 55.890413][ T29] audit: type=1400 audit(1756322027.035:1703): avc: denied { getopt } for pid=4638 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.953557][ T29] audit: type=1400 audit(1756322027.085:1704): avc: denied { create } for pid=4636 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.976569][ T29] audit: type=1400 audit(1756322027.115:1705): avc: denied { write } for pid=4641 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.997097][ T29] audit: type=1400 audit(1756322027.115:1706): avc: denied { nlmsg_write } for pid=4641 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.028129][ T4640] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.035730][ T4640] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 56.078114][ T29] audit: type=1400 audit(1756322027.215:1707): avc: denied { write } for pid=4648 comm="syz.1.329" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.101296][ T29] audit: type=1400 audit(1756322027.215:1708): avc: denied { open } for pid=4648 comm="syz.1.329" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.124766][ T29] audit: type=1400 audit(1756322027.215:1709): avc: denied { ioctl } for pid=4648 comm="syz.1.329" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.206316][ T29] audit: type=1400 audit(1756322027.345:1710): avc: denied { setopt } for pid=4658 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.250326][ T4656] syzkaller0: entered promiscuous mode [ 56.256162][ T4656] syzkaller0: entered allmulticast mode [ 56.301553][ T4663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.514229][ T4670] vlan0: entered allmulticast mode [ 56.519924][ T4670] bridge_slave_0: entered allmulticast mode [ 56.637430][ T4674] loop7: detected capacity change from 0 to 7 [ 56.813969][ T4676] __nla_validate_parse: 3 callbacks suppressed [ 56.813984][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 56.864893][ T4680] Invalid logical block size (6) [ 56.897737][ T4684] tipc: Enabled bearer , priority 0 [ 56.930078][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.060396][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.113472][ T4684] tipc: Disabling bearer [ 58.659755][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.698718][ T4723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.707823][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.873092][ T4723] GUP no longer grows the stack in syz.4.356 (4723): 200000004000-200000008000 (200000002000) [ 58.883423][ T4723] CPU: 1 UID: 0 PID: 4723 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.883451][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.883464][ T4723] Call Trace: [ 58.883471][ T4723] [ 58.883479][ T4723] __dump_stack+0x1d/0x30 [ 58.883581][ T4723] dump_stack_lvl+0xe8/0x140 [ 58.883596][ T4723] dump_stack+0x15/0x1b [ 58.883611][ T4723] __get_user_pages+0x198d/0x1fa0 [ 58.883634][ T4723] ? trace_reschedule_exit+0xd/0xc0 [ 58.883650][ T4723] ? sysvec_reschedule_ipi+0x4f/0x70 [ 58.883740][ T4723] ? mtree_load+0x20b/0x4d0 [ 58.883762][ T4723] ? __rcu_read_unlock+0x4f/0x70 [ 58.883850][ T4723] get_user_pages_remote+0x1d5/0x6d0 [ 58.883875][ T4723] __access_remote_vm+0x15c/0x590 [ 58.883952][ T4723] access_remote_vm+0x32/0x40 [ 58.883975][ T4723] proc_pid_cmdline_read+0x32b/0x6c0 [ 58.883997][ T4723] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 58.884017][ T4723] vfs_readv+0x3fb/0x690 [ 58.884050][ T4723] __x64_sys_preadv+0xfd/0x1c0 [ 58.884075][ T4723] x64_sys_call+0x282a/0x2ff0 [ 58.884096][ T4723] do_syscall_64+0xd2/0x200 [ 58.884122][ T4723] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.884208][ T4723] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.884229][ T4723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.884247][ T4723] RIP: 0033:0x7f8d38ccebe9 [ 58.884264][ T4723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.884298][ T4723] RSP: 002b:00007f8d3772f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 58.884321][ T4723] RAX: ffffffffffffffda RBX: 00007f8d38ef5fa0 RCX: 00007f8d38ccebe9 [ 58.884335][ T4723] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000009 [ 58.884347][ T4723] RBP: 00007f8d38d51e19 R08: 0000000000000201 R09: 0000000000000000 [ 58.884461][ T4723] R10: 00000000000006cd R11: 0000000000000246 R12: 0000000000000000 [ 58.884472][ T4723] R13: 00007f8d38ef6038 R14: 00007f8d38ef5fa0 R15: 00007ffd2ecca6a8 [ 58.884543][ T4723] [ 59.139935][ T4690] netlink: 268 bytes leftover after parsing attributes in process `syz.1.345'. [ 59.149057][ T4690] unsupported nla_type 65024 [ 59.150552][ T4729] 9pnet_fd: Insufficient options for proto=fd [ 59.227497][ T4733] loop0: detected capacity change from 0 to 512 [ 59.248984][ T4733] ext2: Bad value for 'max_dir_size_kb' [ 59.320239][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 59.334298][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 59.371257][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 59.489008][ T4744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4744 comm=syz.3.364 [ 59.528419][ T4747] openvswitch: netlink: Message has 6 unknown bytes. [ 60.062311][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 60.327798][ T4760] 9pnet_fd: Insufficient options for proto=fd [ 60.368282][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 60.606969][ T4768] binfmt_misc: register: failed to install interpreter file ./file2 [ 60.775347][ T4766] bridge_slave_0: left allmulticast mode [ 60.781169][ T4766] bridge_slave_0: left promiscuous mode [ 60.786859][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.816389][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 60.816406][ T29] audit: type=1326 audit(1756322031.945:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.846180][ T29] audit: type=1326 audit(1756322031.945:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.870063][ T29] audit: type=1326 audit(1756322031.945:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.894294][ T29] audit: type=1326 audit(1756322031.945:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.918218][ T29] audit: type=1326 audit(1756322031.945:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.942044][ T29] audit: type=1326 audit(1756322031.945:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.965582][ T29] audit: type=1326 audit(1756322031.945:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 60.989197][ T29] audit: type=1326 audit(1756322031.945:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 61.012950][ T29] audit: type=1326 audit(1756322031.945:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 61.037045][ T29] audit: type=1326 audit(1756322031.945:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 61.077365][ T4766] bridge_slave_1: left allmulticast mode [ 61.083288][ T4766] bridge_slave_1: left promiscuous mode [ 61.089084][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.130994][ T4766] bond0: (slave bond_slave_0): Releasing backup interface [ 61.141155][ T4766] bond0: (slave bond_slave_1): Releasing backup interface [ 61.159548][ T4766] team0: Port device team_slave_0 removed [ 61.171785][ T4766] team0: Port device team_slave_1 removed [ 61.179425][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.186856][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.270586][ T4766] bond1: (slave vxcan1): Releasing backup interface [ 61.289178][ T4766] vxcan1: left promiscuous mode [ 61.396458][ T4784] syzkaller0: entered promiscuous mode [ 61.402386][ T4784] syzkaller0: entered allmulticast mode [ 61.402705][ T4788] vhci_hcd: invalid port number 96 [ 61.413239][ T4788] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.959123][ T4803] loop4: detected capacity change from 0 to 1024 [ 61.985118][ T4801] pimreg: entered allmulticast mode [ 62.011104][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.046749][ T4803] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.250591][ T4801] pimreg: left allmulticast mode [ 64.034232][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.911049][ T4832] __nla_validate_parse: 1 callbacks suppressed [ 64.911066][ T4832] netlink: 68 bytes leftover after parsing attributes in process `syz.2.390'. [ 65.024865][ T4838] bridge0: entered promiscuous mode [ 65.049672][ T4838] macvtap1: entered allmulticast mode [ 65.055160][ T4838] bridge0: entered allmulticast mode [ 65.062649][ T4838] bridge0: port 5(macvtap1) entered blocking state [ 65.069528][ T4838] bridge0: port 5(macvtap1) entered disabled state [ 65.102364][ T4838] bridge0: left allmulticast mode [ 65.107483][ T4838] bridge0: left promiscuous mode [ 65.166940][ T4844] netfs: Couldn't get user pages (rc=-14) [ 65.289843][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 65.309492][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 65.361141][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 65.413397][ T4848] loop4: detected capacity change from 0 to 8192 [ 65.494549][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.501849][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.520299][ T4848] syz.4.396: attempt to access beyond end of device [ 65.520299][ T4848] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.554824][ T4848] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 65.562897][ T4848] FAT-fs (loop4): Filesystem has been set read-only [ 65.590860][ T4858] tipc: Resetting bearer [ 65.594328][ T4848] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 65.604968][ T4848] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 65.613405][ T4876] netlink: 'syz.0.401': attribute type 4 has an invalid length. [ 65.643487][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.653910][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.663251][ T4879] netlink: 'syz.0.401': attribute type 4 has an invalid length. [ 65.759776][ T4325] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.782842][ T4325] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.794647][ T4325] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.819260][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 65.819274][ T29] audit: type=1326 audit(1756322036.965:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 65.867244][ T4325] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.898256][ T29] audit: type=1326 audit(1756322036.995:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 65.922102][ T29] audit: type=1326 audit(1756322036.995:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 65.945853][ T29] audit: type=1326 audit(1756322037.005:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 65.969199][ T29] audit: type=1326 audit(1756322037.005:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 65.993521][ T29] audit: type=1326 audit(1756322037.005:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 66.017232][ T29] audit: type=1326 audit(1756322037.005:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 66.042538][ T29] audit: type=1326 audit(1756322037.025:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 66.066204][ T29] audit: type=1326 audit(1756322037.025:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 66.159986][ T4917] pimreg3: entered allmulticast mode [ 66.164793][ T29] audit: type=1326 audit(1756322037.055:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 66.199700][ T4918] tipc: Started in network mode [ 66.204788][ T4918] tipc: Node identity 0e52e4218c05, cluster identity 4711 [ 66.212275][ T4918] tipc: Enabled bearer , priority 0 [ 66.235175][ T4908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.247125][ T4918] syzkaller0: entered promiscuous mode [ 66.252769][ T4918] syzkaller0: entered allmulticast mode [ 66.267592][ T4918] tipc: Resetting bearer [ 66.287211][ T4908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.300757][ T4916] tipc: Resetting bearer [ 66.308034][ T4916] tipc: Disabling bearer [ 66.383758][ T4908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.434727][ T4955] bridge0: entered allmulticast mode [ 66.450264][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 66.471486][ T4955] bridge0 (unregistering): left allmulticast mode [ 66.562482][ T4908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.637060][ T4347] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.648731][ T4347] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.663691][ T4347] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.672491][ T4347] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.154165][ T4993] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 67.236547][ T4993] SELinux: failed to load policy [ 67.446808][ T5010] syzkaller0: entered promiscuous mode [ 67.452443][ T5010] syzkaller0: entered allmulticast mode [ 67.738354][ T5021] tipc: Enabled bearer , priority 0 [ 67.745669][ T5021] syzkaller0: entered promiscuous mode [ 67.751278][ T5021] syzkaller0: entered allmulticast mode [ 67.761338][ T5021] tipc: Resetting bearer [ 67.770250][ T5020] tipc: Resetting bearer [ 67.777830][ T5020] tipc: Disabling bearer [ 67.861347][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 67.916838][ T5033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 67.953885][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 68.240441][ T5054] tipc: Enabled bearer , priority 0 [ 68.248245][ T5050] SELinux: failed to load policy [ 68.256745][ T5054] syzkaller0: entered promiscuous mode [ 68.262383][ T5054] syzkaller0: entered allmulticast mode [ 68.287960][ T5054] tipc: Resetting bearer [ 68.295331][ T5053] tipc: Resetting bearer [ 68.307454][ T5053] tipc: Disabling bearer [ 69.930635][ T5089] Set syz1 is full, maxelem 65536 reached [ 70.081662][ T5105] syzkaller0: entered promiscuous mode [ 70.087261][ T5105] syzkaller0: entered allmulticast mode [ 70.588134][ T5128] netlink: 96 bytes leftover after parsing attributes in process `syz.4.461'. [ 70.634150][ T5130] loop4: detected capacity change from 0 to 2048 [ 70.650505][ T5130] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.685582][ T5130] SELinux: security_context_str_to_sid (ð=S|1r©îW„i³M!Oýj¡4~–1c3FùÕfX¶¬ê5âá0Š©ð©œ÷X2•k¢c½»m?ÕÔú'´wø´Cµª) failed with errno=-22 [ 70.773928][ T5133] tmpfs: Bad value for 'mpol' [ 71.641010][ T5150] tipc: Started in network mode [ 71.645941][ T5150] tipc: Node identity 62322f4a3694, cluster identity 4711 [ 71.653231][ T5150] tipc: Enabled bearer , priority 0 [ 71.673102][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 71.673114][ T29] audit: type=1326 audit(1756322042.815:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.705294][ T5150] syzkaller0: entered promiscuous mode [ 71.710915][ T5150] syzkaller0: entered allmulticast mode [ 71.718556][ T29] audit: type=1326 audit(1756322042.845:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.741927][ T29] audit: type=1326 audit(1756322042.845:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.765447][ T29] audit: type=1326 audit(1756322042.845:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.788847][ T29] audit: type=1326 audit(1756322042.845:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.812114][ T29] audit: type=1326 audit(1756322042.845:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.835691][ T29] audit: type=1326 audit(1756322042.845:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.859081][ T29] audit: type=1326 audit(1756322042.845:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 71.965847][ T5160] tipc: Resetting bearer [ 71.976621][ T5149] tipc: Resetting bearer [ 71.986775][ T5149] tipc: Disabling bearer [ 72.168249][ T29] audit: type=1326 audit(1756322043.265:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 72.191799][ T29] audit: type=1326 audit(1756322043.265:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 72.612578][ T5169] tipc: New replicast peer: 255.255.255.255 [ 72.612680][ T5169] tipc: Enabled bearer , priority 10 [ 72.718976][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 72.895620][ T5177] hub 8-0:1.0: USB hub found [ 72.895675][ T5177] hub 8-0:1.0: 8 ports detected [ 73.251754][ T5183] tipc: Enabled bearer , priority 0 [ 73.264863][ T5183] syzkaller0: entered promiscuous mode [ 73.270485][ T5183] syzkaller0: entered allmulticast mode [ 73.315040][ T5183] tipc: Resetting bearer [ 73.323843][ T5182] tipc: Resetting bearer [ 73.340073][ T5182] tipc: Disabling bearer [ 73.425981][ T5191] tipc: Enabled bearer , priority 0 [ 73.459386][ T5191] syzkaller0: entered promiscuous mode [ 73.464946][ T5191] syzkaller0: entered allmulticast mode [ 73.483392][ T5191] tipc: Resetting bearer [ 73.491857][ T5190] tipc: Resetting bearer [ 73.602794][ T5190] tipc: Disabling bearer [ 73.729757][ T4881] tipc: Node number set to 2186798113 [ 74.310983][ T5222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.365400][ T5222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.421670][ T5222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.441620][ T5226] serio: Serial port ptm0 [ 74.480944][ T5222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.566962][ T4347] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.586448][ T4347] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.598057][ T4347] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.620145][ T5236] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 74.662792][ T4347] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677472][ T5239] netlink: 100 bytes leftover after parsing attributes in process `syz.0.502'. [ 74.742033][ T5242] netlink: zone id is out of range [ 74.750245][ T5242] netlink: zone id is out of range [ 74.758552][ T5242] netlink: zone id is out of range [ 74.763787][ T5242] netlink: zone id is out of range [ 74.768948][ T5242] netlink: zone id is out of range [ 74.774046][ T5242] netlink: zone id is out of range [ 74.809629][ T5242] netlink: zone id is out of range [ 74.814842][ T5242] netlink: zone id is out of range [ 74.826574][ T5242] netlink: zone id is out of range [ 74.831944][ T5252] tipc: Enabled bearer , priority 0 [ 74.880517][ T5252] syzkaller0: entered promiscuous mode [ 74.886023][ T5252] syzkaller0: entered allmulticast mode [ 74.901973][ T5256] tipc: Enabled bearer , priority 0 [ 74.936585][ T5258] syzkaller0: entered promiscuous mode [ 74.942110][ T5258] syzkaller0: entered allmulticast mode [ 74.957651][ T5256] all (unregistering): Released all slaves [ 74.967718][ T5252] tipc: Resetting bearer [ 74.978186][ T5251] tipc: Resetting bearer [ 75.025309][ T5251] tipc: Disabling bearer [ 75.204778][ T5269] netlink: 666 bytes leftover after parsing attributes in process `syz.1.513'. [ 75.507475][ T5277] loop0: detected capacity change from 0 to 512 [ 75.516308][ T5277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.525782][ T5277] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.534077][ T5277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.516: bg 0: block 248: padding at end of block bitmap is not set [ 75.550961][ T5277] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.516: Failed to acquire dquot type 1 [ 75.562723][ T5277] EXT4-fs (loop0): 1 truncate cleaned up [ 75.569429][ T5277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.660940][ T5280] loop4: detected capacity change from 0 to 512 [ 76.018586][ T4886] tipc: Node number set to 1124977828 [ 76.112312][ T5285] tipc: New replicast peer: 10.1.1.2 [ 76.117757][ T5285] tipc: Enabled bearer , priority 10 [ 76.142876][ T5290] netlink: 300 bytes leftover after parsing attributes in process `syz.1.519'. [ 76.245354][ T5299] bond_slave_0: entered promiscuous mode [ 76.251184][ T5299] bond_slave_1: entered promiscuous mode [ 76.258986][ T5299] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 76.268144][ T5299] bond_slave_0: left promiscuous mode [ 76.273593][ T5299] bond_slave_1: left promiscuous mode [ 76.354867][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.418793][ T5306] tipc: Enabled bearer , priority 0 [ 76.469063][ T5306] all (unregistering): Released all slaves [ 76.551773][ T5312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.526'. [ 76.578396][ T5311] syzkaller0: entered promiscuous mode [ 76.587483][ T5311] syzkaller0: entered allmulticast mode [ 76.595081][ T5312] SELinux: failed to load policy [ 76.622137][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 76.677912][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 76.795046][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 76.795058][ T29] audit: type=1400 audit(1756322047.935:2323): avc: denied { setopt } for pid=5329 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.897014][ T5334] netlink: 'syz.3.535': attribute type 4 has an invalid length. [ 76.910204][ T5334] netlink: 'syz.3.535': attribute type 4 has an invalid length. [ 77.896169][ T5355] bond_slave_0: entered promiscuous mode [ 77.901885][ T5355] bond_slave_1: entered promiscuous mode [ 77.924205][ T5355] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 77.943015][ T5355] bond_slave_0: left promiscuous mode [ 77.948553][ T5355] bond_slave_1: left promiscuous mode [ 77.964784][ T29] audit: type=1326 audit(1756322049.105:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 77.988444][ T29] audit: type=1326 audit(1756322049.105:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.012205][ T29] audit: type=1326 audit(1756322049.105:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.035708][ T29] audit: type=1326 audit(1756322049.105:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.059334][ T29] audit: type=1326 audit(1756322049.105:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.085736][ T29] audit: type=1326 audit(1756322049.105:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.109774][ T29] audit: type=1326 audit(1756322049.105:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.133267][ T29] audit: type=1326 audit(1756322049.205:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.157319][ T29] audit: type=1326 audit(1756322049.205:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 78.193616][ T5360] tipc: Enabled bearer , priority 0 [ 78.200135][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'. [ 78.209112][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'. [ 78.239642][ T5362] all (unregistering): Released all slaves [ 78.392192][ T5366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 78.416465][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 78.445420][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 78.508493][ T5373] netlink: 44 bytes leftover after parsing attributes in process `syz.1.546'. [ 78.517492][ T5373] netem: unknown loss type 12 [ 78.522491][ T5373] netem: change failed [ 79.318660][ T3411] tipc: Node number set to 1420177226 [ 79.654882][ T5402] loop4: detected capacity change from 0 to 128 [ 79.663481][ T5402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.675890][ T5402] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.721932][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.762547][ T5414] hsr_slave_0: left promiscuous mode [ 79.768208][ T5414] hsr_slave_1: left promiscuous mode [ 79.913087][ T5425] syzkaller0: entered promiscuous mode [ 81.659197][ T5498] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 81.673293][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.699507][ T5498] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 81.711367][ T5498] bond1: (slave batadv3): making interface the new active one [ 81.720629][ T5498] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 81.825621][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 81.825639][ T29] audit: type=1400 audit(1756322052.965:2426): avc: denied { mount } for pid=5505 comm="syz.3.593" name="/" dev="configfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.940925][ T29] audit: type=1400 audit(1756322052.965:2427): avc: denied { search } for pid=5505 comm="syz.3.593" name="/" dev="configfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.963446][ T29] audit: type=1400 audit(1756322052.965:2428): avc: denied { search } for pid=5505 comm="syz.3.593" name="/" dev="configfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.986489][ T29] audit: type=1400 audit(1756322052.965:2429): avc: denied { read open } for pid=5505 comm="syz.3.593" path="/" dev="configfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.016591][ T29] audit: type=1326 audit(1756322053.155:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 82.040448][ T29] audit: type=1326 audit(1756322053.155:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 82.079492][ T29] audit: type=1326 audit(1756322053.155:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 82.103011][ T29] audit: type=1326 audit(1756322053.155:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 82.127166][ T29] audit: type=1326 audit(1756322053.205:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 82.152113][ T29] audit: type=1326 audit(1756322053.205:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c0c2ebe9 code=0x7ffc0000 [ 82.228999][ T5520] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 82.241433][ T5520] bond0: (slave dummy0): Releasing backup interface [ 82.250179][ T5520] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.291694][ T5520] team0: Failed to send options change via netlink (err -105) [ 82.299244][ T5520] team0: Port device dummy0 added [ 82.310051][ T5533] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 82.318146][ T5524] tipc: Enabled bearer , priority 0 [ 82.326872][ T5530] tipc: Disabling bearer [ 82.355883][ T5529] syzkaller0: entered promiscuous mode [ 82.361595][ T5529] syzkaller0: entered allmulticast mode [ 82.369531][ T5533] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.382526][ T5533] team0: Failed to send options change via netlink (err -105) [ 82.395166][ T5533] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.407537][ T5533] team0: Port device dummy0 removed [ 82.420350][ T5533] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.460327][ T5542] syzkaller0: entered promiscuous mode [ 82.465846][ T5542] syzkaller0: entered allmulticast mode [ 82.725571][ T5561] __nla_validate_parse: 4 callbacks suppressed [ 82.725625][ T5561] netlink: 84 bytes leftover after parsing attributes in process `syz.2.614'. [ 83.512454][ T5574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.618'. [ 83.521839][ T5574] netlink: 212 bytes leftover after parsing attributes in process `syz.4.618'. [ 83.687993][ T3530] hid_parser_main: 22 callbacks suppressed [ 83.688008][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.701374][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.708794][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.716424][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.723918][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.731433][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.739086][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.746566][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.753980][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.761406][ T3530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.786710][ T3530] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.814584][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 83.837616][ T5592] batadv2: left allmulticast mode [ 83.842937][ T5592] batadv2: left promiscuous mode [ 83.848185][ T5592] bridge0: port 4(batadv2) entered disabled state [ 83.870080][ T5592] batadv1: left allmulticast mode [ 83.875121][ T5592] batadv1: left promiscuous mode [ 83.880200][ T5592] bridge0: port 3(batadv1) entered disabled state [ 83.910525][ T5592] bridge_slave_1: left allmulticast mode [ 83.916266][ T5592] bridge_slave_1: left promiscuous mode [ 83.922154][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.939866][ T5592] bridge_slave_0: left allmulticast mode [ 83.945583][ T5592] bridge_slave_0: left promiscuous mode [ 83.951358][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.547286][ T5619] tipc: Enabled bearer , priority 0 [ 84.570186][ T5619] syzkaller0: entered promiscuous mode [ 84.575975][ T5619] syzkaller0: entered allmulticast mode [ 84.745251][ T5621] tipc: Resetting bearer [ 84.759651][ T5618] tipc: Resetting bearer [ 84.767986][ T5618] tipc: Disabling bearer [ 85.030858][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 85.060220][ T5634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.640'. [ 85.073755][ T5634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.086827][ T5634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.100136][ T5634] bond0 (unregistering): Released all slaves [ 85.126678][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 85.236582][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 85.245582][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 85.250721][ T5644] netlink: 'syz.1.645': attribute type 4 has an invalid length. [ 85.262383][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 85.328725][ T3530] IPVS: starting estimator thread 0... [ 85.419431][ T5651] IPVS: using max 2880 ests per chain, 144000 per kthread [ 85.585172][ T5679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.701152][ T5679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.796541][ T5679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.860980][ T5679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.924665][ T4322] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945710][ T4322] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.958925][ T4322] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.978202][ T4322] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.073062][ T5689] net_ratelimit: 31 callbacks suppressed [ 86.073076][ T5689] netlink: zone id is out of range [ 86.085317][ T5689] netlink: zone id is out of range [ 86.090647][ T5689] netlink: zone id is out of range [ 86.095952][ T5689] netlink: del zone limit has 8 unknown bytes [ 86.292979][ T5702] veth0_to_team: entered promiscuous mode [ 86.298909][ T5702] veth0_to_team: entered allmulticast mode [ 86.394794][ T5705] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 86.433062][ T5705] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 87.112870][ T5722] SELinux: policydb version -1973046224 does not match my version range 15-35 [ 87.122290][ T5722] SELinux: failed to load policy [ 87.159464][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 87.159476][ T29] audit: type=1400 audit(1756322058.305:2524): avc: denied { name_bind } for pid=5723 comm="syz.3.676" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.375542][ T29] audit: type=1326 audit(1756322058.515:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.399095][ T29] audit: type=1326 audit(1756322058.515:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.404798][ T5734] bond1: entered promiscuous mode [ 87.422445][ T29] audit: type=1326 audit(1756322058.515:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.422491][ T29] audit: type=1326 audit(1756322058.515:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.429301][ T5734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.451145][ T29] audit: type=1326 audit(1756322058.515:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.504558][ T29] audit: type=1326 audit(1756322058.515:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.527963][ T29] audit: type=1326 audit(1756322058.515:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.551300][ T29] audit: type=1326 audit(1756322058.515:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.575166][ T29] audit: type=1326 audit(1756322058.515:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 87.642485][ T5746] tipc: New replicast peer: 255.255.255.255 [ 87.648653][ T5746] tipc: Enabled bearer , priority 10 [ 87.858198][ T5762] __nla_validate_parse: 5 callbacks suppressed [ 87.858213][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 87.878638][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 88.111492][ T5767] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 88.141176][ T5767] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 88.263749][ T5774] C: renamed from team_slave_0 (while UP) [ 88.291329][ T5774] netlink: 164 bytes leftover after parsing attributes in process `syz.4.695'. [ 88.347599][ T5769] can0: slcan on ttyS3. [ 88.411640][ T5769] can0 (unregistered): slcan off ttyS3. [ 88.421768][ T5780] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.698'. [ 88.438417][ T5776] netlink: 256 bytes leftover after parsing attributes in process `syz.0.697'. [ 88.844913][ T5808] dummy0: entered allmulticast mode [ 89.212504][ T5813] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.290160][ T5813] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.340972][ T5813] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.400246][ T5813] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.467318][ T4322] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.483078][ T4322] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491390][ T5795] dummy0: left allmulticast mode [ 89.496621][ T4322] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505997][ T4322] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.546567][ T5816] veth0_to_team: entered promiscuous mode [ 89.632988][ T5830] netlink: 104 bytes leftover after parsing attributes in process `syz.2.719'. [ 89.647255][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 89.778271][ T5843] tipc: New replicast peer: 255.255.255.255 [ 89.784470][ T5843] tipc: Enabled bearer , priority 10 [ 89.885126][ T5849] block device autoloading is deprecated and will be removed. [ 89.932508][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 90.493901][ T5866] sd 0:0:1:0: device reset [ 90.575563][ T5871] netlink: 14 bytes leftover after parsing attributes in process `syz.4.733'. [ 90.597349][ T5871]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.616010][ T5871]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.629081][ T5871]  (unregistering): Released all slaves [ 90.640362][ T5873] tipc: New replicast peer: 255.255.255.255 [ 90.646410][ T5873] tipc: Enabled bearer , priority 10 [ 90.685865][ T5879] tipc: Enabled bearer , priority 0 [ 90.693412][ T5879] syzkaller0: entered promiscuous mode [ 90.698940][ T5879] syzkaller0: entered allmulticast mode [ 90.712638][ T5879] tipc: Resetting bearer [ 90.720263][ T5878] tipc: Resetting bearer [ 90.727865][ T5878] tipc: Disabling bearer [ 90.786582][ T5882] netlink: 'syz.0.738': attribute type 4 has an invalid length. [ 90.799173][ T5882] netlink: 'syz.0.738': attribute type 4 has an invalid length. [ 90.991877][ T5902] loop1: detected capacity change from 0 to 128 [ 91.084162][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 91.628084][ T5916] loop1: detected capacity change from 0 to 512 [ 91.635478][ T5916] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.642322][ T5916] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.655400][ T5916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.667076][ T5916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 91.675377][ T5916] System zones: 1-12 [ 91.679910][ T5916] EXT4-fs (loop1): 1 truncate cleaned up [ 91.685941][ T5916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.720193][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.777385][ T5917] hub 8-0:1.0: USB hub found [ 91.783373][ T5917] hub 8-0:1.0: 8 ports detected [ 91.839607][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 91.858624][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 91.882475][ T5930] geneve2: entered promiscuous mode [ 91.913650][ T5930] 0: reclassify loop, rule prio 0, protocol 800 [ 91.920155][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 92.092019][ T5944] IPv6: sit2: Disabled Multicast RS [ 92.098248][ T5944] sit2: entered allmulticast mode [ 92.387246][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 92.448723][ T4351] 0: reclassify loop, rule prio 0, protocol 800 [ 92.846778][ T5956] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 92.847385][ T5954] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.870246][ T5956] team0: Port device dummy0 added [ 92.879243][ T5956] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 92.889929][ T5956] team0: Port device dummy0 removed [ 92.898014][ T5956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.915835][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 92.915919][ T29] audit: type=1326 audit(1756322064.055:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 92.947387][ T5954] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.953408][ T29] audit: type=1326 audit(1756322064.055:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 92.981425][ T29] audit: type=1326 audit(1756322064.055:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.005525][ T29] audit: type=1326 audit(1756322064.055:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.029434][ T29] audit: type=1326 audit(1756322064.055:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.053086][ T29] audit: type=1326 audit(1756322064.055:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.077008][ T29] audit: type=1326 audit(1756322064.055:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.081569][ T5963] __nla_validate_parse: 4 callbacks suppressed [ 93.081586][ T5963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.770'. [ 93.100263][ T29] audit: type=1326 audit(1756322064.055:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.100291][ T29] audit: type=1326 audit(1756322064.055:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.162317][ T29] audit: type=1326 audit(1756322064.055:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 93.220531][ T5954] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.300110][ T5954] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.369888][ T4351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.388628][ T4351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.397150][ T4351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.436728][ T4351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459009][ T4366] 0: reclassify loop, rule prio 0, protocol 800 [ 93.465501][ T4366] 0: reclassify loop, rule prio 0, protocol 800 [ 93.548718][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 93.621832][ T5977] syzkaller0: entered promiscuous mode [ 93.627340][ T5977] syzkaller0: entered allmulticast mode [ 94.026701][ T5999] hub 8-0:1.0: USB hub found [ 94.026828][ T5999] hub 8-0:1.0: 8 ports detected [ 94.046686][ T6006] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 94.055773][ T6006] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 94.057118][ T6003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 94.079773][ T6003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.079858][ T6003] vhci_hcd vhci_hcd.0: Device attached [ 94.082555][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.089857][ T3411] 0: reclassify loop, rule prio 0, protocol 800 [ 94.095071][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.104206][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 94.116381][ T6003] veth0: entered promiscuous mode [ 94.121425][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.131106][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 94.156715][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.156738][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.156854][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.167061][ T6003] veth0 (unregistering): left promiscuous mode [ 94.174598][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.174619][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 94.261838][ T4868] vhci_hcd: vhci_device speed not set [ 94.262508][ T6008] vhci_hcd: connection closed [ 94.262884][ T4322] vhci_hcd: stop threads [ 94.262894][ T4322] vhci_hcd: release socket [ 94.262905][ T4322] vhci_hcd: disconnect device [ 94.318622][ T4868] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 94.318652][ T4868] usb 7-1: enqueue for inactive port 0 [ 94.318673][ T4868] usb 7-1: enqueue for inactive port 0 [ 94.318692][ T4868] usb 7-1: enqueue for inactive port 0 [ 94.389201][ T4868] vhci_hcd: vhci_device speed not set [ 94.931071][ T6030] loop1: detected capacity change from 0 to 512 [ 94.949604][ T6030] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.794: error while reading EA inode 32 err=-116 [ 94.970145][ T6030] EXT4-fs (loop1): Remounting filesystem read-only [ 94.976762][ T6030] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.989823][ T6030] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 95.002840][ T6030] EXT4-fs (loop1): 1 orphan inode deleted [ 95.009118][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.023207][ T6030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.100822][ T6034] loop1: detected capacity change from 0 to 512 [ 95.107567][ T6034] EXT4-fs: Ignoring removed bh option [ 95.148968][ T6034] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 95.172078][ T6034] EXT4-fs (loop1): 1 truncate cleaned up [ 95.189373][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.379402][ T6042] syzkaller0: entered promiscuous mode [ 95.815713][ T6050] ªªªªªª: renamed from vlan0 (while UP) [ 95.918263][ T6062] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.993431][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.013028][ T6062] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.047685][ T6069] random: crng reseeded on system resumption [ 96.070781][ T6062] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.120508][ T6062] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.171062][ T6074] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.171078][ T6074] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 96.236108][ T4351] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.236175][ T4351] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.236225][ T4351] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.236329][ T4351] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.994529][ T6087] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.030274][ T6089] syzkaller0: entered promiscuous mode [ 97.042355][ T6092] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 97.053361][ T6092] syzkaller0: entered promiscuous mode [ 97.058918][ T6092] syzkaller0: entered allmulticast mode [ 97.080448][ T6087] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.174618][ T6087] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.251347][ T6087] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.309929][ T6114] 9pnet_fd: Insufficient options for proto=fd [ 97.370489][ T6118] vhci_hcd: invalid port number 96 [ 97.375641][ T6118] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 97.400622][ T6120] pimreg: entered allmulticast mode [ 97.407733][ T6120] pimreg: left allmulticast mode [ 97.628630][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 99.116212][ T6137] syzkaller0: entered promiscuous mode [ 99.299501][ T4886] 0: reclassify loop, rule prio 0, protocol 800 [ 99.938935][ T4885] 0: reclassify loop, rule prio 0, protocol 800 [ 100.160229][ T6151] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 100.182504][ T6151] team0: Port device dummy0 added [ 100.204556][ T6151] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 100.241761][ T6151] team0: Port device dummy0 removed [ 100.324056][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 100.324070][ T29] audit: type=1326 audit(1756322327.457:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.324092][ T29] audit: type=1326 audit(1756322327.457:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.336911][ T29] audit: type=1326 audit(1756322327.477:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.401465][ T29] audit: type=1326 audit(1756322327.477:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.425163][ T29] audit: type=1326 audit(1756322327.477:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.425661][ T29] audit: type=1326 audit(1756322327.557:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.450023][ T29] audit: type=1326 audit(1756322327.597:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.450049][ T29] audit: type=1326 audit(1756322327.597:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.453808][ T6160] geneve2: entered promiscuous mode [ 100.483124][ T29] audit: type=1326 audit(1756322327.597:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.483149][ T29] audit: type=1326 audit(1756322327.597:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 100.845720][ T4375] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.849403][ T4375] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.876853][ T4375] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.876887][ T4375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.350324][ T6187] bond0: (slave dummy0): Releasing backup interface [ 101.364295][ T6187] bridge_slave_0: left allmulticast mode [ 101.370204][ T6187] bridge_slave_0: left promiscuous mode [ 101.375922][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.489181][ T6187] bridge_slave_1: left allmulticast mode [ 101.494941][ T6187] bridge_slave_1: left promiscuous mode [ 101.500639][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.534883][ T6187] bond0: (slave bond_slave_0): Releasing backup interface [ 101.544922][ T6187] bond0: (slave bond_slave_1): Releasing backup interface [ 101.556071][ T6187] team0: Port device team_slave_0 removed [ 101.563559][ T6187] team0: Port device team_slave_1 removed [ 101.583808][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.598911][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.767105][ T6190] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 101.792704][ T6190] team0: Port device dummy0 added [ 101.817722][ T6190] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 101.857908][ T6190] team0: Port device dummy0 removed [ 101.977808][ T6202] __nla_validate_parse: 8 callbacks suppressed [ 101.977823][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 102.112305][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.853'. [ 102.121321][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 102.130269][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.853'. [ 102.142197][ T6205] geneve2: entered promiscuous mode [ 102.176343][ T6206] loop1: detected capacity change from 0 to 512 [ 102.250278][ T6206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.266931][ T6206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.854: bg 0: block 248: padding at end of block bitmap is not set [ 102.294009][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.853'. [ 102.315204][ T6206] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.854: Failed to acquire dquot type 1 [ 102.339803][ T6206] EXT4-fs (loop1): 1 truncate cleaned up [ 102.350161][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.401090][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.440410][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 102.470924][ T6220] bridge0: entered allmulticast mode [ 102.502968][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 102.527374][ T6222] syzkaller0: entered promiscuous mode [ 102.539689][ T6220] bridge0 (unregistering): left allmulticast mode [ 102.761863][ T6228] 9pnet_fd: Insufficient options for proto=fd [ 103.815734][ T6243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6243 comm=syz.1.871 [ 103.824644][ T6247] 0: reclassify loop, rule prio 0, protocol 800 [ 103.959579][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 103.968630][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 103.977542][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 104.464724][ T6262] syzkaller0: entered promiscuous mode [ 104.898622][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 105.058845][ T4322] 0: reclassify loop, rule prio 0, protocol 800 [ 105.978602][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 105.978618][ T29] audit: type=1326 audit(1756322333.107:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978667][ T29] audit: type=1326 audit(1756322333.107:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978688][ T29] audit: type=1326 audit(1756322333.107:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978709][ T29] audit: type=1326 audit(1756322333.107:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978730][ T29] audit: type=1326 audit(1756322333.107:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978783][ T29] audit: type=1326 audit(1756322333.107:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.978843][ T29] audit: type=1326 audit(1756322333.107:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 105.996820][ T29] audit: type=1326 audit(1756322333.127:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 106.249005][ T29] audit: type=1326 audit(1756322333.167:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 106.272736][ T29] audit: type=1326 audit(1756322333.167:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 106.319699][ T6292] team0: Port device C removed [ 106.330309][ T6292] team0: Port device team_slave_1 removed [ 106.337284][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.344863][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 106.351184][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.360895][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.368324][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.383087][ T6292] bond1: (slave batadv3): Releasing active interface [ 106.418649][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 106.425085][ T3530] 0: reclassify loop, rule prio 0, protocol 800 [ 106.434296][ T4375] tipc: Resetting bearer [ 106.478194][ T6306] syzkaller0: entered promiscuous mode [ 107.058582][ T6324] wireguard0: entered promiscuous mode [ 107.064237][ T6324] wireguard0: entered allmulticast mode [ 107.201122][ T6314] __nla_validate_parse: 2 callbacks suppressed [ 107.201138][ T6314] netlink: 268 bytes leftover after parsing attributes in process `syz.2.896'. [ 107.269088][ T6328] Invalid logical block size (6) [ 107.378716][ T3530] 0: reclassify loop, rule prio 0, protocol 800 [ 107.385264][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 107.652164][ T6349] loop1: detected capacity change from 0 to 1024 [ 107.673143][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.799917][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.047771][ T6356] serio: Serial port ptm0 [ 108.207170][ T6364] tipc: Enabled bearer , priority 0 [ 108.227627][ T6364] syzkaller0: entered promiscuous mode [ 108.227646][ T6364] syzkaller0: entered allmulticast mode [ 108.246341][ T6364] tipc: Resetting bearer [ 108.248114][ T6363] tipc: Resetting bearer [ 108.255849][ T6363] tipc: Disabling bearer [ 108.772218][ T6380] netlink: zone id is out of range [ 108.777595][ T6380] netlink: zone id is out of range [ 108.857773][ T6387] netlink: 100 bytes leftover after parsing attributes in process `syz.2.920'. [ 108.962043][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 109.157401][ T6401] tipc: Enabled bearer , priority 0 [ 109.166279][ T6401] syzkaller0: entered promiscuous mode [ 109.172005][ T6401] syzkaller0: entered allmulticast mode [ 109.186954][ T6401] tipc: Resetting bearer [ 109.200210][ T6404] netlink: 332 bytes leftover after parsing attributes in process `syz.2.938'. [ 109.211143][ T6400] tipc: Resetting bearer [ 109.229594][ T6400] tipc: Disabling bearer [ 109.261753][ T6411] sd 0:0:1:0: device reset [ 109.337881][ T6421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 109.570076][ T6415] hub 8-0:1.0: USB hub found [ 109.570166][ T6415] hub 8-0:1.0: 8 ports detected [ 110.226014][ T6436] net_ratelimit: 38 callbacks suppressed [ 110.226031][ T6436] Set syz1 is full, maxelem 65536 reached [ 110.274195][ T6441] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 110.291869][ T6441] bond0: entered promiscuous mode [ 110.292030][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.322287][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.336282][ T6441] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 110.346763][ T6441] bond0: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 110.359024][ T6441] bond0: (slave vxcan1): making interface the new active one [ 110.366519][ T6441] vxcan1: entered promiscuous mode [ 110.372773][ T6441] bond0: (slave vxcan1): Enslaving as an active interface with an up link [ 110.388381][ T6446] tipc: Enabled bearer , priority 0 [ 110.414641][ T6446] syzkaller0: entered promiscuous mode [ 110.420242][ T6446] syzkaller0: entered allmulticast mode [ 110.463471][ T6446] tipc: Resetting bearer [ 110.473711][ T6445] tipc: Resetting bearer [ 110.495636][ T6445] tipc: Disabling bearer [ 110.514726][ T6450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6450 comm=syz.0.947 [ 110.567997][ T6452] wireguard0: entered promiscuous mode [ 110.573564][ T6452] wireguard0: entered allmulticast mode [ 110.814978][ T6454] hub 8-0:1.0: USB hub found [ 110.818832][ T271] 0: reclassify loop, rule prio 0, protocol 800 [ 110.828650][ T6454] hub 8-0:1.0: 8 ports detected [ 111.077928][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 111.077944][ T29] audit: type=1400 audit(1756322338.207:3056): avc: denied { open } for pid=6469 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.104053][ T29] audit: type=1400 audit(1756322338.207:3057): avc: denied { kernel } for pid=6469 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.208588][ T29] audit: type=1400 audit(1756322338.297:3058): avc: denied { read write } for pid=6470 comm="syz.0.953" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.233643][ T29] audit: type=1400 audit(1756322338.297:3059): avc: denied { open } for pid=6470 comm="syz.0.953" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.237475][ T6475] C: renamed from team_slave_0 [ 111.288165][ T29] audit: type=1400 audit(1756322338.407:3060): avc: denied { create } for pid=6476 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.308898][ T29] audit: type=1400 audit(1756322338.407:3061): avc: denied { read } for pid=6476 comm="syz.0.955" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.332068][ T29] audit: type=1400 audit(1756322338.407:3062): avc: denied { open } for pid=6476 comm="syz.0.955" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.368286][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 111.479299][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.516354][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.533044][ T6475] netlink: 164 bytes leftover after parsing attributes in process `syz.3.964'. [ 111.608216][ T6479] can0: slcan on ttyS3. [ 111.643897][ T29] audit: type=1400 audit(1756322338.497:3063): avc: denied { write } for pid=6472 comm="syz.4.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.664516][ T29] audit: type=1400 audit(1756322338.617:3064): avc: denied { write } for pid=6476 comm="syz.0.955" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.687533][ T29] audit: type=1326 audit(1756322338.707:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c1caebe9 code=0x7ffc0000 [ 111.738723][ T6473] can0 (unregistered): slcan off ttyS3. [ 112.679998][ T6491] Set syz1 is full, maxelem 65536 reached [ 112.824170][ T6506] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.963'. [ 113.671136][ T6515] loop1: detected capacity change from 0 to 128 [ 113.679836][ T6513] netlink: 14 bytes leftover after parsing attributes in process `syz.3.967'. [ 113.697379][ T6513] hsr_slave_0: left promiscuous mode [ 113.704858][ T6513] hsr_slave_1: left promiscuous mode [ 113.706129][ T6515] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.725436][ T6519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.736089][ T6515] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.830109][ T6519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.842852][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.899763][ T6519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.935355][ T6529] loop1: detected capacity change from 0 to 512 [ 113.942285][ T6529] ext4: Unknown parameter 'pcr' [ 113.996720][ T6519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.085633][ T4375] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.102098][ T4375] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.121731][ T4375] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.148640][ T4375] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.272412][ T6547] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 114.310514][ T6547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.330733][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.339701][ T6547] bond2: (slave batadv1): making interface the new active one [ 114.348107][ T6547] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 115.495521][ T6580] netlink: 14 bytes leftover after parsing attributes in process `syz.4.986'. [ 115.504732][ T6580] hsr_slave_0: left promiscuous mode [ 115.511328][ T6580] hsr_slave_1: left promiscuous mode [ 115.653461][ T6587] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 115.670093][ T6587] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 115.683439][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 116.166747][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 116.173006][ T29] audit: type=1400 audit(1756322343.217:3224): avc: denied { execmem } for pid=6589 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.192160][ T29] audit: type=1400 audit(1756322343.227:3225): avc: denied { bind } for pid=6590 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.212803][ T29] audit: type=1400 audit(1756322343.227:3226): avc: denied { setopt } for pid=6590 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.233310][ T29] audit: type=1400 audit(1756322343.227:3227): avc: denied { read } for pid=6590 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.292344][ T29] audit: type=1400 audit(1756322343.427:3228): avc: denied { ioctl } for pid=6590 comm="syz.3.990" path="socket:[17198]" dev="sockfs" ino=17198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.328528][ T29] audit: type=1400 audit(1756322343.457:3229): avc: denied { firmware_load } for pid=6593 comm="syz.0.992" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 116.466149][ T6605] can0: slcan on ttyS3. [ 116.760642][ T6603] can0 (unregistered): slcan off ttyS3. [ 116.795250][ T29] audit: type=1400 audit(1756322343.927:3230): avc: denied { create } for pid=6606 comm="syz.1.997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.817680][ T29] audit: type=1400 audit(1756322343.937:3231): avc: denied { mounton } for pid=6606 comm="syz.1.997" path="/203/file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.841289][ T29] audit: type=1400 audit(1756322343.937:3232): avc: denied { mount } for pid=6606 comm="syz.1.997" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.865048][ T29] audit: type=1400 audit(1756322344.007:3233): avc: denied { setattr } for pid=6606 comm="syz.1.997" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.060704][ T6611] tipc: Enabled bearer , priority 0 [ 117.092112][ T6611] syzkaller0: entered promiscuous mode [ 117.097657][ T6611] syzkaller0: entered allmulticast mode [ 117.125466][ T6611] tipc: Resetting bearer [ 117.132661][ T6608] tipc: Resetting bearer [ 117.144223][ T6608] tipc: Disabling bearer [ 117.436362][ T6626] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1004'. [ 117.450691][ T6626] hsr_slave_0: left promiscuous mode [ 117.457471][ T6626] hsr_slave_1: left promiscuous mode [ 117.713567][ T6637] xt_policy: too many policy elements [ 118.683615][ T6659] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.735351][ T6659] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.775712][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 118.785012][ T6667] bridge_slave_1: left allmulticast mode [ 118.790844][ T6667] bridge_slave_1: left promiscuous mode [ 118.796669][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.833085][ T6667] bridge_slave_0: left allmulticast mode [ 118.838871][ T6667] bridge_slave_0: left promiscuous mode [ 118.844711][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.967270][ T6673] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1020'. [ 119.052451][ T6659] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.132930][ T6660] Set syz1 is full, maxelem 65536 reached [ 119.160030][ T6659] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.205421][ T4366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.222243][ T4322] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.251052][ T4322] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.268576][ T4325] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.398865][ T6689] Falling back ldisc for ttyS3. [ 119.625602][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 119.634701][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 120.408128][ T6703] netlink: 'syz.4.1029': attribute type 4 has an invalid length. [ 120.438760][ T6703] netlink: 'syz.4.1029': attribute type 4 has an invalid length. [ 120.465763][ T6704] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 120.715319][ T6717] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.737680][ T6719] tipc: Bearer : already 2 bearers with priority 10 [ 120.745283][ T6719] tipc: Bearer : trying with adjusted priority [ 120.752395][ T6719] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 120.811935][ T6717] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.881023][ T6717] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.950042][ T6717] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.006708][ T4322] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.017318][ T4322] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.029032][ T4322] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.040943][ T4366] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.558641][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 121.558657][ T29] audit: type=1404 audit(1756322348.667:3434): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 121.580227][ T29] audit: type=1404 audit(1756322348.667:3435): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 121.599691][ T29] audit: type=1400 audit(1756322348.737:3436): avc: denied { setopt } for pid=6726 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.609624][ T6734] syzkaller0: entered promiscuous mode [ 121.620539][ T29] audit: type=1400 audit(1756322348.737:3437): avc: denied { create } for pid=6726 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.625878][ T6734] syzkaller0: entered allmulticast mode [ 121.646488][ T29] audit: type=1400 audit(1756322348.737:3438): avc: denied { write } for pid=6726 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.646581][ T29] audit: type=1400 audit(1756322348.737:3439): avc: denied { read } for pid=6726 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.658275][ T29] audit: type=1400 audit(1756322348.787:3440): avc: denied { ioctl } for pid=6726 comm="syz.3.1043" path="socket:[18516]" dev="sockfs" ino=18516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.723451][ T29] audit: type=1400 audit(1756322348.817:3441): avc: denied { map_create } for pid=6723 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.743114][ T29] audit: type=1400 audit(1756322348.817:3442): avc: denied { bpf } for pid=6723 comm="syz.1.1041" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.763801][ T29] audit: type=1400 audit(1756322348.817:3443): avc: denied { map_read map_write } for pid=6723 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.887854][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'. [ 121.896867][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'. [ 123.384875][ T6793] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 123.407992][ T6793] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 123.437865][ T6797] syzkaller0: entered promiscuous mode [ 123.443414][ T6797] syzkaller0: entered allmulticast mode [ 123.463132][ T6799] veth0_to_team: entered promiscuous mode [ 123.468950][ T6799] veth0_to_team: entered allmulticast mode [ 123.471825][ T6801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'. [ 123.517623][ T6807] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 123.534206][ T6807] team0: Port device dummy0 added [ 123.690494][ T6807] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 123.943045][ T6807] team0: Port device dummy0 removed [ 124.066283][ T6834] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 124.107458][ T6834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.122391][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 124.149438][ T6834] bond2 (unregistering): Released all slaves [ 124.264269][ T6851] SELinux: ebitmap: truncated map [ 124.272385][ T6851] SELinux: failed to load policy [ 124.278875][ T6851] program syz.3.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.325476][ T6857] syzkaller0: entered promiscuous mode [ 124.331071][ T6857] syzkaller0: entered allmulticast mode [ 124.589554][ T6866] syzkaller0: entered promiscuous mode [ 124.595092][ T6866] syzkaller0: entered allmulticast mode [ 124.696401][ T6870] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 124.721389][ T6870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.817770][ T6878] syz.1.1095 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 124.846075][ T6882] tipc: Enabled bearer , priority 0 [ 124.853584][ T6882] syzkaller0: entered promiscuous mode [ 124.859110][ T6882] syzkaller0: entered allmulticast mode [ 124.868677][ T6882] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 124.884162][ T6882] tipc: Resetting bearer [ 124.910113][ T6881] tipc: Resetting bearer [ 124.923723][ T6881] tipc: Disabling bearer [ 124.931525][ T6884] sd 0:0:1:0: device reset [ 124.981192][ T6888] syzkaller0: entered promiscuous mode [ 124.986733][ T6888] syzkaller0: entered allmulticast mode [ 125.041705][ T6892] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 125.048279][ T6892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.055782][ T6892] vhci_hcd vhci_hcd.0: Device attached [ 125.122705][ T6900] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 125.130615][ T6900] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'. [ 125.216301][ T6907] capability: warning: `syz.1.1107' uses 32-bit capabilities (legacy support in use) [ 125.238561][ T4868] vhci_hcd: vhci_device speed not set [ 125.245319][ T6908] hub 9-0:1.0: USB hub found [ 125.247892][ T6907] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1107'. [ 125.250429][ T6908] hub 9-0:1.0: 8 ports detected [ 125.298541][ T4868] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 125.324085][ T6908] netlink: 'syz.2.1108': attribute type 11 has an invalid length. [ 125.435932][ T6920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1112'. [ 125.480139][ T6926] syzkaller0: entered promiscuous mode [ 125.485753][ T6926] syzkaller0: entered allmulticast mode [ 125.574406][ T6929] block device autoloading is deprecated and will be removed. [ 125.597214][ T6893] vhci_hcd: connection reset by peer [ 125.603673][ T4325] vhci_hcd: stop threads [ 125.607952][ T4325] vhci_hcd: release socket [ 125.612416][ T4325] vhci_hcd: disconnect device [ 125.631158][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'. [ 125.640561][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 125.791539][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 125.813438][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 125.873051][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 126.072040][ T6955] syzkaller0: entered promiscuous mode [ 126.077555][ T6955] syzkaller0: entered allmulticast mode [ 126.323049][ T6968] IPv6: Can't replace route, no match found [ 126.357898][ T6974] syzkaller0: entered promiscuous mode [ 126.363663][ T6974] syzkaller0: entered allmulticast mode [ 126.390703][ T6972] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.431217][ T6972] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.447730][ T6978] syzkaller0: entered promiscuous mode [ 126.453446][ T6978] syzkaller0: entered allmulticast mode [ 126.472783][ T6972] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.522178][ T6972] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.618274][ T4351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.638735][ T4351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.647892][ T4351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.665962][ T4351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.717982][ T6999] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 126.727609][ T6997] SELinux: policydb version 0 does not match my version range 15-35 [ 126.731832][ T6999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.735767][ T6997] SELinux: failed to load policy [ 126.751771][ T6999] vlan2: entered promiscuous mode [ 126.756864][ T6999] bond3: entered promiscuous mode [ 126.762056][ T6999] vlan2: entered allmulticast mode [ 126.767233][ T6999] bond3: entered allmulticast mode [ 126.774298][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 126.774312][ T29] audit: type=1400 audit(1756322353.907:3689): avc: denied { create } for pid=6998 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 126.809037][ T6999] bond3: (slave gretap1): making interface the new active one [ 126.816640][ T6999] gretap1: entered promiscuous mode [ 126.816735][ T29] audit: type=1400 audit(1756322353.937:3690): avc: denied { write } for pid=6998 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 126.822113][ T6999] gretap1: entered allmulticast mode [ 126.850133][ T6999] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 126.887020][ T7002] syzkaller0: entered promiscuous mode [ 126.892784][ T7002] syzkaller0: entered allmulticast mode [ 126.900087][ T7004] SELinux: policydb version -1973046224 does not match my version range 15-35 [ 126.911356][ T7004] SELinux: failed to load policy [ 126.922017][ T29] audit: type=1400 audit(1756322354.057:3691): avc: denied { bind } for pid=7003 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.946366][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7008 comm=syz.4.1151 [ 126.948533][ T29] audit: type=1400 audit(1756322354.077:3692): avc: denied { connect } for pid=7007 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.997233][ T7011] syzkaller0: entered promiscuous mode [ 127.002778][ T7011] syzkaller0: entered allmulticast mode [ 127.042114][ T29] audit: type=1400 audit(1756322354.177:3693): avc: denied { write } for pid=7014 comm="syz.0.1154" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.097111][ T29] audit: type=1400 audit(1756322354.227:3694): avc: denied { create } for pid=7014 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 127.897244][ T7025] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 127.906566][ T7025] bond0: (slave dummy0): Releasing backup interface [ 127.914776][ T7025] team0: Failed to send options change via netlink (err -105) [ 127.922477][ T7025] team0: Port device dummy0 added [ 127.930648][ T7025] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 127.939411][ T7025] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.949387][ T7025] team0: Failed to send options change via netlink (err -105) [ 127.956906][ T7025] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.965825][ T29] audit: type=1400 audit(1756322355.097:3695): avc: denied { create } for pid=7028 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.980376][ T7025] team0: Port device dummy0 removed [ 127.985642][ T29] audit: type=1400 audit(1756322355.097:3696): avc: denied { ioctl } for pid=7028 comm="syz.4.1161" path="socket:[19553]" dev="sockfs" ino=19553 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.993715][ T7025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.060712][ T7032] SELinux: failed to load policy [ 128.151538][ T7042] syzkaller0: entered promiscuous mode [ 128.157033][ T7042] syzkaller0: entered allmulticast mode [ 128.225126][ T29] audit: type=1400 audit(1756322355.357:3697): avc: denied { setopt } for pid=7044 comm="syz.4.1166" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.262239][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 128.422535][ T7060] netlink: 'syz.0.1180': attribute type 18 has an invalid length. [ 128.449683][ T4375] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.458102][ T4375] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.467273][ T7060] netlink: 'syz.0.1180': attribute type 18 has an invalid length. [ 128.476043][ T4375] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.486056][ T4375] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.348630][ T4868] usb 7-1: enqueue for inactive port 0 [ 130.354166][ T4868] usb 7-1: enqueue for inactive port 0 [ 130.428625][ T4868] vhci_hcd: vhci_device speed not set [ 130.966317][ T29] audit: type=1400 audit(1756322358.097:3698): avc: denied { write } for pid=7066 comm="syz.3.1173" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.012219][ T7071] __nla_validate_parse: 6 callbacks suppressed [ 131.012233][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 131.028312][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 131.212640][ T7087] syzkaller0: entered promiscuous mode [ 131.218144][ T7087] syzkaller0: entered allmulticast mode [ 131.285252][ T7095] syzkaller0: entered promiscuous mode [ 131.290886][ T7095] syzkaller0: entered allmulticast mode [ 131.641727][ T7120] 9pnet_fd: Insufficient options for proto=fd [ 131.696344][ T7124] syzkaller0: entered promiscuous mode [ 131.701889][ T7124] syzkaller0: entered allmulticast mode [ 131.718700][ T7120] netlink: 'syz.4.1195': attribute type 10 has an invalid length. [ 131.816902][ T7131] Set syz1 is full, maxelem 65536 reached [ 132.023537][ T7148] syzkaller0: entered promiscuous mode [ 132.029421][ T7148] syzkaller0: entered allmulticast mode [ 132.171315][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 132.171328][ T29] audit: type=1400 audit(1756322359.307:3746): avc: denied { setopt } for pid=7154 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.219674][ T29] audit: type=1400 audit(1756322359.337:3747): avc: denied { connect } for pid=7154 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.282356][ T29] audit: type=1400 audit(1756322359.417:3748): avc: denied { bind } for pid=7159 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.302325][ T29] audit: type=1400 audit(1756322359.437:3749): avc: denied { ioctl } for pid=7160 comm="syz.4.1208" path="socket:[20696]" dev="sockfs" ino=20696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.329237][ T7162] netlink: 'syz.4.1208': attribute type 13 has an invalid length. [ 132.402668][ T7162] tipc: Resetting bearer [ 132.527030][ T4375] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.544215][ T4375] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.559439][ T4375] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.573082][ T7171] syzkaller0: entered promiscuous mode [ 132.578823][ T7171] syzkaller0: entered allmulticast mode [ 132.642126][ T4375] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.727067][ T29] audit: type=1400 audit(1756322359.857:3750): avc: denied { write } for pid=7179 comm="syz.2.1218" path="socket:[20740]" dev="sockfs" ino=20740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.777383][ T7184] syzkaller0: entered promiscuous mode [ 132.783146][ T7184] syzkaller0: entered allmulticast mode [ 132.807749][ T7183] tipc: Enabled bearer , priority 0 [ 132.815498][ T7183] syzkaller0: entered promiscuous mode [ 132.821141][ T7183] syzkaller0: entered allmulticast mode [ 132.843964][ T29] audit: type=1400 audit(1756322359.977:3751): avc: denied { read append } for pid=7188 comm="syz.0.1221" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.844486][ T7183] tipc: Resetting bearer [ 132.867679][ T29] audit: type=1400 audit(1756322359.977:3752): avc: denied { open } for pid=7188 comm="syz.0.1221" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.897817][ T29] audit: type=1400 audit(1756322360.037:3753): avc: denied { ioctl } for pid=7188 comm="syz.0.1221" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.924187][ T7181] tipc: Resetting bearer [ 132.950844][ T7181] tipc: Disabling bearer [ 132.976918][ T7195] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.010672][ T7198] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1225'. [ 133.040349][ T7201] syzkaller0: entered promiscuous mode [ 133.046024][ T7201] syzkaller0: entered allmulticast mode [ 133.056270][ T7195] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.070605][ T7203] tipc: Enabled bearer , priority 0 [ 133.077687][ T7203] syzkaller0: entered promiscuous mode [ 133.083246][ T7203] syzkaller0: entered allmulticast mode [ 133.092655][ T7203] tipc: Resetting bearer [ 133.099219][ T7202] tipc: Resetting bearer [ 133.106174][ T7202] tipc: Disabling bearer [ 133.170866][ T7195] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.191983][ T29] audit: type=1326 audit(1756322360.317:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13efebe9 code=0x7ffc0000 [ 133.215546][ T29] audit: type=1326 audit(1756322360.317:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13efebe9 code=0x7ffc0000 [ 133.278678][ T7209] pim6reg: entered allmulticast mode [ 133.285473][ T7195] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.297780][ T7209] pim6reg: left allmulticast mode [ 133.346410][ T4322] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.365903][ T4322] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.374910][ T4322] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.394951][ T4322] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.829562][ T7227] netlink: 'syz.0.1235': attribute type 4 has an invalid length. [ 133.853894][ T7227] netlink: 'syz.0.1235': attribute type 4 has an invalid length. [ 134.012996][ T7237] syzkaller0: entered promiscuous mode [ 134.018629][ T7237] syzkaller0: entered allmulticast mode [ 134.086569][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1240'. [ 134.295495][ T7245] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1242'. [ 134.305049][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 137.908809][ T7255] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 137.916590][ T7255] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 137.924571][ T7255] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1245'. [ 137.954974][ T7258] C: renamed from team_slave_0 (while UP) [ 137.967302][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 137.967318][ T29] audit: type=1400 audit(1756322365.132:3833): avc: denied { ioctl } for pid=7253 comm="syz.2.1245" path="socket:[21079]" dev="sockfs" ino=21079 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.999668][ T7258] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1243'. [ 138.016734][ T7254] can0: slcan on ttyS3. [ 138.056712][ T7254] can0 (unregistered): slcan off ttyS3. [ 138.556100][ T7268] netlink: 'syz.2.1248': attribute type 4 has an invalid length. [ 138.576901][ T7268] netlink: 'syz.2.1248': attribute type 4 has an invalid length. [ 138.631041][ T7265] syzkaller0: entered promiscuous mode [ 138.636605][ T7265] syzkaller0: entered allmulticast mode [ 138.650526][ T7270] syzkaller0: entered promiscuous mode [ 138.656245][ T7270] syzkaller0: entered allmulticast mode [ 138.718804][ T29] audit: type=1326 audit(1756322365.888:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.2.1255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda13efebe9 code=0x0 [ 138.796636][ T7282] syzkaller0: entered promiscuous mode [ 138.802248][ T7282] syzkaller0: entered allmulticast mode [ 138.813537][ T29] audit: type=1400 audit(1756322365.988:3835): avc: denied { read } for pid=7279 comm="syz.4.1256" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.837000][ T29] audit: type=1400 audit(1756322365.988:3836): avc: denied { open } for pid=7279 comm="syz.4.1256" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.882805][ T7287] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1255'. [ 138.919212][ T29] audit: type=1400 audit(1756322366.039:3837): avc: denied { ioctl } for pid=7279 comm="syz.4.1256" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.979924][ T29] audit: type=1326 audit(1756322366.150:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 139.003687][ T29] audit: type=1326 audit(1756322366.150:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 139.027384][ T29] audit: type=1326 audit(1756322366.150:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 139.050892][ T29] audit: type=1326 audit(1756322366.150:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 139.074226][ T29] audit: type=1326 audit(1756322366.150:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc935aebe9 code=0x7ffc0000 [ 139.151599][ T7296] syzkaller0: entered promiscuous mode [ 139.157111][ T7296] syzkaller0: entered allmulticast mode [ 139.412107][ T7308] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 139.424018][ T7308] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 139.434107][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.443413][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.559970][ T7312] netlink: 'syz.0.1278': attribute type 4 has an invalid length. [ 139.572606][ T7312] netlink: 'syz.0.1278': attribute type 4 has an invalid length. [ 139.596295][ T7310] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 139.609036][ T7317] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 139.683324][ T7323] syzkaller0: entered promiscuous mode [ 139.688963][ T7323] syzkaller0: entered allmulticast mode [ 139.773462][ T7325] IPv6: Can't replace route, no match found [ 139.791687][ T7325] bridge0: port 1(batadv4) entered blocking state [ 139.798328][ T7325] bridge0: port 1(batadv4) entered disabled state [ 139.804862][ T7325] batadv4: entered allmulticast mode [ 139.810846][ T7325] batadv4: entered promiscuous mode [ 140.133126][ T7344] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 140.143406][ T7344] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 140.167707][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 140.213531][ T7352] syzkaller0: entered promiscuous mode [ 140.219032][ T7352] syzkaller0: entered allmulticast mode [ 140.225415][ T7348] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 140.290617][ T4375] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 140.299981][ T4375] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 140.311528][ T7359] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 140.466959][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.475988][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.675209][ T7377] C: renamed from team_slave_0 [ 140.681692][ T7377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1292'. [ 140.695266][ T7379] block device autoloading is deprecated and will be removed. [ 140.695642][ T7376] can0: slcan on ttyS3. [ 140.767115][ T7376] can0 (unregistered): slcan off ttyS3. [ 140.808592][ T7382] netlink: 'syz.3.1295': attribute type 4 has an invalid length. [ 140.818765][ T7382] netlink: 'syz.3.1295': attribute type 4 has an invalid length. [ 140.884858][ T7388] syzkaller0: entered promiscuous mode [ 140.890472][ T7388] syzkaller0: entered allmulticast mode [ 140.983288][ T7396] loop1: detected capacity change from 0 to 1024 [ 140.990623][ T7396] EXT4-fs: Ignoring removed nobh option [ 140.997714][ T7396] /dev/loop1: Can't open blockdev [ 141.056956][ T7400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.071007][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 141.083949][ T7400] bond2 (unregistering): Released all slaves [ 141.154529][ T7405] syzkaller0: entered promiscuous mode [ 141.160075][ T7405] syzkaller0: entered allmulticast mode [ 141.195955][ T7408] tipc: Enabled bearer , priority 0 [ 141.203323][ T7408] syzkaller0: entered promiscuous mode [ 141.209099][ T7408] syzkaller0: entered allmulticast mode [ 141.221988][ T7408] tipc: Resetting bearer [ 141.229903][ T7407] tipc: Resetting bearer [ 141.238533][ T7407] tipc: Disabling bearer [ 141.376128][ T7416] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1310'. [ 141.396678][ T7416] can0: slcan on ttyS3. [ 141.417381][ T7419] syzkaller0: entered promiscuous mode [ 141.423088][ T7419] syzkaller0: entered allmulticast mode [ 141.443889][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.451369][ T7414] tipc: Resetting bearer [ 141.459165][ T7414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.484045][ T7416] can0 (unregistered): slcan off ttyS3. [ 141.586104][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 141.599869][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 141.646903][ T7430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.665315][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 141.678219][ T7430] bond2 (unregistering): Released all slaves [ 142.090102][ T7425] syz.3.1316 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.104444][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.3.1316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.104461][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.104469][ T7425] Call Trace: [ 142.104473][ T7425] [ 142.104479][ T7425] __dump_stack+0x1d/0x30 [ 142.104492][ T7425] dump_stack_lvl+0xe8/0x140 [ 142.104502][ T7425] dump_stack+0x15/0x1b [ 142.104544][ T7425] dump_header+0x81/0x220 [ 142.104561][ T7425] oom_kill_process+0x342/0x400 [ 142.104578][ T7425] out_of_memory+0x979/0xb80 [ 142.104618][ T7425] try_charge_memcg+0x5e6/0x9e0 [ 142.104633][ T7425] obj_cgroup_charge_pages+0xa6/0x150 [ 142.104820][ T7425] __memcg_kmem_charge_page+0x9f/0x170 [ 142.104836][ T7425] __alloc_frozen_pages_noprof+0x188/0x360 [ 142.104910][ T7425] alloc_pages_mpol+0xb3/0x250 [ 142.104959][ T7425] alloc_pages_noprof+0x90/0x130 [ 142.104983][ T7425] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 142.105011][ T7425] __kvmalloc_node_noprof+0x30f/0x4e0 [ 142.105102][ T7425] ? ip_set_alloc+0x1f/0x30 [ 142.105136][ T7425] ? ip_set_alloc+0x1f/0x30 [ 142.105150][ T7425] ? hash_netiface_create+0x21b/0x740 [ 142.105167][ T7425] ? __kmalloc_cache_noprof+0x189/0x320 [ 142.105205][ T7425] ip_set_alloc+0x1f/0x30 [ 142.105234][ T7425] hash_netiface_create+0x282/0x740 [ 142.105271][ T7425] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.105297][ T7425] ip_set_create+0x3c9/0x960 [ 142.105359][ T7425] ? __nla_parse+0x40/0x60 [ 142.105371][ T7425] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.105396][ T7425] netlink_rcv_skb+0x123/0x220 [ 142.105406][ T7425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.105429][ T7425] nfnetlink_rcv+0x16b/0x1690 [ 142.105446][ T7425] ? __rcu_read_unlock+0x4f/0x70 [ 142.105533][ T7425] ? percpu_counter_add_batch+0xb6/0x130 [ 142.105544][ T7425] ? __list_add_valid_or_report+0x38/0xe0 [ 142.105591][ T7425] ? merge_sched_in+0x605/0xa60 [ 142.105602][ T7425] ? rb_next+0x5c/0x80 [ 142.105614][ T7425] ? visit_groups_merge+0xf7e/0xfd0 [ 142.105625][ T7425] ? should_fail_ex+0x30/0x280 [ 142.105674][ T7425] ? selinux_nlmsg_lookup+0x99/0x890 [ 142.105690][ T7425] ? __rcu_read_unlock+0x34/0x70 [ 142.105701][ T7425] ? __netlink_lookup+0x266/0x2a0 [ 142.105827][ T7425] netlink_unicast+0x5bd/0x690 [ 142.105886][ T7425] netlink_sendmsg+0x58b/0x6b0 [ 142.105898][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.105909][ T7425] __sock_sendmsg+0x145/0x180 [ 142.105926][ T7425] ____sys_sendmsg+0x31e/0x4e0 [ 142.105948][ T7425] ___sys_sendmsg+0x17b/0x1d0 [ 142.106078][ T7425] __x64_sys_sendmsg+0xd4/0x160 [ 142.106099][ T7425] x64_sys_call+0x191e/0x2ff0 [ 142.106119][ T7425] do_syscall_64+0xd2/0x200 [ 142.106144][ T7425] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.106157][ T7425] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.106170][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.106246][ T7425] RIP: 0033:0x7efc935aebe9 [ 142.106258][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.106267][ T7425] RSP: 002b:00007efc92017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.106347][ T7425] RAX: ffffffffffffffda RBX: 00007efc937d5fa0 RCX: 00007efc935aebe9 [ 142.106354][ T7425] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 142.106361][ T7425] RBP: 00007efc93631e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.106368][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.106374][ T7425] R13: 00007efc937d6038 R14: 00007efc937d5fa0 R15: 00007fff37db36a8 [ 142.106390][ T7425] [ 142.106394][ T7425] memory: usage 307200kB, limit 307200kB, failcnt 356 [ 142.467250][ T7425] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 142.475493][ T7425] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 142.482968][ T7425] Memory cgroup stats for /syz3: [ 142.483282][ T7425] cache 0 [ 142.491287][ T7425] rss 0 [ 142.494028][ T7425] shmem 0 [ 142.497070][ T7425] mapped_file 0 [ 142.500585][ T7425] dirty 0 [ 142.503592][ T7425] writeback 0 [ 142.507106][ T7425] workingset_refault_anon 1548 [ 142.511979][ T7425] workingset_refault_file 256 [ 142.516878][ T7425] swap 446464 [ 142.520248][ T7425] swapcached 0 [ 142.523621][ T7425] pgpgin 154324 [ 142.527134][ T7425] pgpgout 154324 [ 142.530688][ T7425] pgfault 155996 [ 142.534225][ T7425] pgmajfault 202 [ 142.537800][ T7425] inactive_anon 0 [ 142.541423][ T7425] active_anon 0 [ 142.545235][ T7425] inactive_file 0 [ 142.548988][ T7425] active_file 0 [ 142.552429][ T7425] unevictable 0 [ 142.556108][ T7425] hierarchical_memory_limit 314572800 [ 142.561492][ T7425] hierarchical_memsw_limit 9223372036854771712 [ 142.567737][ T7425] total_cache 0 [ 142.571243][ T7425] total_rss 0 [ 142.574539][ T7425] total_shmem 0 [ 142.578022][ T7425] total_mapped_file 0 [ 142.582010][ T7425] total_dirty 0 [ 142.585491][ T7425] total_writeback 0 [ 142.589280][ T7425] total_workingset_refault_anon 1548 [ 142.594773][ T7425] total_workingset_refault_file 256 [ 142.599978][ T7425] total_swap 446464 [ 142.603801][ T7425] total_swapcached 0 [ 142.607744][ T7425] total_pgpgin 154324 [ 142.611738][ T7425] total_pgpgout 154324 [ 142.615850][ T7425] total_pgfault 155996 [ 142.620004][ T7425] total_pgmajfault 202 [ 142.624200][ T7425] total_inactive_anon 0 [ 142.628381][ T7425] total_active_anon 0 [ 142.632353][ T7425] total_inactive_file 0 [ 142.636554][ T7425] total_active_file 0 [ 142.640524][ T7425] total_unevictable 0 [ 142.644724][ T7425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1316,pid=7424,uid=0 [ 142.659529][ T7425] Memory cgroup out of memory: Killed process 7424 (syz.3.1316) total-vm:95812kB, anon-rss:944kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 142.896870][ T7443] loop1: detected capacity change from 0 to 128 [ 142.944944][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 142.944957][ T29] audit: type=1326 audit(1756322370.148:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d38cc5ba7 code=0x7ffc0000 [ 142.983782][ T7449] syz.1.1322: attempt to access beyond end of device [ 142.983782][ T7449] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 142.993999][ T29] audit: type=1326 audit(1756322370.188:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d38c6ade9 code=0x7ffc0000 [ 143.020807][ T29] audit: type=1326 audit(1756322370.188:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d38cc5ba7 code=0x7ffc0000 [ 143.044120][ T29] audit: type=1326 audit(1756322370.188:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d38c6ade9 code=0x7ffc0000 [ 143.055275][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.055275][ T7449] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 143.067475][ T29] audit: type=1326 audit(1756322370.188:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 143.104723][ T29] audit: type=1326 audit(1756322370.188:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d38cc5ba7 code=0x7ffc0000 [ 143.128260][ T29] audit: type=1326 audit(1756322370.188:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d38c6ade9 code=0x7ffc0000 [ 143.151818][ T29] audit: type=1326 audit(1756322370.188:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8d38ccebe9 code=0x7ffc0000 [ 143.176719][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.176719][ T7449] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 143.184694][ T29] audit: type=1326 audit(1756322370.389:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d38cc5ba7 code=0x7ffc0000 [ 143.213925][ T29] audit: type=1326 audit(1756322370.389:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d38c6ade9 code=0x7ffc0000 [ 143.254174][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.254174][ T7449] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 143.268702][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.268702][ T7449] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 143.304924][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.304924][ T7449] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 143.319362][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.319362][ T7449] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 143.344367][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.344367][ T7449] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 143.358261][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.358261][ T7449] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 143.444676][ T7449] syz.1.1322: attempt to access beyond end of device [ 143.444676][ T7449] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 143.548157][ T7454] Invalid logical block size (6) [ 143.552014][ T7456] syzkaller0: entered promiscuous mode [ 143.558777][ T7456] syzkaller0: entered allmulticast mode [ 143.641871][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 143.659649][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 143.680811][ T7458] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1327'. [ 143.691165][ T7462] syzkaller0: entered promiscuous mode [ 143.701076][ T7462] syzkaller0: entered allmulticast mode [ 143.718067][ T7458] can0: slcan on ttyS3. [ 143.875798][ T7458] can0 (unregistered): slcan off ttyS3. [ 144.159015][ T7476] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1344'. [ 144.200130][ T7471] can0: slcan on ttyS3. [ 144.238272][ T7473] loop1: detected capacity change from 0 to 2048 [ 144.274600][ T7471] can0 (unregistered): slcan off ttyS3. [ 144.324867][ T7473] Alternate GPT is invalid, using primary GPT. [ 144.331288][ T7473] loop1: p2 p3 p7 [ 144.367808][ T7482] syzkaller0: entered promiscuous mode [ 144.373399][ T7482] syzkaller0: entered allmulticast mode [ 144.721186][ T7493] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.745160][ T7493] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 144.791932][ T7484] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1338'. [ 145.038420][ T7498] Invalid logical block size (6) [ 145.075407][ T7500] syzkaller0: entered promiscuous mode [ 145.081033][ T7500] syzkaller0: entered allmulticast mode [ 145.108406][ T7473] syz.1.1333 (7473) used greatest stack depth: 7064 bytes left [ 145.182598][ T7505] syzkaller0: entered promiscuous mode [ 145.188215][ T7505] syzkaller0: entered allmulticast mode [ 145.306512][ T7516] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1348'. [ 145.327289][ T7511] can0: slcan on ttyS3. [ 145.357502][ T7520] syzkaller0: entered promiscuous mode [ 145.363053][ T7520] syzkaller0: entered allmulticast mode [ 145.366190][ T7511] can0 (unregistered): slcan off ttyS3. [ 146.692394][ T7542] syzkaller0: entered promiscuous mode [ 146.697971][ T7542] syzkaller0: entered allmulticast mode [ 147.730914][ T7564] Invalid logical block size (6) [ 147.737260][ T7565] loop1: detected capacity change from 0 to 128 [ 147.858005][ T7557] ================================================================== [ 147.866226][ T7557] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 147.874121][ T7557] [ 147.876427][ T7557] write to 0xffffea00042cbd18 of 8 bytes by task 7562 on cpu 0: [ 147.884037][ T7557] __filemap_remove_folio+0x1a5/0x2a0 [ 147.889402][ T7557] filemap_remove_folio+0x6d/0x1d0 [ 147.894513][ T7557] truncate_inode_folio+0x42/0x50 [ 147.899537][ T7557] shmem_undo_range+0x244/0xa80 [ 147.904559][ T7557] shmem_fallocate+0x799/0x840 [ 147.909307][ T7557] vfs_fallocate+0x3b6/0x400 [ 147.913883][ T7557] __x64_sys_fallocate+0x7a/0xd0 [ 147.918898][ T7557] x64_sys_call+0x2514/0x2ff0 [ 147.923575][ T7557] do_syscall_64+0xd2/0x200 [ 147.928070][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.933978][ T7557] [ 147.936286][ T7557] read to 0xffffea00042cbd18 of 8 bytes by task 7557 on cpu 1: [ 147.943811][ T7557] folio_mapping+0xa1/0x120 [ 147.948310][ T7557] evict_folios+0x2ad0/0x3520 [ 147.953068][ T7557] try_to_shrink_lruvec+0x5b5/0x950 [ 147.958259][ T7557] shrink_lruvec+0x22e/0x1b50 [ 147.962921][ T7557] shrink_node+0x686/0x2120 [ 147.967423][ T7557] do_try_to_free_pages+0x3f6/0xcd0 [ 147.972820][ T7557] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 147.978888][ T7557] try_charge_memcg+0x358/0x9e0 [ 147.983747][ T7557] obj_cgroup_charge_pages+0xa6/0x150 [ 147.989123][ T7557] __memcg_kmem_charge_page+0x9f/0x170 [ 147.994620][ T7557] __alloc_frozen_pages_noprof+0x188/0x360 [ 148.000904][ T7557] alloc_pages_mpol+0xb3/0x250 [ 148.005667][ T7557] alloc_pages_noprof+0x90/0x130 [ 148.010691][ T7557] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 148.016505][ T7557] __kvmalloc_node_noprof+0x30f/0x4e0 [ 148.021891][ T7557] ip_set_alloc+0x1f/0x30 [ 148.026580][ T7557] hash_netiface_create+0x282/0x740 [ 148.031783][ T7557] ip_set_create+0x3c9/0x960 [ 148.036358][ T7557] nfnetlink_rcv_msg+0x4c3/0x590 [ 148.041296][ T7557] netlink_rcv_skb+0x123/0x220 [ 148.046161][ T7557] nfnetlink_rcv+0x16b/0x1690 [ 148.050848][ T7557] netlink_unicast+0x5bd/0x690 [ 148.055720][ T7557] netlink_sendmsg+0x58b/0x6b0 [ 148.060488][ T7557] __sock_sendmsg+0x145/0x180 [ 148.065163][ T7557] ____sys_sendmsg+0x31e/0x4e0 [ 148.069911][ T7557] ___sys_sendmsg+0x17b/0x1d0 [ 148.074576][ T7557] __x64_sys_sendmsg+0xd4/0x160 [ 148.079418][ T7557] x64_sys_call+0x191e/0x2ff0 [ 148.084196][ T7557] do_syscall_64+0xd2/0x200 [ 148.088840][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.094718][ T7557] [ 148.097179][ T7557] value changed: 0xffff8881049e41f0 -> 0x0000000000000000 [ 148.104729][ T7557] [ 148.107050][ T7557] Reported by Kernel Concurrency Sanitizer on: [ 148.113282][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.1.1374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.123463][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.133871][ T7557] ================================================================== [ 148.212984][ T7568] syzkaller0: entered promiscuous mode [ 148.218585][ T7568] syzkaller0: entered allmulticast mode [ 148.517607][ T7557] syz.1.1374 (7557) used greatest stack depth: 6456 bytes left [ 148.995258][ T7572] syz.4.1358 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 149.009710][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.4.1358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.009793][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.009800][ T7572] Call Trace: [ 149.009805][ T7572] [ 149.009810][ T7572] __dump_stack+0x1d/0x30 [ 149.009823][ T7572] dump_stack_lvl+0xe8/0x140 [ 149.009879][ T7572] dump_stack+0x15/0x1b [ 149.009888][ T7572] dump_header+0x81/0x220 [ 149.009911][ T7572] oom_kill_process+0x342/0x400 [ 149.010013][ T7572] out_of_memory+0x979/0xb80 [ 149.010030][ T7572] try_charge_memcg+0x5e6/0x9e0 [ 149.010120][ T7572] obj_cgroup_charge_pages+0xa6/0x150 [ 149.010136][ T7572] __memcg_kmem_charge_page+0x9f/0x170 [ 149.010193][ T7572] __alloc_frozen_pages_noprof+0x188/0x360 [ 149.010212][ T7572] alloc_pages_mpol+0xb3/0x250 [ 149.010228][ T7572] alloc_pages_noprof+0x90/0x130 [ 149.010265][ T7572] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 149.010354][ T7572] ? __pmu_ctx_sched_in+0x8a/0xb0 [ 149.010364][ T7572] __kvmalloc_node_noprof+0x30f/0x4e0 [ 149.010398][ T7572] ? ip_set_alloc+0x1f/0x30 [ 149.010414][ T7572] ? ip_set_alloc+0x1f/0x30 [ 149.010429][ T7572] ? __kmalloc_cache_noprof+0x189/0x320 [ 149.010443][ T7572] ip_set_alloc+0x1f/0x30 [ 149.010473][ T7572] hash_netiface_create+0x282/0x740 [ 149.010490][ T7572] ? __pfx_hash_netiface_create+0x10/0x10 [ 149.010507][ T7572] ip_set_create+0x3c9/0x960 [ 149.010541][ T7572] nfnetlink_rcv_msg+0x4c3/0x590 [ 149.010565][ T7572] netlink_rcv_skb+0x123/0x220 [ 149.010650][ T7572] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.010668][ T7572] nfnetlink_rcv+0x16b/0x1690 [ 149.010683][ T7572] ? nlmon_xmit+0x4f/0x60 [ 149.010696][ T7572] ? consume_skb+0x49/0x150 [ 149.010737][ T7572] ? nlmon_xmit+0x4f/0x60 [ 149.010749][ T7572] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 149.010762][ T7572] ? __dev_queue_xmit+0x1200/0x2000 [ 149.010773][ T7572] ? __dev_queue_xmit+0x182/0x2000 [ 149.010838][ T7572] ? ref_tracker_free+0x37d/0x3e0 [ 149.010851][ T7572] ? __netlink_deliver_tap+0x4dc/0x500 [ 149.010864][ T7572] netlink_unicast+0x5bd/0x690 [ 149.010881][ T7572] netlink_sendmsg+0x58b/0x6b0 [ 149.010911][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.010923][ T7572] __sock_sendmsg+0x145/0x180 [ 149.010954][ T7572] ____sys_sendmsg+0x31e/0x4e0 [ 149.010967][ T7572] ___sys_sendmsg+0x17b/0x1d0 [ 149.011062][ T7572] __x64_sys_sendmsg+0xd4/0x160 [ 149.011080][ T7572] x64_sys_call+0x191e/0x2ff0 [ 149.011091][ T7572] do_syscall_64+0xd2/0x200 [ 149.011150][ T7572] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.011163][ T7572] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.011175][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.011213][ T7572] RIP: 0033:0x7f8d38ccebe9 [ 149.011222][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.011231][ T7572] RSP: 002b:00007f8d376ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.011242][ T7572] RAX: ffffffffffffffda RBX: 00007f8d38ef6180 RCX: 00007f8d38ccebe9 [ 149.011249][ T7572] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 149.011256][ T7572] RBP: 00007f8d38d51e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.011263][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.011309][ T7572] R13: 00007f8d38ef6218 R14: 00007f8d38ef6180 R15: 00007ffd2ecca6a8 [ 149.011381][ T7572] [ 149.011385][ T7572] memory: usage 307200kB, limit 307200kB, failcnt 522 [ 149.351269][ T7572] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 149.359224][ T7572] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 149.366583][ T7572] Memory cgroup stats for /syz4: [ 149.366742][ T7572] cache 0 [ 149.374631][ T7572] rss 0 [ 149.377486][ T7572] shmem 0 [ 149.380417][ T7572] mapped_file 0 [ 149.383928][ T7572] dirty 0 [ 149.386845][ T7572] writeback 0 [ 149.390174][ T7572] workingset_refault_anon 170 [ 149.395009][ T7572] workingset_refault_file 2781 [ 149.399744][ T7572] swap 217088 [ 149.403030][ T7572] swapcached 0 [ 149.406479][ T7572] pgpgin 150247 [ 149.409918][ T7572] pgpgout 150247 [ 149.413573][ T7572] pgfault 128360 [ 149.417295][ T7572] pgmajfault 58 [ 149.420794][ T7572] inactive_anon 0 [ 149.424517][ T7572] active_anon 0 [ 149.427959][ T7572] inactive_file 0 [ 149.431612][ T7572] active_file 0 [ 149.435175][ T7572] unevictable 0 [ 149.438700][ T7572] hierarchical_memory_limit 314572800 [ 149.444179][ T7572] hierarchical_memsw_limit 9223372036854771712 [ 149.450448][ T7572] total_cache 0 [ 149.453884][ T7572] total_rss 0 [ 149.457187][ T7572] total_shmem 0 [ 149.460664][ T7572] total_mapped_file 0 [ 149.464803][ T7572] total_dirty 0 [ 149.468237][ T7572] total_writeback 0 [ 149.472066][ T7572] total_workingset_refault_anon 170 [ 149.477299][ T7572] total_workingset_refault_file 2781 [ 149.482689][ T7572] total_swap 217088 [ 149.486478][ T7572] total_swapcached 0 [ 149.490365][ T7572] total_pgpgin 150247 [ 149.494325][ T7572] total_pgpgout 150247 [ 149.498395][ T7572] total_pgfault 128360 [ 149.502663][ T7572] total_pgmajfault 58 [ 149.506646][ T7572] total_inactive_anon 0 [ 149.510833][ T7572] total_active_anon 0 [ 149.514835][ T7572] total_inactive_file 0 [ 149.518971][ T7572] total_active_file 0 [ 149.522954][ T7572] total_unevictable 0 [ 149.526964][ T7572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1358,pid=7569,uid=0 [ 149.542218][ T7572] Memory cgroup out of memory: Killed process 7569 (syz.4.1358) total-vm:100180kB, anon-rss:944kB, file-rss:26404kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000