last executing test programs: 4m28.196785208s ago: executing program 1 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 4m28.093773959s ago: executing program 1 (id=62): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000001400)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) 4m27.773677004s ago: executing program 1 (id=72): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="721f", 0x2}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 4m26.819430757s ago: executing program 1 (id=92): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 4m26.725545608s ago: executing program 1 (id=94): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 4m26.476557372s ago: executing program 1 (id=106): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x13, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 4m26.433512172s ago: executing program 32 (id=106): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x13, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 13.444467943s ago: executing program 4 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x8, r4}, 0x10) 6.268241993s ago: executing program 3 (id=1495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x6967, 0x0, 0x3, 0x28b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) 6.039889006s ago: executing program 4 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) gettid() r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x10000000000004) 5.784639499s ago: executing program 2 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) 5.365219335s ago: executing program 3 (id=1503): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 4.945120851s ago: executing program 5 (id=1504): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 4.518883337s ago: executing program 2 (id=1506): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000010) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 3.656864509s ago: executing program 5 (id=1508): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x40247007, &(0x7f0000000180)={0x56, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/nfsfs\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) getdents64(r1, 0x0, 0x0) 3.653009899s ago: executing program 0 (id=1509): r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x900, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={&(0x7f0000000000)=""/16, 0x10}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x5, 0x100) 3.406794912s ago: executing program 2 (id=1510): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000005c0)={r4, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.381039912s ago: executing program 3 (id=1511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x440602) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) socket$kcm(0x10, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000400)=@v2={0x2000000, [{0x100, 0x1}, {0x80000001, 0x6}]}, 0x14, 0x0) 3.379881333s ago: executing program 4 (id=1512): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x2, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000140)={[0xfffffffffffffc01]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000400), 0x8) 2.84227224s ago: executing program 5 (id=1513): write$tun(0xffffffffffffffff, 0x0, 0x32) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.700502692s ago: executing program 0 (id=1514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000c80)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x7b}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@nodioread_nolock}]}, 0x10, 0x4df, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000dc0)={'#! ', '', [{0x20, '\xbb\x93\xd9_\xc9\x05\xebG\xe5T2+A\x8c\xff\xdb\x83\xd2\xd0 F]\xc4\xb0\v.,dr\x14i\x98\n\xd9j\xcd\xf2\x1aL\x9d\x91\xeb\xce\xd5\x0e\xec\xf10\xbf\x82r\xa2\xdf\xc6M\xf4\xeb2\xa1 \xfb]w\x837\x04\x17B\x04p\xd0\x11\x14N\x96\xb8\xbb7\x83\xae\xd5{\'\xdcAo\xad\x8b\x86\x06\xab\xacKL\xe7\xa0j\x87\xa71U\xeeD\xda\xfcH==\xca\vmRN\x95p'}, {0x20, '\x04\x00\x00\x00\x00\x00\x00'}, {0x20, '\xbf'}, {0x20, 'p\x04\x00\x00\x00\x00\x00\x00\x00'}, {0x20, 'nodiscard'}]}, 0xa74e2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.699986832s ago: executing program 2 (id=1515): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffa}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 2.461241615s ago: executing program 5 (id=1516): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) dup(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 2.453943515s ago: executing program 3 (id=1517): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pause() r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 2.223262739s ago: executing program 0 (id=1518): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf1301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffffff9}, 0x2, 0x3, 0x2, 0x9, 0x34, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) r4 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 2.222809159s ago: executing program 4 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000300)={0xfffffffd, 0x0, 0x99, 0x1, 0x0, 0x6}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001180)=""/147, 0x93}], 0x1, 0x4, 0x0) 1.992406752s ago: executing program 0 (id=1520): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x6}, {0x7, 0x0, 0x404}, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback}, 0x1c) 1.360577581s ago: executing program 2 (id=1521): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffd93, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x5f, 0x2e, 0x61, 0x672608233d8dd4ac]}}, &(0x7f0000004580)=""/218, 0x2a, 0xda, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) 1.140360704s ago: executing program 5 (id=1522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 1.133646744s ago: executing program 3 (id=1523): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4004661, 0x800, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r3, 0x0) 1.129240604s ago: executing program 4 (id=1524): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x3, 0xfe, 0xfd, 0x0, 0x5, 0x39294, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0xfffffffe, 0x5, 0x1, 0x2, 0xfffb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 879.776048ms ago: executing program 0 (id=1525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16.783299ms ago: executing program 0 (id=1526): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x26) 16.24465ms ago: executing program 5 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r2, &(0x7f0000000980)="a9", 0x1) 13.363339ms ago: executing program 2 (id=1528): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 10.543049ms ago: executing program 3 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 4 (id=1530): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : set [1, 0] type 2 family 0 port 6081 - 0 [ 119.733678][ T5184] tipc: Enabling of bearer rejected, failed to enable media [ 120.363948][ T5190] pim6reg1: entered promiscuous mode [ 120.369305][ T5190] pim6reg1: entered allmulticast mode [ 121.430956][ T29] audit: type=1400 audit(1746948760.686:2215): avc: denied { name_bind } for pid=5198 comm="syz.0.625" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 123.346925][ T29] audit: type=1400 audit(1746948762.596:2216): avc: denied { getopt } for pid=5212 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.390457][ T29] audit: type=1400 audit(1746948763.636:2217): avc: denied { create } for pid=5218 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.409995][ T29] audit: type=1400 audit(1746948763.636:2218): avc: denied { bind } for pid=5218 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.896931][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 126.314646][ T29] audit: type=1400 audit(1746948765.566:2219): avc: denied { create } for pid=5240 comm="syz.5.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 126.318593][ T29] audit: type=1400 audit(1746948765.566:2220): avc: denied { sys_admin } for pid=5240 comm="syz.5.643" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 127.803644][ T29] audit: type=1326 audit(1746948767.056:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 127.828328][ T29] audit: type=1326 audit(1746948767.056:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 127.851709][ T29] audit: type=1326 audit(1746948767.056:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 127.875094][ T29] audit: type=1326 audit(1746948767.056:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 127.898405][ T29] audit: type=1326 audit(1746948767.056:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 128.013381][ T5257] tipc: Enabling of bearer rejected, failed to enable media [ 128.226842][ T5259] loop2: detected capacity change from 0 to 2048 [ 128.252667][ T5259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.359718][ T5259] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 128.371983][ T5259] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.371983][ T5259] [ 128.381776][ T5259] EXT4-fs (loop2): Total free blocks count 0 [ 128.387764][ T5259] EXT4-fs (loop2): Free/Dirty block details [ 128.393715][ T5259] EXT4-fs (loop2): free_blocks=0 [ 128.398701][ T5259] EXT4-fs (loop2): dirty_blocks=0 [ 128.403765][ T5259] EXT4-fs (loop2): Block reservation details [ 128.409925][ T5259] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 128.454687][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.659801][ T5265] xt_CT: No such helper "pptp" [ 129.104127][ T5273] netlink: 'syz.0.656': attribute type 39 has an invalid length. [ 131.022252][ T5289] pim6reg1: entered promiscuous mode [ 131.027574][ T5289] pim6reg1: entered allmulticast mode [ 131.656418][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 131.867463][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 131.867533][ T29] audit: type=1400 audit(1746948771.116:2230): avc: denied { bind } for pid=5295 comm="syz.5.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.494370][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 133.338251][ T29] audit: type=1400 audit(1746948772.586:2231): avc: denied { write } for pid=5314 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.338343][ T5315] lo speed is unknown, defaulting to 1000 [ 133.364866][ T5315] lo speed is unknown, defaulting to 1000 [ 133.370863][ T5315] lo speed is unknown, defaulting to 1000 [ 133.376884][ T5315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.385057][ T5315] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 133.395195][ T5315] lo speed is unknown, defaulting to 1000 [ 133.401693][ T5315] lo speed is unknown, defaulting to 1000 [ 133.407959][ T5315] lo speed is unknown, defaulting to 1000 [ 133.414038][ T5315] lo speed is unknown, defaulting to 1000 [ 133.420156][ T5315] lo speed is unknown, defaulting to 1000 [ 133.550092][ T29] audit: type=1326 audit(1746948772.796:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.586961][ T29] audit: type=1326 audit(1746948772.826:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.610337][ T29] audit: type=1326 audit(1746948772.826:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.633908][ T29] audit: type=1326 audit(1746948772.826:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.657416][ T29] audit: type=1326 audit(1746948772.826:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.681989][ T29] audit: type=1326 audit(1746948772.826:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.710634][ T29] audit: type=1326 audit(1746948772.826:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 133.734342][ T29] audit: type=1326 audit(1746948772.826:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 143.373286][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 143.373352][ T29] audit: type=1400 audit(1746948782.626:2296): avc: denied { setopt } for pid=5365 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.401004][ T5366] loop5: detected capacity change from 0 to 256 [ 143.414811][ T5364] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 143.446002][ T5366] FAT-fs (loop5): Directory bread(block 64) failed [ 143.452785][ T5366] FAT-fs (loop5): Directory bread(block 65) failed [ 143.459549][ T5366] FAT-fs (loop5): Directory bread(block 66) failed [ 143.466226][ T5366] FAT-fs (loop5): Directory bread(block 67) failed [ 143.473697][ T5366] FAT-fs (loop5): Directory bread(block 68) failed [ 143.480431][ T5366] FAT-fs (loop5): Directory bread(block 69) failed [ 143.487309][ T5366] FAT-fs (loop5): Directory bread(block 70) failed [ 143.493997][ T5366] FAT-fs (loop5): Directory bread(block 71) failed [ 143.500802][ T5366] FAT-fs (loop5): Directory bread(block 72) failed [ 143.508142][ T5366] FAT-fs (loop5): Directory bread(block 73) failed [ 143.554461][ T29] audit: type=1400 audit(1746948782.806:2297): avc: denied { shutdown } for pid=5365 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.020708][ T29] audit: type=1326 audit(1746948783.266:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.061213][ T5374] netlink: 96 bytes leftover after parsing attributes in process `syz.0.701'. [ 144.061775][ T29] audit: type=1326 audit(1746948783.296:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.094179][ T29] audit: type=1326 audit(1746948783.296:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.117740][ T29] audit: type=1326 audit(1746948783.296:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.141725][ T29] audit: type=1326 audit(1746948783.296:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.165153][ T29] audit: type=1326 audit(1746948783.296:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.189145][ T29] audit: type=1326 audit(1746948783.296:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 144.213054][ T29] audit: type=1326 audit(1746948783.296:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 145.755847][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.707'. [ 145.764974][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 147.693439][ T5413] netlink: 72 bytes leftover after parsing attributes in process `syz.0.718'. [ 148.523935][ T5422] netlink: 96 bytes leftover after parsing attributes in process `syz.5.722'. [ 149.992737][ T5438] tipc: Started in network mode [ 149.997721][ T5438] tipc: Node identity d25ad5121084, cluster identity 4711 [ 150.005024][ T5438] tipc: Enabled bearer , priority 0 [ 150.013782][ T5438] tipc: Disabling bearer [ 150.414124][ T5442] pim6reg1: entered promiscuous mode [ 150.419456][ T5442] pim6reg1: entered allmulticast mode [ 150.823777][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 150.823795][ T29] audit: type=1326 audit(1746948790.076:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 150.855795][ T29] audit: type=1326 audit(1746948790.106:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 150.879245][ T29] audit: type=1326 audit(1746948790.106:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 150.902599][ T29] audit: type=1326 audit(1746948790.106:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 151.245606][ T29] audit: type=1326 audit(1746948790.496:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 151.269173][ T29] audit: type=1326 audit(1746948790.496:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 151.292652][ T29] audit: type=1326 audit(1746948790.496:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 151.316040][ T29] audit: type=1326 audit(1746948790.496:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 151.454721][ T29] audit: type=1400 audit(1746948790.706:2330): avc: denied { mount } for pid=5452 comm="syz.0.736" name="/" dev="autofs" ino=12070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 151.458969][ T5451] syzkaller0: entered allmulticast mode [ 151.493699][ T5451] syzkaller0: entered promiscuous mode [ 151.502407][ T5451] syzkaller0 (unregistering): left promiscuous mode [ 151.509045][ T5451] syzkaller0 (unregistering): left allmulticast mode [ 152.093299][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'. [ 152.404529][ T29] audit: type=1400 audit(1746948791.656:2331): avc: denied { read write } for pid=5463 comm="syz.5.742" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.136204][ T5474] loop2: detected capacity change from 0 to 128 [ 153.156290][ T5474] syz.2.745: attempt to access beyond end of device [ 153.156290][ T5474] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 153.169792][ T5474] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 153.179899][ T5474] syz.2.745: attempt to access beyond end of device [ 153.179899][ T5474] loop2: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 153.193305][ T5474] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 153.201928][ T5474] syz.2.745: attempt to access beyond end of device [ 153.201928][ T5474] loop2: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 153.215433][ T5474] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 153.225165][ T5474] syz.2.745: attempt to access beyond end of device [ 153.225165][ T5474] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 153.238622][ T5474] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 153.248487][ T5474] syz.2.745: attempt to access beyond end of device [ 153.248487][ T5474] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 153.261929][ T5474] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 153.271043][ T5474] syz.2.745: attempt to access beyond end of device [ 153.271043][ T5474] loop2: rw=2049, sector=141, nr_sectors = 8 limit=128 [ 153.284646][ T5474] syz.2.745: attempt to access beyond end of device [ 153.284646][ T5474] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 153.298034][ T5474] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 153.307607][ T5474] syz.2.745: attempt to access beyond end of device [ 153.307607][ T5474] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 153.320964][ T5474] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 153.332084][ T5474] syz.2.745: attempt to access beyond end of device [ 153.332084][ T5474] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 153.345524][ T5474] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 153.355631][ T5474] syz.2.745: attempt to access beyond end of device [ 153.355631][ T5474] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 153.369065][ T5474] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 153.377920][ T5474] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 153.979785][ T5481] loop4: detected capacity change from 0 to 2048 [ 153.992907][ T5481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.162259][ T5484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.362386][ T4164] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 154.375112][ T4164] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.375112][ T4164] [ 154.384838][ T4164] EXT4-fs (loop4): Total free blocks count 0 [ 154.390863][ T4164] EXT4-fs (loop4): Free/Dirty block details [ 154.396915][ T4164] EXT4-fs (loop4): free_blocks=2415919504 [ 154.402681][ T4164] EXT4-fs (loop4): dirty_blocks=16400 [ 154.408104][ T4164] EXT4-fs (loop4): Block reservation details [ 154.414132][ T4164] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 154.434784][ T4164] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 154.823236][ T5491] lo speed is unknown, defaulting to 1000 [ 155.053083][ T5497] loop5: detected capacity change from 0 to 512 [ 155.062330][ T5497] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.754: Failed to acquire dquot type 1 [ 155.076171][ T5497] EXT4-fs (loop5): 1 truncate cleaned up [ 155.082601][ T5497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.096623][ T5497] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.881441][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.533199][ T5512] vlan1: entered allmulticast mode [ 156.544120][ T5519] loop4: detected capacity change from 0 to 512 [ 156.551292][ T5519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.563529][ T5519] EXT4-fs (loop4): 1 truncate cleaned up [ 156.566383][ T5518] vlan0: entered allmulticast mode [ 156.569660][ T5519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.574416][ T5518] dummy0: entered allmulticast mode [ 156.645593][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.177171][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 157.177210][ T29] audit: type=1400 audit(1746948796.426:2335): avc: denied { listen } for pid=5527 comm="syz.2.766" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 157.604250][ T5533] lo speed is unknown, defaulting to 1000 [ 158.640181][ T29] audit: type=1326 audit(1746948797.886:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.663604][ T29] audit: type=1326 audit(1746948797.886:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.690005][ T29] audit: type=1326 audit(1746948797.946:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.713423][ T29] audit: type=1326 audit(1746948797.946:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.736776][ T29] audit: type=1326 audit(1746948797.946:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.760175][ T29] audit: type=1326 audit(1746948797.946:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 158.783544][ T29] audit: type=1326 audit(1746948797.946:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 159.287506][ T5555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 159.288689][ T5557] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.779'. [ 159.507512][ T5562] loop3: detected capacity change from 0 to 1024 [ 159.515299][ T5562] EXT4-fs: Ignoring removed i_version option [ 159.521997][ T5562] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.551043][ T5562] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.781: Invalid block bitmap block 0 in block_group 0 [ 159.566745][ T5562] Quota error (device loop3): write_blk: dquota write failed [ 159.574220][ T5562] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 159.585856][ T5562] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.781: Failed to acquire dquot type 0 [ 159.600194][ T5562] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.781: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.615476][ T5562] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.781: Invalid inode bitmap blk 0 in block_group 0 [ 159.628739][ T5562] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 159.637403][ T4139] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:42: Failed to release dquot type 0 [ 159.651344][ T5562] EXT4-fs (loop3): 1 orphan inode deleted [ 159.657762][ T5562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.676732][ T5562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.685914][ T5562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.204078][ T5562] syz.3.781 (5562) used greatest stack depth: 9568 bytes left [ 160.212779][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.574424][ T5581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 161.657408][ T5588] syzkaller0: entered promiscuous mode [ 161.662921][ T5588] syzkaller0: entered allmulticast mode [ 162.518183][ T5591] xt_hashlimit: max too large, truncated to 1048576 [ 163.739849][ T5595] loop2: detected capacity change from 0 to 512 [ 163.754128][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.766795][ T5595] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.840230][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.950363][ T5600] loop5: detected capacity change from 0 to 256 [ 164.593014][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 164.593032][ T29] audit: type=1400 audit(1746948803.846:2344): avc: denied { map } for pid=5605 comm="syz.2.798" path="/proc/411/task/412/mounts" dev="proc" ino=12347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 164.623657][ T29] audit: type=1400 audit(1746948803.846:2345): avc: denied { execute } for pid=5605 comm="syz.2.798" path="/proc/411/task/412/mounts" dev="proc" ino=12347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 165.229428][ T29] audit: type=1400 audit(1746948804.476:2346): avc: denied { mount } for pid=5609 comm="syz.5.800" name="/" dev="ramfs" ino=11217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.645439][ T5615] loop3: detected capacity change from 0 to 1024 [ 165.653931][ T5615] EXT4-fs: Ignoring removed orlov option [ 165.659631][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.673529][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.688589][ T29] audit: type=1400 audit(1746948804.936:2347): avc: denied { bind } for pid=5614 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.709747][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 165.720829][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 165.741033][ T29] audit: type=1400 audit(1746948804.956:2348): avc: denied { setopt } for pid=5614 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.763123][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.059878][ T5620] loop4: detected capacity change from 0 to 1024 [ 166.082410][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.094754][ T5620] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.108170][ T29] audit: type=1326 audit(1746948805.356:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 166.131562][ T29] audit: type=1326 audit(1746948805.356:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 166.155015][ T29] audit: type=1326 audit(1746948805.356:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 166.178376][ T29] audit: type=1326 audit(1746948805.356:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 166.201772][ T29] audit: type=1326 audit(1746948805.356:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 166.898592][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.184704][ T5645] loop5: detected capacity change from 0 to 1024 [ 168.204283][ T5645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.428556][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.680616][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 169.680631][ T29] audit: type=1400 audit(1746948808.926:2410): avc: denied { watch watch_reads } for pid=5678 comm="syz.5.822" path="/file0" dev="ramfs" ino=13334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 169.710268][ T29] audit: type=1400 audit(1746948808.936:2411): avc: denied { execute } for pid=5678 comm="syz.5.822" name="file0" dev="ramfs" ino=13334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 169.732881][ T29] audit: type=1400 audit(1746948808.936:2412): avc: denied { execute_no_trans } for pid=5678 comm="syz.5.822" path="/file0" dev="ramfs" ino=13334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.785283][ T5684] loop5: detected capacity change from 0 to 8192 [ 170.793085][ T5684] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.791319][ T29] audit: type=1326 audit(1746948811.046:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.814811][ T29] audit: type=1326 audit(1746948811.046:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.839932][ T29] audit: type=1326 audit(1746948811.046:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.863352][ T29] audit: type=1326 audit(1746948811.066:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.886699][ T29] audit: type=1326 audit(1746948811.066:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.910109][ T29] audit: type=1326 audit(1746948811.086:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 171.933512][ T29] audit: type=1326 audit(1746948811.086:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69cc5e969 code=0x7ffc0000 [ 172.801992][ T5704] lo speed is unknown, defaulting to 1000 [ 172.864305][ T5713] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.935324][ T5713] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.969360][ T5704] lo speed is unknown, defaulting to 1000 [ 172.998673][ T5713] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.074466][ T5713] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.142434][ T5713] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.156460][ T5713] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.169205][ T5713] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.192172][ T5713] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.496094][ T5718] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 173.520990][ T5724] netlink: 96 bytes leftover after parsing attributes in process `syz.4.840'. [ 173.547714][ T5718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.555584][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 173.583783][ T5726] bond1 (unregistering): Released all slaves [ 173.956564][ T5728] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 175.416188][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 176.474441][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 176.484128][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 177.345425][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 177.345442][ T29] audit: type=1326 audit(1746948816.596:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.390792][ T29] audit: type=1326 audit(1746948816.626:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.414857][ T29] audit: type=1326 audit(1746948816.626:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.438375][ T29] audit: type=1326 audit(1746948816.626:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.462186][ T29] audit: type=1326 audit(1746948816.626:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.485498][ T29] audit: type=1326 audit(1746948816.626:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 177.509385][ T29] audit: type=1326 audit(1746948816.626:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3f0d9e9a3 code=0x7ffc0000 [ 177.533089][ T29] audit: type=1326 audit(1746948816.626:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3f0d9d41f code=0x7ffc0000 [ 177.556210][ T29] audit: type=1326 audit(1746948816.626:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff3f0d9e9f7 code=0x7ffc0000 [ 177.580235][ T29] audit: type=1326 audit(1746948816.626:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3f0d9d2d0 code=0x7ffc0000 [ 178.083977][ T5785] loop5: detected capacity change from 0 to 512 [ 178.091001][ T5785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.113610][ T5785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.126201][ T5785] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.153102][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.852939][ T5803] lo speed is unknown, defaulting to 1000 [ 180.483392][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.881'. [ 180.525382][ T5829] hsr_slave_0 (unregistering): left promiscuous mode [ 180.537114][ T5838] loop3: detected capacity change from 0 to 1024 [ 180.562552][ T5834] netlink: 3136 bytes leftover after parsing attributes in process `syz.2.883'. [ 180.574902][ T5836] lo speed is unknown, defaulting to 1000 [ 180.593182][ T5838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0002] [ 180.610803][ T5838] System zones: 0-1, 3-12 [ 180.640018][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.725696][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.048188][ T5864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 182.472203][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 182.472218][ T29] audit: type=1400 audit(1746948821.726:2813): avc: denied { create } for pid=5867 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.504814][ T5870] veth0_vlan: entered allmulticast mode [ 182.515121][ T29] audit: type=1400 audit(1746948821.766:2814): avc: denied { execmem } for pid=5871 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 182.539470][ T5870] veth0_vlan: left promiscuous mode [ 182.545646][ T5870] veth0_vlan: entered promiscuous mode [ 182.710189][ T29] audit: type=1400 audit(1746948821.956:2815): avc: denied { create } for pid=5874 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.732198][ T29] audit: type=1400 audit(1746948821.966:2816): avc: denied { setopt } for pid=5874 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.752862][ T29] audit: type=1400 audit(1746948821.986:2817): avc: denied { ioctl } for pid=5874 comm="syz.4.899" path="socket:[13785]" dev="sockfs" ino=13785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.777864][ T29] audit: type=1400 audit(1746948821.986:2818): avc: denied { write } for pid=5874 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.130174][ T29] audit: type=1400 audit(1746948822.376:2819): avc: denied { create } for pid=5878 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.152109][ T29] audit: type=1400 audit(1746948822.386:2820): avc: denied { create } for pid=5878 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.163297][ T5879] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 183.172404][ T29] audit: type=1400 audit(1746948822.386:2821): avc: denied { ioctl } for pid=5878 comm="syz.5.901" path="socket:[13794]" dev="sockfs" ino=13794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.203480][ T29] audit: type=1400 audit(1746948822.386:2822): avc: denied { bind } for pid=5878 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.341614][ T5883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 184.618222][ T5900] loop5: detected capacity change from 0 to 512 [ 184.626278][ T5900] EXT4-fs: Ignoring removed orlov option [ 184.632426][ T5900] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.642975][ T5900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 184.651936][ T5900] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.908: corrupted in-inode xattr: e_value size too large [ 184.667850][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.908: couldn't read orphan inode 15 (err -117) [ 184.680248][ T5900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.709652][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.878499][ T10] kernel write not supported for file /221/attr/sockcreate (pid: 10 comm: kworker/0:1) [ 186.715250][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 186.724808][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 186.733722][ T5919] netlink: 'syz.2.915': attribute type 11 has an invalid length. [ 186.943875][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.953638][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.428026][ T5931] sch_fq: defrate 0 ignored. [ 188.429255][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 188.429271][ T29] audit: type=1400 audit(1746948827.676:2878): avc: denied { create } for pid=5932 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.459437][ T29] audit: type=1400 audit(1746948827.706:2879): avc: denied { setopt } for pid=5932 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.480651][ T29] audit: type=1400 audit(1746948827.706:2880): avc: denied { connect } for pid=5932 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.084079][ T29] audit: type=1326 audit(1746948828.336:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.2.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x0 [ 189.185681][ T29] audit: type=1400 audit(1746948828.436:2882): avc: denied { lock } for pid=5939 comm="syz.2.924" path="socket:[14014]" dev="sockfs" ino=14014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 189.288607][ T29] audit: type=1400 audit(1746948828.536:2883): avc: denied { mounton } for pid=5945 comm="syz.3.925" path="/147/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 189.326218][ T29] audit: type=1400 audit(1746948828.566:2884): avc: denied { write } for pid=5945 comm="syz.3.925" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.328103][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 189.346961][ T29] audit: type=1400 audit(1746948828.566:2885): avc: denied { open } for pid=5945 comm="syz.3.925" path="/147/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.768336][ T29] audit: type=1400 audit(1746948829.016:2886): avc: denied { execute } for pid=5954 comm="syz.0.929" name="file1" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.793269][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 189.803433][ T29] audit: type=1400 audit(1746948829.016:2887): avc: denied { execute_no_trans } for pid=5954 comm="syz.0.929" path="/253/file1" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.803796][ T5957] bridge_slave_1: left allmulticast mode [ 189.833411][ T5957] bridge_slave_1: left promiscuous mode [ 189.839091][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.847006][ T5957] bridge_slave_0: left allmulticast mode [ 189.853354][ T5957] bridge_slave_0: left promiscuous mode [ 189.859192][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.921767][ T5963] xt_connbytes: Forcing CT accounting to be enabled [ 190.930681][ T5963] set match dimension is over the limit! [ 191.017822][ T5967] IPv4: Oversized IP packet from 127.202.26.0 [ 191.652627][ T5973] ref_ctr_offset mismatch. inode: 0x2d2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 192.503751][ T5989] bridge0: port 3(gretap0) entered blocking state [ 192.510369][ T5989] bridge0: port 3(gretap0) entered disabled state [ 192.517112][ T5989] gretap0: entered allmulticast mode [ 192.523236][ T5989] gretap0: entered promiscuous mode [ 192.528897][ T5989] bridge0: port 3(gretap0) entered blocking state [ 192.535399][ T5989] bridge0: port 3(gretap0) entered forwarding state [ 192.545076][ T5989] gretap0: left allmulticast mode [ 192.550156][ T5989] gretap0: left promiscuous mode [ 192.555363][ T5989] bridge0: port 3(gretap0) entered disabled state [ 193.031984][ T6002] lo speed is unknown, defaulting to 1000 [ 193.441370][ T6027] loop3: detected capacity change from 0 to 1024 [ 193.448260][ T6027] EXT4-fs: Ignoring removed nobh option [ 193.453888][ T6027] EXT4-fs: Ignoring removed bh option [ 193.463240][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.546214][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.636789][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 193.636803][ T29] audit: type=1400 audit(1746948832.886:2921): avc: denied { create } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.682574][ T29] audit: type=1400 audit(1746948832.916:2922): avc: denied { bind } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.702891][ T29] audit: type=1400 audit(1746948832.916:2923): avc: denied { listen } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.722912][ T29] audit: type=1400 audit(1746948832.916:2924): avc: denied { connect } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.742595][ T29] audit: type=1400 audit(1746948832.926:2925): avc: denied { write } for pid=6040 comm="syz.3.963" path="socket:[14166]" dev="sockfs" ino=14166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.766021][ T29] audit: type=1400 audit(1746948832.926:2926): avc: denied { accept } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.774407][ T6044] $Hÿ: renamed from bond0 (while UP) [ 193.785954][ T29] audit: type=1400 audit(1746948832.926:2927): avc: denied { read } for pid=6040 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.823580][ T6044] $Hÿ: entered promiscuous mode [ 193.828729][ T6044] bond_slave_0: entered promiscuous mode [ 193.835364][ T6044] bond_slave_1: entered promiscuous mode [ 193.948228][ T6053] pim6reg1: entered promiscuous mode [ 193.954401][ T6053] pim6reg1: entered allmulticast mode [ 194.012854][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.969'. [ 194.157894][ T29] audit: type=1400 audit(1746948833.406:2928): avc: denied { create } for pid=6063 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 194.240527][ T29] audit: type=1400 audit(1746948833.486:2929): avc: denied { name_bind } for pid=6069 comm="syz.2.976" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.275197][ T29] audit: type=1400 audit(1746948833.486:2930): avc: denied { node_bind } for pid=6069 comm="syz.2.976" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 194.335512][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 195.559268][ T6126] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1001'. [ 195.649122][ T6131] lo speed is unknown, defaulting to 1000 [ 195.673056][ T6133] dvmrp0: entered allmulticast mode [ 196.015066][ T6151] loop4: detected capacity change from 0 to 512 [ 196.023618][ T6151] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.032750][ T6151] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 196.063884][ T6151] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 196.074061][ T6151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 196.082925][ T6151] System zones: 0-2, 18-18, 34-34 [ 196.088564][ T6151] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 196.103612][ T6151] EXT4-fs (loop4): 1 truncate cleaned up [ 196.109732][ T6151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.127313][ T6151] EXT4-fs error (device loop4): ext4_generic_delete_entry:2670: inode #2: block 3: comm syz.4.1010: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 196.148732][ T6151] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 196.173590][ T6151] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1010'. [ 196.182845][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 196.204072][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.346575][ T6161] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 196.355379][ T6161] hsr_slave_0: left promiscuous mode [ 196.363304][ T6161] hsr_slave_1: left promiscuous mode [ 196.669436][ T6176] netlink: 'syz.4.1020': attribute type 3 has an invalid length. [ 197.311416][ T6218] loop4: detected capacity change from 0 to 512 [ 197.318281][ T6218] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.325278][ T6218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.338783][ T6218] EXT4-fs (loop4): 1 truncate cleaned up [ 197.345351][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.403780][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.662371][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 197.678757][ T6230] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 197.774356][ T6243] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 197.834447][ T6248] loop5: detected capacity change from 0 to 1024 [ 197.843259][ T6248] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.850202][ T6248] EXT4-fs: Ignoring removed nobh option [ 197.855905][ T6248] EXT4-fs: Ignoring removed bh option [ 197.874352][ T6248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.895597][ T6248] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1048: inode #327696: comm syz.5.1048: iget: illegal inode # [ 197.910483][ T6248] EXT4-fs (loop5): Remounting filesystem read-only [ 197.917423][ T6248] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.5.1048: cleanup dec ref error -30 [ 197.931698][ T6248] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #18: comm syz.5.1048: dec ref error=-30 [ 197.959793][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.168414][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 198.177439][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 198.194248][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 198.231172][ T6270] Falling back ldisc for ttyS3. [ 198.291807][ T6282] 9pnet_fd: Insufficient options for proto=fd [ 198.846666][ T6298] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 198.855937][ T6298] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 199.108786][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 199.108805][ T29] audit: type=1400 audit(1746948838.356:3042): avc: denied { read } for pid=6299 comm="syz.5.1068" name="file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.143315][ T29] audit: type=1400 audit(1746948838.396:3043): avc: denied { open } for pid=6299 comm="syz.5.1068" path="/159/file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 200.978252][ T6327] syz.3.1075: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 200.993861][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.3.1075 Tainted: G W 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 200.993907][ T6327] Tainted: [W]=WARN [ 200.993963][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 200.993975][ T6327] Call Trace: [ 200.993982][ T6327] [ 200.993991][ T6327] __dump_stack+0x1d/0x30 [ 200.994018][ T6327] dump_stack_lvl+0xe8/0x140 [ 200.994049][ T6327] dump_stack+0x15/0x1b [ 200.994083][ T6327] warn_alloc+0x12b/0x1a0 [ 200.994114][ T6327] ? schedule+0x5f/0xd0 [ 200.994149][ T6327] ? futex_unqueue+0xb9/0xf0 [ 200.994243][ T6327] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 200.994280][ T6327] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.994312][ T6327] ? __rcu_read_unlock+0x4f/0x70 [ 200.994335][ T6327] ? avc_has_perm_noaudit+0x1b1/0x200 [ 200.994487][ T6327] ? xskq_create+0x36/0xe0 [ 200.994557][ T6327] vmalloc_user_noprof+0x59/0x70 [ 200.994627][ T6327] ? xskq_create+0x80/0xe0 [ 200.994650][ T6327] xskq_create+0x80/0xe0 [ 200.994681][ T6327] xsk_init_queue+0x95/0xf0 [ 200.994782][ T6327] xsk_setsockopt+0x3de/0x510 [ 200.994809][ T6327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.994831][ T6327] __sys_setsockopt+0x181/0x200 [ 200.994861][ T6327] ? fpregs_restore_userregs+0xbb/0x190 [ 200.994891][ T6327] __x64_sys_setsockopt+0x64/0x80 [ 200.994962][ T6327] x64_sys_call+0x2bd5/0x2fb0 [ 200.995045][ T6327] do_syscall_64+0xd0/0x1a0 [ 200.995064][ T6327] ? clear_bhb_loop+0x25/0x80 [ 200.995084][ T6327] ? clear_bhb_loop+0x25/0x80 [ 200.995103][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.995191][ T6327] RIP: 0033:0x7f36b384e969 [ 200.995210][ T6327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.995225][ T6327] RSP: 002b:00007f36b1eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.995288][ T6327] RAX: ffffffffffffffda RBX: 00007f36b3a75fa0 RCX: 00007f36b384e969 [ 200.995304][ T6327] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 200.995319][ T6327] RBP: 00007f36b38d0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 200.995366][ T6327] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 200.995376][ T6327] R13: 0000000000000000 R14: 00007f36b3a75fa0 R15: 00007ffecc874c48 [ 200.995393][ T6327] [ 200.995403][ T6327] Mem-Info: [ 201.234559][ T6327] active_anon:20152 inactive_anon:9 isolated_anon:0 [ 201.234559][ T6327] active_file:21136 inactive_file:2250 isolated_file:0 [ 201.234559][ T6327] unevictable:0 dirty:158 writeback:0 [ 201.234559][ T6327] slab_reclaimable:3094 slab_unreclaimable:15499 [ 201.234559][ T6327] mapped:28717 shmem:17059 pagetables:653 [ 201.234559][ T6327] sec_pagetables:0 bounce:0 [ 201.234559][ T6327] kernel_misc_reclaimable:0 [ 201.234559][ T6327] free:1879001 free_pcp:4330 free_cma:0 [ 201.280257][ T6327] Node 0 active_anon:80608kB inactive_anon:36kB active_file:84544kB inactive_file:9000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114868kB dirty:632kB writeback:0kB shmem:68236kB writeback_tmp:0kB kernel_stack:3504kB pagetables:2728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.303679][ T6329] netlink: 'syz.5.1076': attribute type 4 has an invalid length. [ 201.309957][ T6327] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.344599][ T6327] lowmem_reserve[]: 0 2884 7863 7863 [ 201.350104][ T6327] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 201.379207][ T6327] lowmem_reserve[]: 0 0 4978 4978 [ 201.384285][ T6327] Node 0 Normal free:4550708kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:80608kB inactive_anon:36kB active_file:84544kB inactive_file:9000kB unevictable:0kB writepending:632kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:13624kB local_pcp:5236kB free_cma:0kB [ 201.415157][ T6327] lowmem_reserve[]: 0 0 0 0 [ 201.419993][ T6327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.432961][ T6327] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 201.449943][ T6327] Node 0 Normal: 473*4kB (UME) 373*8kB (UME) 294*16kB (UME) 253*32kB (UME) 196*64kB (UME) 68*128kB (UME) 52*256kB (UME) 62*512kB (UME) 44*1024kB (UM) 29*2048kB (UME) 1065*4096kB (UM) = 4550668kB [ 201.469476][ T6327] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 201.479507][ T6327] 40478 total pagecache pages [ 201.484537][ T6327] 36 pages in swap cache [ 201.488974][ T6327] Free swap = 124852kB [ 201.493178][ T6327] Total swap = 124996kB [ 201.497450][ T6327] 2097051 pages RAM [ 201.501962][ T6327] 0 pages HighMem/MovableOnly [ 201.506666][ T6327] 80258 pages reserved [ 202.095371][ T6344] __nla_validate_parse: 7 callbacks suppressed [ 202.095389][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 202.121704][ T6344] loop3: detected capacity change from 0 to 512 [ 202.128340][ T6344] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.135878][ T6344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.147458][ T6344] EXT4-fs (loop3): 1 truncate cleaned up [ 202.153695][ T6344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.178236][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.511136][ T29] audit: type=1326 audit(1746948841.756:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 202.535380][ T29] audit: type=1326 audit(1746948841.766:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 202.559116][ T29] audit: type=1326 audit(1746948841.766:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 202.583281][ T29] audit: type=1326 audit(1746948841.766:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff731fbe9a3 code=0x7ffc0000 [ 202.606854][ T29] audit: type=1326 audit(1746948841.766:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff731fbd41f code=0x7ffc0000 [ 202.630993][ T29] audit: type=1326 audit(1746948841.766:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff731fbe9f7 code=0x7ffc0000 [ 202.654324][ T29] audit: type=1326 audit(1746948841.786:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff731fbd2d0 code=0x7ffc0000 [ 202.678390][ T29] audit: type=1326 audit(1746948841.786:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff731fbd5ca code=0x7ffc0000 [ 204.207595][ T6366] Set syz1 is full, maxelem 65536 reached [ 204.465281][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 204.477292][ T6384] ipvlan2: entered promiscuous mode [ 204.973318][ T6400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.114461][ T6400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.237893][ T6400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.300498][ T6400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.331231][ T6404] wg2: entered promiscuous mode [ 205.336208][ T6404] wg2: entered allmulticast mode [ 205.386812][ T6400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.411844][ T6400] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.435421][ T6400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.459724][ T6400] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.744880][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 205.755786][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 205.755801][ T29] audit: type=1400 audit(1746948845.006:3061): avc: denied { firmware_load } for pid=6411 comm="syz.3.1108" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 205.976087][ T6415] loop5: detected capacity change from 0 to 512 [ 205.984303][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 205.990790][ T29] audit: type=1400 audit(1746948845.236:3062): avc: denied { setopt } for pid=6419 comm="syz.2.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.016294][ T29] audit: type=1400 audit(1746948845.246:3063): avc: denied { mounton } for pid=6414 comm="syz.5.1109" path=2F3136382F66696C6530202864656C6574656429 dev="proc" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 206.058294][ T6415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.072415][ T6415] ext4 filesystem being mounted at /168/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 206.098094][ T6415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.099505][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 206.151748][ T29] audit: type=1400 audit(1746948845.406:3064): avc: denied { unmount } for pid=4578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 206.828134][ T6429] netlink: 'syz.5.1114': attribute type 4 has an invalid length. [ 207.270570][ T29] audit: type=1400 audit(1746948846.516:3065): avc: denied { connect } for pid=6432 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 207.291365][ T29] audit: type=1400 audit(1746948846.516:3066): avc: denied { name_connect } for pid=6432 comm="syz.0.1116" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 208.318142][ T29] audit: type=1326 audit(1746948847.566:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff731fb5927 code=0x7ffc0000 [ 208.342304][ T29] audit: type=1326 audit(1746948847.566:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff731f5ab39 code=0x7ffc0000 [ 208.366382][ T29] audit: type=1326 audit(1746948847.566:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff731fb5927 code=0x7ffc0000 [ 208.391417][ T29] audit: type=1326 audit(1746948847.566:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff731f5ab39 code=0x7ffc0000 [ 209.999915][ T6456] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1126'. [ 210.645036][ T6462] openvswitch: netlink: Message has 6 unknown bytes. [ 210.674024][ T6461] syzkaller0: entered promiscuous mode [ 210.679621][ T6461] syzkaller0: entered allmulticast mode [ 210.726433][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.734909][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.735724][ T6466] loop4: detected capacity change from 0 to 1024 [ 210.752097][ T6466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.758933][ T6466] EXT4-fs: Mount option(s) incompatible with ext2 [ 211.362275][ T6474] ref_ctr_offset mismatch. inode: 0x3a0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 213.930179][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 213.930197][ T29] audit: type=1400 audit(1746948853.176:3175): avc: denied { bind } for pid=6485 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.930366][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 215.443378][ T29] audit: type=1400 audit(1746948854.696:3176): avc: denied { relabelfrom } for pid=6506 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 215.445505][ T6508] syzkaller0: create flow: hash 1048900043 index 0 [ 215.464028][ T29] audit: type=1400 audit(1746948854.696:3177): avc: denied { relabelto } for pid=6506 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 215.552665][ T6506] syzkaller0 (unregistered): delete flow: hash 1048900043 index 0 [ 216.262688][ T29] audit: type=1400 audit(1746948855.516:3178): avc: denied { bind } for pid=6512 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.282975][ T29] audit: type=1400 audit(1746948855.516:3179): avc: denied { name_bind } for pid=6512 comm="syz.5.1148" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 216.303931][ T29] audit: type=1400 audit(1746948855.516:3180): avc: denied { node_bind } for pid=6512 comm="syz.5.1148" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 216.687380][ T29] audit: type=1326 audit(1746948855.936:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 216.711469][ T29] audit: type=1326 audit(1746948855.936:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 216.734976][ T29] audit: type=1326 audit(1746948855.936:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 216.759202][ T29] audit: type=1326 audit(1746948855.936:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 217.176785][ T6530] loop4: detected capacity change from 0 to 2048 [ 217.184201][ T6530] EXT4-fs (loop4): invalid inodes per group: 204800 [ 217.184201][ T6530] [ 219.665746][ T6553] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 219.666317][ T6552] IPVS: stopping backup sync thread 6553 ... [ 220.708301][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 220.722362][ T6561] team0 (unregistering): Port device team_slave_0 removed [ 221.336327][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 221.336342][ T29] audit: type=1400 audit(1746948860.586:3521): avc: denied { setopt } for pid=6562 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.362798][ T29] audit: type=1400 audit(1746948860.586:3522): avc: denied { write } for pid=6562 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.382245][ T29] audit: type=1400 audit(1746948860.586:3523): avc: denied { name_connect } for pid=6562 comm="syz.0.1170" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 221.768729][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 221.969231][ T29] audit: type=1400 audit(1746948861.216:3524): avc: denied { read } for pid=6572 comm="syz.2.1174" path="socket:[15834]" dev="sockfs" ino=15834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.149295][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 222.180135][ T29] audit: type=1400 audit(1746948861.426:3525): avc: denied { setopt } for pid=6579 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.199837][ T29] audit: type=1400 audit(1746948861.426:3526): avc: denied { bind } for pid=6579 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.219218][ T29] audit: type=1400 audit(1746948861.426:3527): avc: denied { name_bind } for pid=6579 comm="syz.0.1175" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 222.240187][ T29] audit: type=1400 audit(1746948861.426:3528): avc: denied { node_bind } for pid=6579 comm="syz.0.1175" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 222.393316][ T29] audit: type=1326 audit(1746948861.646:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 222.419472][ T29] audit: type=1326 audit(1746948861.646:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 223.445677][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 223.447283][ T6595] syz_tun: entered allmulticast mode [ 223.468030][ T6593] syz_tun: left allmulticast mode [ 223.473749][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 227.705195][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 227.705213][ T29] audit: type=1400 audit(1746948866.956:3570): avc: denied { watch watch_reads } for pid=6630 comm="syz.3.1197" path="/" dev="ramfs" ino=15167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 227.734500][ T29] audit: type=1400 audit(1746948866.986:3571): avc: denied { execute } for pid=6630 comm="syz.3.1197" name="file0" dev="ramfs" ino=15168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 227.757357][ T29] audit: type=1400 audit(1746948866.986:3572): avc: denied { execute_no_trans } for pid=6630 comm="syz.3.1197" path="/file0" dev="ramfs" ino=15168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 229.387831][ T6641] loop3: detected capacity change from 0 to 512 [ 229.397282][ T6641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.416144][ T6641] EXT4-fs (loop3): 1 truncate cleaned up [ 229.424053][ T6641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.598872][ T29] audit: type=1326 audit(1746948868.846:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.626500][ T29] audit: type=1326 audit(1746948868.876:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.650053][ T29] audit: type=1326 audit(1746948868.876:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.673507][ T29] audit: type=1326 audit(1746948868.876:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.697318][ T29] audit: type=1326 audit(1746948868.876:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.720768][ T29] audit: type=1326 audit(1746948868.876:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.744303][ T29] audit: type=1326 audit(1746948868.876:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 229.768855][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.841611][ T6649] loop5: detected capacity change from 0 to 512 [ 229.848578][ T6649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.859367][ T6649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 229.867871][ T6649] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1203: missing EA_INODE flag [ 229.880347][ T6649] EXT4-fs (loop5): Remounting filesystem read-only [ 229.887556][ T6649] EXT4-fs (loop5): 1 orphan inode deleted [ 229.894642][ T6649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.918902][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.505728][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.515113][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.530077][ T6672] netlink: 'syz.2.1213': attribute type 21 has an invalid length. [ 231.538011][ T6672] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.546470][ T6672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.553748][ T6672] IPv6: NLM_F_CREATE should be set when creating new route [ 231.561068][ T6672] IPv6: NLM_F_CREATE should be set when creating new route [ 231.568265][ T6672] IPv6: NLM_F_CREATE should be set when creating new route [ 231.743078][ T6679] SELinux: syz.4.1216 (6679) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.188154][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 232.220917][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 233.915185][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 233.915200][ T29] audit: type=1400 audit(1746948873.166:3588): avc: denied { read write } for pid=6695 comm="syz.5.1224" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 233.944761][ T29] audit: type=1400 audit(1746948873.166:3589): avc: denied { open } for pid=6695 comm="syz.5.1224" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 233.954353][ T6700] netlink: 'syz.3.1226': attribute type 12 has an invalid length. [ 234.653338][ T6710] loop5: detected capacity change from 0 to 128 [ 234.665238][ T29] audit: type=1400 audit(1746948873.916:3590): avc: denied { mount } for pid=6707 comm="syz.5.1229" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 234.767238][ T6712] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 234.775423][ T6712] hsr_slave_0: left promiscuous mode [ 234.782802][ T6712] hsr_slave_1: left promiscuous mode [ 234.986649][ T29] audit: type=1400 audit(1746948874.236:3591): avc: denied { write } for pid=6715 comm="syz.4.1232" name="file0" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.020790][ T29] audit: type=1400 audit(1746948874.266:3592): avc: denied { ioctl } for pid=6715 comm="syz.4.1232" path="/156/file0" dev="tmpfs" ino=825 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.458961][ T6718] loop3: detected capacity change from 0 to 512 [ 235.480932][ T6718] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.503656][ T29] audit: type=1400 audit(1746948874.726:3593): avc: denied { mounton } for pid=6717 comm="syz.3.1234" path="/195/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.530967][ T6718] EXT4-fs (loop3): 1 truncate cleaned up [ 235.537132][ T6718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.551703][ T6718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.577404][ T29] audit: type=1400 audit(1746948874.826:3594): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 235.626580][ T6726] loop4: detected capacity change from 0 to 1024 [ 235.643500][ T6726] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.683353][ T6726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 235.704677][ T6726] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.1235: lblock 1 mapped to illegal pblock 1 (length 1) [ 235.743497][ T6726] Quota error (device loop4): write_blk: dquota write failed [ 235.750982][ T6726] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 235.773548][ T6726] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1235: Failed to acquire dquot type 0 [ 235.795400][ T6726] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1235: Freeing blocks not in datazone - block = 0, count = 4096 [ 235.817602][ T6726] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1235: Invalid inode bitmap blk 0 in block_group 0 [ 235.843976][ T4132] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 235.859663][ T6726] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 235.883509][ T4132] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 235.892045][ T4132] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 0 [ 235.904753][ T6726] EXT4-fs (loop4): 1 orphan inode deleted [ 235.924187][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.993100][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.112189][ T6732] SELinux: failed to load policy [ 236.465777][ T6736] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 239.643200][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 241.132847][ T6764] loop5: detected capacity change from 0 to 512 [ 241.139536][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.147243][ T6764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.163576][ T6764] EXT4-fs (loop5): 1 truncate cleaned up [ 241.187733][ T6764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.235794][ T6764] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 241.253165][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 241.253186][ T29] audit: type=1400 audit(1746948880.496:3606): avc: denied { relabelto } for pid=6763 comm="syz.5.1252" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.288314][ T29] audit: type=1400 audit(1746948880.536:3607): avc: denied { write } for pid=6763 comm="syz.5.1252" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.313923][ T29] audit: type=1400 audit(1746948880.536:3608): avc: denied { add_name } for pid=6763 comm="syz.5.1252" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.363407][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.429005][ T29] audit: type=1400 audit(1746948880.676:3609): avc: denied { write } for pid=6777 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.145538][ T29] audit: type=1326 audit(1746948882.396:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 243.169071][ T29] audit: type=1326 audit(1746948882.396:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 243.238362][ T29] audit: type=1326 audit(1746948882.446:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 243.261916][ T29] audit: type=1326 audit(1746948882.446:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 243.285482][ T29] audit: type=1326 audit(1746948882.446:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 243.308945][ T29] audit: type=1326 audit(1746948882.446:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3f0d9e9a3 code=0x7ffc0000 [ 244.630493][ T6942] IPVS: Error connecting to the multicast addr [ 247.061294][ T6962] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1281'. [ 247.071851][ T6961] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1281'. [ 247.222725][ T6964] loop3: detected capacity change from 0 to 128 [ 247.664226][ T6967] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 247.675283][ T6966] loop4: detected capacity change from 0 to 512 [ 247.681943][ T6966] EXT4-fs: Ignoring removed i_version option [ 247.693285][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.705933][ T6966] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.757009][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.875209][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 247.875227][ T29] audit: type=1400 audit(1746948887.126:3643): avc: denied { cpu } for pid=6971 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 247.875903][ T6972] ref_ctr increment failed for inode: 0x467 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005c200 [ 247.914267][ T6972] uprobe: syz.5.1284:6972 failed to unregister, leaking uprobe [ 248.716124][ T29] audit: type=1326 audit(1746948887.966:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.751250][ T29] audit: type=1326 audit(1746948887.966:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.769844][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 248.775715][ T29] audit: type=1326 audit(1746948887.986:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.807934][ T29] audit: type=1326 audit(1746948887.986:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.832182][ T29] audit: type=1326 audit(1746948887.986:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.855670][ T29] audit: type=1326 audit(1746948887.986:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.879702][ T29] audit: type=1326 audit(1746948887.986:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.903700][ T29] audit: type=1326 audit(1746948887.986:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 248.927147][ T29] audit: type=1326 audit(1746948887.986:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 249.386657][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 249.395703][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.404027][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.594808][ T6988] netlink: 'syz.5.1291': attribute type 10 has an invalid length. [ 249.602785][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1291'. [ 249.612557][ T6988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.621338][ T6988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.630045][ T6988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.638775][ T6988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.649409][ T6988] team0: Port device geneve1 added [ 250.227114][ T6997] loop3: detected capacity change from 0 to 2048 [ 250.252578][ T6997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.267979][ T6997] EXT4-fs (loop3): shut down requested (0) [ 250.284250][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.453787][ T7004] loop5: detected capacity change from 0 to 512 [ 250.461469][ T7004] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.482811][ T7004] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1296: Failed to acquire dquot type 0 [ 250.494384][ T7004] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 250.509978][ T7004] EXT4-fs (loop5): 1 truncate cleaned up [ 250.515966][ T7004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.541549][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.874120][ T7008] bond_slave_1: mtu less than device minimum [ 251.511029][ T7014] loop5: detected capacity change from 0 to 512 [ 251.518124][ T7014] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 251.529669][ T7014] EXT4-fs (loop5): invalid journal inode [ 251.536262][ T7014] EXT4-fs (loop5): can't get journal size [ 251.544612][ T7014] EXT4-fs (loop5): 1 truncate cleaned up [ 251.551234][ T7014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.567603][ T7014] netlink: 'syz.5.1300': attribute type 5 has an invalid length. [ 251.576151][ T7014] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1300'. [ 251.585268][ T7014] : renamed from bond0 [ 251.593581][ T7024] netlink: 'syz.0.1301': attribute type 4 has an invalid length. [ 251.604231][ T7024] netlink: 'syz.0.1301': attribute type 4 has an invalid length. [ 251.616285][ T4578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.974718][ T7026] SELinux: failed to load policy [ 252.413621][ T7030] veth0_vlan: entered allmulticast mode [ 252.423045][ T7030] ªªªªªª: renamed from vlan0 [ 256.525413][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 256.525431][ T29] audit: type=1400 audit(1746948895.776:3720): avc: denied { execute } for pid=7064 comm="syz.3.1319" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 257.172467][ T29] audit: type=1326 audit(1746948896.426:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.196239][ T29] audit: type=1326 audit(1746948896.426:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.219681][ T29] audit: type=1326 audit(1746948896.426:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.243040][ T29] audit: type=1326 audit(1746948896.426:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.266592][ T29] audit: type=1326 audit(1746948896.426:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.290100][ T29] audit: type=1326 audit(1746948896.426:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.313704][ T29] audit: type=1326 audit(1746948896.426:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.337143][ T29] audit: type=1326 audit(1746948896.426:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 257.360945][ T29] audit: type=1326 audit(1746948896.426:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 258.692390][ T7096] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1331'. [ 258.703286][ T7096] 0ªX¹¦À: renamed from caif0 [ 258.731067][ T7096] 0ªX¹¦À: entered allmulticast mode [ 258.737845][ T7096] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 259.519712][ T7102] loop5: detected capacity change from 0 to 512 [ 259.527447][ T7102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.538547][ T7102] EXT4-fs (loop5): 1 truncate cleaned up [ 259.544656][ T7102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.558129][ T7102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.730394][ T7108] netlink: 'syz.5.1336': attribute type 7 has an invalid length. [ 259.738636][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 260.384344][ T7112] bond_slave_1: mtu less than device minimum [ 261.052633][ T3390] IPVS: starting estimator thread 0... [ 261.140875][ T7118] IPVS: using max 2544 ests per chain, 127200 per kthread [ 262.359586][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 262.359603][ T29] audit: type=1400 audit(1746948901.606:3736): avc: denied { write } for pid=7129 comm="syz.5.1345" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 262.363893][ T7131] hub 9-0:1.0: USB hub found [ 262.394388][ T7131] hub 9-0:1.0: 8 ports detected [ 263.417075][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 263.461962][ T7130] syz.5.1345 (7130) used greatest stack depth: 5952 bytes left [ 263.807312][ T29] audit: type=1326 audit(1746948903.056:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.831115][ T29] audit: type=1326 audit(1746948903.056:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.854699][ T29] audit: type=1326 audit(1746948903.056:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.878319][ T29] audit: type=1326 audit(1746948903.056:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.901938][ T29] audit: type=1326 audit(1746948903.056:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.925376][ T29] audit: type=1326 audit(1746948903.056:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.949074][ T29] audit: type=1326 audit(1746948903.056:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.972671][ T29] audit: type=1326 audit(1746948903.106:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 263.996256][ T29] audit: type=1326 audit(1746948903.106:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 264.036672][ T7154] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 264.274148][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 264.284680][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 264.303443][ T7158] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1358'. [ 264.939629][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 265.365273][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1365'. [ 265.577976][ T7188] bond_slave_1: mtu less than device minimum [ 267.926616][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 267.926633][ T29] audit: type=1400 audit(1746948907.176:4604): avc: denied { create } for pid=7204 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.202425][ T7208] lo speed is unknown, defaulting to 1000 [ 271.386897][ T29] audit: type=1400 audit(1746948910.636:4605): avc: denied { read } for pid=7218 comm="syz.5.1379" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 271.410257][ T29] audit: type=1400 audit(1746948910.636:4606): avc: denied { open } for pid=7218 comm="syz.5.1379" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.250241][ T7233] netlink: 4 bytes leftover after parsing attributes in process `&'. [ 272.258774][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.266259][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.274810][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.282403][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.537657][ T7224] syz.0.1381 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 272.552440][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.0.1381 Tainted: G W 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 272.552484][ T7224] Tainted: [W]=WARN [ 272.552490][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.552506][ T7224] Call Trace: [ 272.552512][ T7224] [ 272.552520][ T7224] __dump_stack+0x1d/0x30 [ 272.552584][ T7224] dump_stack_lvl+0xe8/0x140 [ 272.552609][ T7224] dump_stack+0x15/0x1b [ 272.552626][ T7224] dump_header+0x81/0x220 [ 272.552711][ T7224] oom_kill_process+0x334/0x3f0 [ 272.552745][ T7224] out_of_memory+0x979/0xb80 [ 272.552856][ T7224] ? css_next_descendant_pre+0x138/0x160 [ 272.552902][ T7224] mem_cgroup_out_of_memory+0x13d/0x190 [ 272.553018][ T7224] try_charge_memcg+0x5e2/0x870 [ 272.553084][ T7224] obj_cgroup_charge_pages+0xb7/0x1a0 [ 272.553188][ T7224] __memcg_kmem_charge_page+0x9f/0x170 [ 272.553286][ T7224] __alloc_frozen_pages_noprof+0x188/0x360 [ 272.553324][ T7224] alloc_pages_mpol+0xb3/0x250 [ 272.553392][ T7224] alloc_pages_noprof+0x90/0x130 [ 272.553419][ T7224] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 272.553486][ T7224] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 272.553513][ T7224] ? ip_set_alloc+0x1f/0x30 [ 272.553607][ T7224] ? ip_set_alloc+0x1f/0x30 [ 272.553640][ T7224] ip_set_alloc+0x1f/0x30 [ 272.553672][ T7224] hash_netiface_create+0x282/0x740 [ 272.553754][ T7224] ? __pfx_hash_netiface_create+0x10/0x10 [ 272.553782][ T7224] ip_set_create+0x3c9/0x960 [ 272.553823][ T7224] ? __nla_parse+0x40/0x60 [ 272.553894][ T7224] nfnetlink_rcv_msg+0x4c3/0x590 [ 272.553937][ T7224] netlink_rcv_skb+0x120/0x220 [ 272.554058][ T7224] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 272.554096][ T7224] nfnetlink_rcv+0x16b/0x1690 [ 272.554124][ T7224] ? dl_server_start+0x52/0xa0 [ 272.554154][ T7224] ? enqueue_task_fair+0x8ac/0x990 [ 272.554206][ T7224] ? _raw_spin_unlock+0x26/0x50 [ 272.554272][ T7224] ? sched_balance_rq+0x1936/0x1e80 [ 272.554316][ T7224] ? ___slab_alloc+0x275/0x900 [ 272.554364][ T7224] ? should_fail_ex+0x30/0x280 [ 272.554404][ T7224] ? selinux_nlmsg_lookup+0x99/0x8b0 [ 272.554500][ T7224] ? selinux_netlink_send+0x59f/0x5f0 [ 272.554529][ T7224] ? __rcu_read_unlock+0x34/0x70 [ 272.554553][ T7224] ? __netlink_lookup+0x266/0x2a0 [ 272.554575][ T7224] netlink_unicast+0x59e/0x670 [ 272.554646][ T7224] netlink_sendmsg+0x58b/0x6b0 [ 272.554764][ T7224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.554796][ T7224] __sock_sendmsg+0x142/0x180 [ 272.554826][ T7224] ____sys_sendmsg+0x31e/0x4e0 [ 272.554855][ T7224] ___sys_sendmsg+0x17b/0x1d0 [ 272.554934][ T7224] __x64_sys_sendmsg+0xd4/0x160 [ 272.554959][ T7224] x64_sys_call+0x2999/0x2fb0 [ 272.555004][ T7224] do_syscall_64+0xd0/0x1a0 [ 272.555029][ T7224] ? clear_bhb_loop+0x25/0x80 [ 272.555055][ T7224] ? clear_bhb_loop+0x25/0x80 [ 272.555081][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.555102][ T7224] RIP: 0033:0x7ff731fbe969 [ 272.555117][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.555139][ T7224] RSP: 002b:00007ff730627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.555167][ T7224] RAX: ffffffffffffffda RBX: 00007ff7321e5fa0 RCX: 00007ff731fbe969 [ 272.555181][ T7224] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 272.555192][ T7224] RBP: 00007ff732040ab1 R08: 0000000000000000 R09: 0000000000000000 [ 272.555203][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.555217][ T7224] R13: 0000000000000000 R14: 00007ff7321e5fa0 R15: 00007fff5fb3f758 [ 272.555237][ T7224] [ 272.555250][ T7224] memory: usage 307200kB, limit 307200kB, failcnt 255 [ 272.711388][ T29] audit: type=1400 audit(1746948911.946:4607): avc: denied { write } for pid=7238 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.712793][ T7224] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 272.951419][ T7224] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 272.958782][ T7224] Memory cgroup stats for /syz0: [ 272.959165][ T7224] cache 0 [ 272.967162][ T7224] rss 0 [ 272.969949][ T7224] shmem 0 [ 272.972954][ T7224] mapped_file 0 [ 272.976495][ T7224] dirty 0 [ 272.979447][ T7224] writeback 0 [ 272.983633][ T7224] workingset_refault_anon 126 [ 272.988329][ T7224] workingset_refault_file 127 [ 272.993040][ T7224] swap 798720 [ 272.996409][ T7224] swapcached 4096 [ 273.000059][ T7224] pgpgin 158883 [ 273.003579][ T7224] pgpgout 158882 [ 273.007202][ T7224] pgfault 89159 [ 273.010668][ T7224] pgmajfault 26 [ 273.014906][ T7224] inactive_anon 0 [ 273.018542][ T7224] active_anon 4096 [ 273.022345][ T7224] inactive_file 0 [ 273.025988][ T7224] active_file 0 [ 273.029543][ T7224] unevictable 0 [ 273.033041][ T7224] hierarchical_memory_limit 314572800 [ 273.038404][ T7224] hierarchical_memsw_limit 9223372036854771712 [ 273.045192][ T7224] total_cache 0 [ 273.048659][ T7224] total_rss 0 [ 273.052023][ T7224] total_shmem 0 [ 273.055473][ T7224] total_mapped_file 0 [ 273.059501][ T7224] total_dirty 0 [ 273.063008][ T7224] total_writeback 0 [ 273.066824][ T7224] total_workingset_refault_anon 126 [ 273.072605][ T7224] total_workingset_refault_file 127 [ 273.077847][ T7224] total_swap 798720 [ 273.081750][ T7224] total_swapcached 4096 [ 273.085898][ T7224] total_pgpgin 158883 [ 273.089919][ T7224] total_pgpgout 158882 [ 273.093998][ T7224] total_pgfault 89166 [ 273.097976][ T7224] total_pgmajfault 26 [ 273.102499][ T7224] total_inactive_anon 0 [ 273.106691][ T7224] total_active_anon 4096 [ 273.110953][ T7224] total_inactive_file 0 [ 273.115301][ T7224] total_active_file 0 [ 273.119426][ T7224] total_unevictable 0 [ 273.123676][ T7224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1381,pid=7223,uid=0 [ 273.136124][ T7244] loop3: detected capacity change from 0 to 2048 [ 273.139451][ T7224] Memory cgroup out of memory: Killed process 7223 (syz.0.1381) total-vm:95796kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 273.221493][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1390'. [ 273.230591][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1390'. [ 273.253856][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.276348][ T29] audit: type=1400 audit(1746948912.526:4608): avc: denied { write } for pid=7243 comm="syz.3.1389" path="/220/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 273.328931][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.832182][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 273.854211][ T29] audit: type=1326 audit(1746948913.106:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.877796][ T29] audit: type=1326 audit(1746948913.106:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.901359][ T29] audit: type=1326 audit(1746948913.106:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.924784][ T29] audit: type=1326 audit(1746948913.106:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.948199][ T29] audit: type=1326 audit(1746948913.106:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.971612][ T29] audit: type=1326 audit(1746948913.106:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 273.995068][ T29] audit: type=1326 audit(1746948913.106:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 274.018538][ T29] audit: type=1326 audit(1746948913.106:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 274.042037][ T29] audit: type=1326 audit(1746948913.106:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36b384e969 code=0x7ffc0000 [ 277.051793][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1406'. [ 277.067202][ T7290] hsr_slave_1 (unregistering): left promiscuous mode [ 277.275386][ T7296] netlink: 'syz.3.1409': attribute type 3 has an invalid length. [ 277.510489][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 277.936489][ T7306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.348577][ T7312] bond_slave_1: mtu less than device minimum [ 280.045995][ T7327] lo speed is unknown, defaulting to 1000 [ 280.246982][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 280.247001][ T29] audit: type=1326 audit(1746948919.496:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.276767][ T29] audit: type=1326 audit(1746948919.496:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.300254][ T29] audit: type=1326 audit(1746948919.496:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.323855][ T29] audit: type=1326 audit(1746948919.496:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.347397][ T29] audit: type=1326 audit(1746948919.496:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.370944][ T29] audit: type=1326 audit(1746948919.496:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.394440][ T29] audit: type=1326 audit(1746948919.496:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.417952][ T29] audit: type=1326 audit(1746948919.496:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.441734][ T29] audit: type=1326 audit(1746948919.496:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.465145][ T29] audit: type=1326 audit(1746948919.496:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 280.690179][ T7342] loop5: detected capacity change from 0 to 128 [ 280.696905][ T7342] EXT4-fs: test_dummy_encryption option not supported [ 280.914961][ T7345] loop3: detected capacity change from 0 to 1024 [ 280.922240][ T7345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 280.932686][ T7345] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 280.943857][ T7345] jbd2_journal_init_inode: Cannot locate journal superblock [ 280.951230][ T7345] EXT4-fs (loop3): Could not load journal inode [ 280.969286][ T7345] loop3: detected capacity change from 0 to 2048 [ 281.011275][ T7345] loop3: p1 < > p3 [ 281.016011][ T7345] loop3: p3 size 134217728 extends beyond EOD, truncated [ 281.550300][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1434'. [ 281.580455][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 282.418676][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'. [ 283.464415][ T7378] loop3: detected capacity change from 0 to 512 [ 283.482894][ T7378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.495544][ T7378] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.522642][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.703979][ T7385] loop5: detected capacity change from 0 to 128 [ 283.734329][ T7385] bio_check_eod: 21 callbacks suppressed [ 283.734344][ T7385] syz.5.1444: attempt to access beyond end of device [ 283.734344][ T7385] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 283.761162][ T7385] syz.5.1444: attempt to access beyond end of device [ 283.761162][ T7385] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 284.336712][ T7391] batadv_slave_0: entered promiscuous mode [ 284.343999][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 284.353624][ T7391] batadv_slave_0 (unregistering): left promiscuous mode [ 284.360796][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.405736][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 285.405755][ T29] audit: type=1326 audit(1746948924.656:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 285.436648][ T29] audit: type=1326 audit(1746948924.656:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 285.460111][ T29] audit: type=1326 audit(1746948924.656:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 285.484146][ T29] audit: type=1326 audit(1746948924.656:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0d9e969 code=0x7ffc0000 [ 286.677536][ T7407] loop5: detected capacity change from 0 to 164 [ 286.685304][ T29] audit: type=1400 audit(1746948925.936:5403): avc: denied { mount } for pid=7406 comm="+}[@" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 286.687632][ T7407] +}[@: attempt to access beyond end of device [ 286.687632][ T7407] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 286.720641][ T7407] +}[@: attempt to access beyond end of device [ 286.720641][ T7407] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 286.752030][ T29] audit: type=1400 audit(1746948926.006:5404): avc: denied { unmount } for pid=4578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 287.307429][ T7414] ref_ctr_offset mismatch. inode: 0x6c9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x600000040 [ 287.319756][ T7414] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 287.328329][ T7414] ref_ctr decrement failed for inode: 0x6c9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888119385280 [ 287.339521][ T7414] uprobe: syz.2.1458:7414 failed to unregister, leaking uprobe [ 288.408950][ T7431] netlink: 'syz.3.1465': attribute type 13 has an invalid length. [ 288.496204][ T7431] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.504855][ T7431] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.514019][ T7431] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.522540][ T7431] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.835754][ T7437] netlink: 'syz.0.1468': attribute type 13 has an invalid length. [ 288.862695][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.872857][ T7437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.476633][ T29] audit: type=1400 audit(1746948928.726:5405): avc: denied { append } for pid=7447 comm="syz.5.1473" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.098228][ T29] audit: type=1400 audit(1746948929.346:5406): avc: denied { write } for pid=7451 comm="syz.3.1475" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 292.832301][ T29] audit: type=1400 audit(1746948932.086:5407): avc: denied { name_connect } for pid=7473 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 293.474890][ T29] audit: type=1400 audit(1746948932.726:5408): avc: denied { ioctl } for pid=7481 comm="syz.5.1488" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.436059][ T7487] loop5: detected capacity change from 0 to 256 [ 294.443484][ T7487] vfat: Unknown parameter 'uoi_xlate' [ 294.583160][ T29] audit: type=1326 audit(1746948933.836:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3f0d9e969 code=0x0 [ 295.176062][ T7494] lo speed is unknown, defaulting to 1000 [ 295.814156][ T29] audit: type=1326 audit(1746948935.066:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.838314][ T29] audit: type=1326 audit(1746948935.066:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.862599][ T29] audit: type=1326 audit(1746948935.076:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.886182][ T29] audit: type=1326 audit(1746948935.076:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.910369][ T29] audit: type=1326 audit(1746948935.076:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.933939][ T29] audit: type=1326 audit(1746948935.076:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 295.957372][ T29] audit: type=1326 audit(1746948935.076:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4489f2e969 code=0x7ffc0000 [ 296.022831][ T7508] ref_ctr_offset mismatch. inode: 0x6f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 296.074806][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 296.083758][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 296.500002][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 298.402531][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 298.402550][ T29] audit: type=1400 audit(1746948937.656:5476): avc: denied { append } for pid=7530 comm="syz.5.1508" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.418971][ T7531] lo speed is unknown, defaulting to 1000 [ 298.438477][ T29] audit: type=1400 audit(1746948937.656:5477): avc: denied { open } for pid=7530 comm="syz.5.1508" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.462795][ T29] audit: type=1400 audit(1746948937.656:5478): avc: denied { ioctl } for pid=7530 comm="syz.5.1508" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.498457][ T29] audit: type=1326 audit(1746948937.746:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.503903][ T7531] loop5: detected capacity change from 0 to 2048 [ 298.523031][ T29] audit: type=1326 audit(1746948937.746:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.552255][ T29] audit: type=1326 audit(1746948937.746:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.575693][ T29] audit: type=1326 audit(1746948937.746:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.599695][ T29] audit: type=1326 audit(1746948937.746:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.623794][ T29] audit: type=1326 audit(1746948937.746:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.647358][ T29] audit: type=1326 audit(1746948937.746:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff731fbe969 code=0x7ffc0000 [ 298.682972][ T7541] netlink: 'syz.3.1511': attribute type 5 has an invalid length. [ 298.691924][ T7531] loop5: p1 < > p4 [ 298.700663][ T7531] loop5: p4 size 8388608 extends beyond EOD, truncated [ 298.703948][ T7537] bond_slave_1: entered promiscuous mode [ 298.717925][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 298.733750][ T7537] bond0: (slave bond_slave_1): Releasing backup interface [ 298.744668][ T7537] bond_slave_1 (unregistering): left promiscuous mode [ 299.632234][ T7552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.697848][ T7552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.777595][ T7552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.908049][ T7552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.500253][ T7552] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.514800][ T7552] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.527967][ T7552] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.540007][ T7552] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.044035][ T7689] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 302.098218][ T7693] loop3: detected capacity change from 0 to 8192 [ 302.187301][ T7698] ================================================================== [ 302.195544][ T7698] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 302.201989][ T7698] [ 302.204338][ T7698] write to 0xffffc9000192fc10 of 4 bytes by task 7697 on cpu 1: [ 302.211975][ T7698] pollwake+0xb6/0x100 [ 302.216059][ T7698] __wake_up+0x63/0xb0 [ 302.220156][ T7698] ep_poll_callback+0x4fe/0x630 [ 302.225027][ T7698] __wake_up+0x63/0xb0 [ 302.229117][ T7698] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 302.234676][ T7698] __wake_up_sync_key+0x4f/0x80 [ 302.239535][ T7698] __unix_dgram_recvmsg+0x3b2/0x840 [ 302.244743][ T7698] unix_dgram_recvmsg+0x81/0x90 [ 302.249610][ T7698] sock_recvmsg_nosec+0x104/0x130 [ 302.254651][ T7698] ____sys_recvmsg+0x26f/0x280 [ 302.259425][ T7698] ___sys_recvmsg+0x11f/0x370 [ 302.264110][ T7698] do_recvmmsg+0x1ef/0x540 [ 302.268531][ T7698] __x64_sys_recvmmsg+0xe5/0x170 [ 302.273478][ T7698] x64_sys_call+0x1c6a/0x2fb0 [ 302.278166][ T7698] do_syscall_64+0xd0/0x1a0 [ 302.282689][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.288603][ T7698] [ 302.290936][ T7698] read to 0xffffc9000192fc10 of 4 bytes by task 7698 on cpu 0: [ 302.298491][ T7698] do_sys_poll+0x97b/0xbc0 [ 302.303022][ T7698] __se_sys_poll+0xdd/0x200 [ 302.307539][ T7698] __x64_sys_poll+0x43/0x50 [ 302.312053][ T7698] x64_sys_call+0x2dc4/0x2fb0 [ 302.316740][ T7698] do_syscall_64+0xd0/0x1a0 [ 302.321263][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.327165][ T7698] [ 302.329490][ T7698] value changed: 0x00000000 -> 0x00000001 [ 302.335205][ T7698] [ 302.337540][ T7698] Reported by Kernel Concurrency Sanitizer on: [ 302.343704][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.4.1530 Tainted: G W 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 302.357697][ T7698] Tainted: [W]=WARN [ 302.361510][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 302.371589][ T7698] ================================================================== SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 104: Connection reset by peer) [ 302.935337][ T3771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.944926][ T3771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.954699][ T3771] bond0 (unregistering): Released all slaves [ 303.004575][ T3771] hsr_slave_0: left promiscuous mode [ 303.010166][ T3771] hsr_slave_1: left promiscuous mode [ 303.044994][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 303.054942][ T3771] team0 (unregistering): Port device team_slave_0 removed [ 303.276044][ T3771] IPVS: stop unused estimator thread 0... [ 303.363329][ T3771] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.412133][ T3771] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.491822][ T3771] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.541622][ T3771] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.604308][ T3771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.682231][ T3771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.742222][ T3771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.781999][ T3771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.853851][ T3771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.902308][ T3771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.942081][ T3771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.991954][ T3771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.254877][ T3771] bridge_slave_1: left allmulticast mode [ 304.260543][ T3771] bridge_slave_1: left promiscuous mode [ 304.266222][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.273961][ T3771] bridge_slave_0: left allmulticast mode [ 304.279657][ T3771] bridge_slave_0: left promiscuous mode [ 304.285464][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.294190][ T3771] bridge_slave_1: left allmulticast mode [ 304.299869][ T3771] bridge_slave_1: left promiscuous mode [ 304.305673][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.313582][ T3771] bridge_slave_0: left allmulticast mode [ 304.319224][ T3771] bridge_slave_0: left promiscuous mode [ 304.324901][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.333441][ T3771] bridge_slave_1: left allmulticast mode [ 304.339096][ T3771] bridge_slave_1: left promiscuous mode [ 304.344893][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.352836][ T3771] bridge_slave_0: left promiscuous mode [ 304.358743][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.464182][ T3771] dvmrp0 (unregistering): left allmulticast mode [ 304.475535][ T3771] team0: Port device geneve1 removed [ 304.722762][ T3771]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.731786][ T3771]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.740488][ T3771]  (unregistering): Released all slaves [ 304.748651][ T3771] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.757372][ T3771] bond_slave_0: left promiscuous mode [ 304.766439][ T3771] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.775259][ T3771] bond_slave_1: left promiscuous mode [ 304.781574][ T3771] $Hÿ (unregistering): Released all slaves [ 304.790291][ T3771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.799866][ T3771] bond0 (unregistering): Released all slaves [ 304.853691][ T3771] tipc: Left network mode [ 304.858416][ T3771] tipc: Left network mode [ 304.865693][ T3771] IPVS: stopping master sync thread 6967 ... [ 304.874475][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.882937][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.890446][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.898074][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.905614][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.914970][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.922404][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.930207][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.937653][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.946230][ T3771] hsr_slave_0: left promiscuous mode [ 304.951902][ T3771] hsr_slave_1: left promiscuous mode [ 304.962056][ T3771] veth1_macvtap: left promiscuous mode [ 304.967600][ T3771] veth0_macvtap: left promiscuous mode [ 304.973597][ T3771] veth1_macvtap: left promiscuous mode [ 304.979066][ T3771] veth0_macvtap: left promiscuous mode [ 304.984661][ T3771] veth1_vlan: left promiscuous mode [ 305.051764][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 305.060835][ T3771] team0 (unregistering): Port device team_slave_0 removed [ 305.107629][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 305.117083][ T3771] team0 (unregistering): Port device team_slave_0 removed [ 305.212710][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 305.222730][ T3771] team0 (unregistering): Port device team_slave_0 removed [ 305.249446][ T10] lo speed is unknown, defaulting to 1000 [ 305.255366][ T10] infiniband syz0: ib_query_port failed (-19) [ 306.021494][ T3771] IPVS: stop unused estimator thread 0...