last executing test programs: 1.602032889s ago: executing program 1 (id=3913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.55412s ago: executing program 1 (id=3915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 1.47171028s ago: executing program 1 (id=3916): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) ioperm(0x4, 0x7cd, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) 1.031688333s ago: executing program 0 (id=3934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.031441463s ago: executing program 0 (id=3935): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x5, 0x1}, 0x10) 1.031136143s ago: executing program 0 (id=3936): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x18, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r2}}, 0x40) 1.030936833s ago: executing program 2 (id=3945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 997.297073ms ago: executing program 4 (id=3937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r1 = fsopen(0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x20000000002}, 0x18) close(r1) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 968.089963ms ago: executing program 4 (id=3938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 935.046214ms ago: executing program 2 (id=3939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 934.677834ms ago: executing program 0 (id=3940): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffffffe) 914.690514ms ago: executing program 2 (id=3941): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 914.101384ms ago: executing program 4 (id=3942): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x6, 0x1fd, {0x8, 0xa}, {0x1, 0x7}, @const={0x0, {0x1, 0x8, 0x1, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 911.203824ms ago: executing program 0 (id=3943): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0) 835.881014ms ago: executing program 2 (id=3957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 808.835904ms ago: executing program 2 (id=3949): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 634.244605ms ago: executing program 2 (id=3951): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 617.247045ms ago: executing program 1 (id=3952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 583.094536ms ago: executing program 1 (id=3953): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bind$l2tp6(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004944) preadv(0xffffffffffffffff, &(0x7f0000002400), 0x0, 0x39c5, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000dc0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x62}}, {@noauto_da_alloc}, {@bsdgroups}, {@data_journal}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) 523.197566ms ago: executing program 1 (id=3956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x1, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 523.115196ms ago: executing program 3 (id=3958): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 506.521256ms ago: executing program 3 (id=3959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8", 0x51}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 489.765666ms ago: executing program 3 (id=3960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 469.244737ms ago: executing program 3 (id=3961): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 407.504447ms ago: executing program 3 (id=3962): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 53.756109ms ago: executing program 0 (id=3963): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) ioperm(0x4, 0x7cd, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) 53.598819ms ago: executing program 3 (id=3964): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 53.424799ms ago: executing program 4 (id=3965): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x4) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) 29.106599ms ago: executing program 4 (id=3966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, {0x14, 0x1, 0x0, @local}}}, 0x2a) 0s ago: executing program 4 (id=3967): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1, 0x1, 0x3, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r4}, 0x10) kernel console output (not intermixed with test programs): 400 audit(1762118105.508:762): avc: denied { append } for pid=5523 comm="syz.1.836" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.014612][ T5526] SELinux: failed to load policy [ 55.049919][ T29] audit: type=1400 audit(1762118105.638:763): avc: denied { relabelfrom } for pid=5531 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.070248][ T29] audit: type=1400 audit(1762118105.638:764): avc: denied { relabelto } for pid=5531 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.101352][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 55.110145][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 55.128518][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 55.153477][ T5537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 55.187975][ T5539] loop0: detected capacity change from 0 to 512 [ 55.194397][ T5528] loop3: detected capacity change from 0 to 32768 [ 55.203962][ T5539] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.843: error while reading EA inode 32 err=-116 [ 55.238597][ T5539] EXT4-fs (loop0): Remounting filesystem read-only [ 55.245107][ T5539] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 55.269700][ T5539] EXT4-fs (loop0): 1 orphan inode deleted [ 55.277442][ T5539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.329193][ T5539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.390660][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 55.402239][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 55.610465][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 55.619321][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 55.628899][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 55.665375][ T29] audit: type=1400 audit(1762118106.248:765): avc: denied { relabelfrom } for pid=5580 comm="syz.2.862" name="NETLINK" dev="sockfs" ino=11403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.690386][ T29] audit: type=1400 audit(1762118106.248:766): avc: denied { relabelto } for pid=5580 comm="syz.2.862" name="NETLINK" dev="sockfs" ino=11403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 55.735921][ T5587] netlink: 'syz.1.867': attribute type 4 has an invalid length. [ 55.764000][ T29] audit: type=1400 audit(1762118106.338:767): avc: denied { ioctl } for pid=5589 comm="syz.0.868" path="socket:[11421]" dev="sockfs" ino=11421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.338537][ T4429] Bluetooth: hci0: command 0x1003 tx timeout [ 56.344632][ T3758] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.730967][ T5633] loop2: detected capacity change from 0 to 512 [ 56.758127][ T5633] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.882: inode #196608: comm syz.2.882: iget: illegal inode # [ 56.773468][ T5633] EXT4-fs (loop2): Remounting filesystem read-only [ 56.780057][ T5633] EXT4-fs (loop2): no journal found [ 56.785265][ T5633] EXT4-fs (loop2): can't get journal size [ 56.792559][ T5633] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 56.816285][ T5633] EXT4-fs (loop2): failed to initialize system zone (-22) [ 56.825869][ T5633] EXT4-fs (loop2): mount failed [ 56.844355][ T29] audit: type=1400 audit(1762118107.418:768): avc: denied { setopt } for pid=5643 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.875045][ T5646] netlink: 96 bytes leftover after parsing attributes in process `syz.4.890'. [ 56.895974][ T5633] batadv1: left allmulticast mode [ 56.901466][ T5641] SELinux: failed to load policy [ 56.906593][ T5633] batadv1: left promiscuous mode [ 56.911646][ T5633] bridge0: port 3(batadv1) entered disabled state [ 56.939815][ T5633] bridge_slave_1: left allmulticast mode [ 56.945461][ T5633] bridge_slave_1: left promiscuous mode [ 56.951201][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.968038][ T5633] bridge_slave_0: left promiscuous mode [ 56.973896][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.032654][ T5658] serio: Serial port ttyS3 [ 57.413679][ T5715] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 57.651230][ T5719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.660691][ T5719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.839588][ T5755] loop4: detected capacity change from 0 to 512 [ 57.878667][ T5755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.891475][ T5755] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.940: bad orphan inode 13 [ 57.908685][ T5755] ext4_test_bit(bit=12, block=18) = 1 [ 57.914086][ T5755] is_bad_inode(inode)=0 [ 57.918231][ T5755] NEXT_ORPHAN(inode)=2130706432 [ 57.923759][ T5755] max_ino=32 [ 57.926959][ T5755] i_nlink=1 [ 57.934938][ T5758] xfrm1: entered promiscuous mode [ 57.940196][ T5758] xfrm1: entered allmulticast mode [ 57.945991][ T5755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.964774][ T5755] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 58.016641][ T5766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5766 comm=syz.3.943 [ 58.038735][ T5755] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.062182][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.148668][ T3394] IPVS: starting estimator thread 0... [ 58.177435][ T5790] hub 1-0:1.0: USB hub found [ 58.185020][ T5790] hub 1-0:1.0: 8 ports detected [ 58.255560][ T5786] IPVS: using max 2544 ests per chain, 127200 per kthread [ 58.384359][ T5808] pim6reg: entered allmulticast mode [ 58.401497][ T5808] pim6reg: left allmulticast mode [ 58.558283][ T5829] loop3: detected capacity change from 0 to 512 [ 58.568293][ T5829] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.575169][ T5829] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.970: EA inode hash validation failed [ 58.588551][ T5829] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.632546][ T5829] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.970: corrupted inode contents [ 58.659885][ T5836] loop2: detected capacity change from 0 to 512 [ 58.666359][ T5829] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.970: mark_inode_dirty error [ 58.683160][ T5836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.693508][ T5829] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.970: corrupted inode contents [ 58.694598][ T5836] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.973: Invalid block bitmap block 0 in block_group 0 [ 58.718830][ T5836] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 58.727867][ T5829] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.970: mark_inode_dirty error [ 58.728294][ T5836] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.973: attempt to clear invalid blocks 983261 len 1 [ 58.753404][ T5836] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.973: Invalid inode table block 0 in block_group 0 [ 58.766200][ T5829] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.970: mark inode dirty (error -117) [ 58.766300][ T5836] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.788324][ T5836] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 58.797735][ T5836] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.973: Invalid inode table block 0 in block_group 0 [ 58.797780][ T5829] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 58.797814][ T5829] EXT4-fs (loop3): 1 orphan inode deleted [ 58.798101][ T5829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.810814][ T5836] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.841953][ T5836] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.973: mark_inode_dirty error [ 58.858183][ T5836] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 58.867430][ T5836] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.973: Invalid inode table block 0 in block_group 0 [ 58.880289][ T5836] EXT4-fs (loop2): 1 truncate cleaned up [ 58.880452][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.886489][ T5836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.931753][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 58.931765][ T29] audit: type=1400 audit(1762118109.518:848): avc: denied { remount } for pid=5835 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.968830][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.272351][ T29] audit: type=1400 audit(1762118109.858:849): avc: denied { cmd } for pid=5867 comm="syz.2.985" path="socket:[12846]" dev="sockfs" ino=12846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.315945][ T5871] loop2: detected capacity change from 0 to 1024 [ 59.323527][ T5871] EXT4-fs: inline encryption not supported [ 59.360134][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.375765][ T5871] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.986: Allocating blocks 385-513 which overlap fs metadata [ 59.392310][ T5871] EXT4-fs (loop2): pa ffff8881071a51c0: logic 16, phys. 129, len 24 [ 59.400397][ T5871] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 59.410805][ T5871] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 59.423081][ T5871] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.423081][ T5871] [ 59.432706][ T5871] EXT4-fs (loop2): Total free blocks count 0 [ 59.438691][ T5871] EXT4-fs (loop2): Free/Dirty block details [ 59.444569][ T5871] EXT4-fs (loop2): free_blocks=128 [ 59.449721][ T5871] EXT4-fs (loop2): dirty_blocks=0 [ 59.454730][ T5871] EXT4-fs (loop2): Block reservation details [ 59.460743][ T5871] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 59.885984][ T5895] loop4: detected capacity change from 0 to 512 [ 59.894448][ T5895] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.994: corrupted in-inode xattr: invalid ea_ino [ 59.894654][ T5895] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.994: couldn't read orphan inode 15 (err -117) [ 60.158807][ T5910] loop3: detected capacity change from 0 to 1024 [ 60.159276][ T5910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.219463][ T29] audit: type=1400 audit(1762118110.808:850): avc: denied { map } for pid=5909 comm="syz.3.1000" path="/216/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.374655][ T29] audit: type=1400 audit(1762118110.958:851): avc: denied { getopt } for pid=5923 comm="syz.2.1005" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.441362][ T61] Bluetooth: hci2: Frame reassembly failed (-84) [ 60.527796][ T29] audit: type=1326 audit(1762118111.108:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 60.551165][ T29] audit: type=1326 audit(1762118111.108:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 60.575297][ T29] audit: type=1326 audit(1762118111.158:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 60.599277][ T29] audit: type=1326 audit(1762118111.158:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 60.673982][ T3420] hid_parser_main: 8 callbacks suppressed [ 60.673999][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 60.687405][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 60.695271][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 60.705922][ T3420] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 60.738687][ T5927] Bluetooth: hci0: command 0x1003 tx timeout [ 60.744783][ T3758] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.898480][ T4429] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 60.899121][ T3758] Bluetooth: hci1: command 0x1003 tx timeout [ 61.136075][ T5952] __nla_validate_parse: 11 callbacks suppressed [ 61.136116][ T5952] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1017'. [ 61.264515][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 61.274123][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1023'. [ 61.304264][ T29] audit: type=1326 audit(1762118111.888:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 61.328220][ T29] audit: type=1326 audit(1762118111.888:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 61.357768][ T5970] loop4: detected capacity change from 0 to 512 [ 61.368768][ T5970] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1025: inode has both inline data and extents flags [ 61.384860][ T5970] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1025: couldn't read orphan inode 15 (err -117) [ 61.405159][ T5975] loop0: detected capacity change from 0 to 512 [ 61.415937][ T5975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.427997][ T5978] loop3: detected capacity change from 0 to 1024 [ 61.435343][ T5975] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1027: bad orphan inode 13 [ 61.445646][ T5975] ext4_test_bit(bit=12, block=18) = 1 [ 61.451061][ T5975] is_bad_inode(inode)=0 [ 61.455348][ T5975] NEXT_ORPHAN(inode)=2130706432 [ 61.460237][ T5975] max_ino=32 [ 61.463418][ T5975] i_nlink=1 [ 61.467525][ T5978] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.490941][ T5975] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 61.518850][ T5975] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.554933][ T5987] tipc: Started in network mode [ 61.559913][ T5987] tipc: Node identity ac14140f, cluster identity 4711 [ 61.566993][ T5987] tipc: New replicast peer: 255.255.255.255 [ 61.573860][ T5987] tipc: Enabled bearer , priority 10 [ 61.581010][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 61.589993][ T5987] tipc: Disabling bearer [ 61.661204][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 61.694001][ T6010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6010 comm=syz.4.1039 [ 61.965786][ T6043] netem: change failed [ 61.984503][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 62.108761][ T6065] pim6reg1: entered promiscuous mode [ 62.114084][ T6065] pim6reg1: entered allmulticast mode [ 62.165929][ T6072] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 62.178132][ T6072] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 62.190165][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 62.219450][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.226703][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.267862][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.279331][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.294599][ T6075] loop1: detected capacity change from 0 to 1024 [ 62.301267][ T6075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.329135][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.338122][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.347021][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.378462][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.498563][ T4429] Bluetooth: hci2: command 0x1003 tx timeout [ 62.499205][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 62.526374][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 62.551557][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 62.560593][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.568017][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.764638][ T6107] loop0: detected capacity change from 0 to 2048 [ 62.807534][ T6107] SELinux: ebitmap: truncated map [ 62.814778][ T6107] SELinux: failed to load policy [ 62.842398][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.952874][ T6121] macvlan1: entered promiscuous mode [ 62.959001][ T6121] ipvlan0: entered promiscuous mode [ 62.964603][ T6121] ipvlan0: left promiscuous mode [ 62.969760][ T6121] macvlan1: left promiscuous mode [ 63.352957][ T6141] loop2: detected capacity change from 0 to 1024 [ 63.367515][ T6141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.464273][ T6147] loop2: detected capacity change from 0 to 1024 [ 63.520172][ T6147] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.646823][ T6157] xt_connbytes: Forcing CT accounting to be enabled [ 63.671277][ T6157] Cannot find set identified by id 0 to match [ 63.731410][ T6163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6163 comm=syz.2.1102 [ 64.199096][ T6184] loop1: detected capacity change from 0 to 1024 [ 64.221223][ T6186] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1112'. [ 64.233265][ T6184] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.249078][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 64.249092][ T29] audit: type=1326 audit(1762118114.838:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 64.279412][ T29] audit: type=1326 audit(1762118114.838:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 64.302717][ T29] audit: type=1326 audit(1762118114.838:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 64.326125][ T29] audit: type=1326 audit(1762118114.838:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x0 [ 64.596066][ T29] audit: type=1326 audit(1762118115.178:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.620023][ T29] audit: type=1326 audit(1762118115.178:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.647054][ T29] audit: type=1326 audit(1762118115.178:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.670725][ T29] audit: type=1326 audit(1762118115.178:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.694091][ T29] audit: type=1326 audit(1762118115.178:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.717731][ T29] audit: type=1326 audit(1762118115.178:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 64.898494][ T5845] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.932918][ T6229] loop0: detected capacity change from 0 to 1024 [ 64.949775][ T6229] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.299025][ T6272] loop4: detected capacity change from 0 to 1024 [ 65.322508][ T6272] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.033940][ T6340] batadv2: entered promiscuous mode [ 66.837646][ T6408] __nla_validate_parse: 7 callbacks suppressed [ 66.837723][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 66.890825][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 66.901058][ T6413] batadv1: left allmulticast mode [ 66.906096][ T6413] batadv1: left promiscuous mode [ 66.911468][ T6413] bridge0: port 3(batadv1) entered disabled state [ 66.920204][ T6413] bridge_slave_1: left allmulticast mode [ 66.925861][ T6413] bridge_slave_1: left promiscuous mode [ 66.932144][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.976764][ T6413] bridge_slave_0: left allmulticast mode [ 66.982451][ T6413] bridge_slave_0: left promiscuous mode [ 66.988218][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.634314][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1235'. [ 67.782285][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 67.792008][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 67.831007][ T6477] lo: Caught tx_queue_len zero misconfig [ 67.836720][ T6477] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 68.001299][ T6493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6493 comm=syz.0.1250 [ 68.165119][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 68.179033][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 68.179270][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 68.214269][ T6505] batadv1: left allmulticast mode [ 68.220209][ T6505] batadv1: left promiscuous mode [ 68.225355][ T6505] bridge0: port 3(batadv1) entered disabled state [ 68.232763][ T6505] bridge_slave_1: left allmulticast mode [ 68.238409][ T6505] bridge_slave_1: left promiscuous mode [ 68.244217][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.252405][ T6505] bridge_slave_0: left allmulticast mode [ 68.258051][ T6505] bridge_slave_0: left promiscuous mode [ 68.263942][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.652220][ T6547] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 68.670125][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.692169][ T6547] bond0: (slave team0): Enslaving as an active interface with an up link [ 68.747719][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 69.123006][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 69.599081][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 69.599094][ T29] audit: type=1400 audit(1762118120.188:1250): avc: denied { watch } for pid=6643 comm="syz.0.1319" path="/226/file0" dev="tmpfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.679787][ T6648] geneve2: entered promiscuous mode [ 69.685027][ T6648] geneve2: entered allmulticast mode [ 69.716703][ T29] audit: type=1400 audit(1762118120.288:1251): avc: denied { map } for pid=6646 comm="syz.0.1320" path="socket:[15072]" dev="sockfs" ino=15072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.740653][ T29] audit: type=1400 audit(1762118120.288:1252): avc: denied { read } for pid=6646 comm="syz.0.1320" path="socket:[15072]" dev="sockfs" ino=15072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.873679][ T6658] pimreg: entered allmulticast mode [ 69.876257][ T29] audit: type=1400 audit(1762118120.448:1253): avc: denied { watch_reads } for pid=6655 comm="syz.4.1325" path="/245/file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.910199][ T6658] pimreg: left allmulticast mode [ 69.954775][ T6661] netlink: 'syz.4.1328': attribute type 12 has an invalid length. [ 70.188589][ T29] audit: type=1400 audit(1762118120.748:1254): avc: denied { create } for pid=6681 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.208751][ T29] audit: type=1400 audit(1762118120.748:1255): avc: denied { bind } for pid=6681 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.399578][ T6706] xt_hashlimit: max too large, truncated to 1048576 [ 70.432086][ T6716] macvtap0: refused to change device tx_queue_len [ 70.556090][ T6733] atomic_op ffff88812e86fd28 conn xmit_atomic 0000000000000000 [ 70.987519][ T6758] netlink: 'syz.0.1379': attribute type 12 has an invalid length. [ 71.151888][ T6774] pimreg: entered allmulticast mode [ 71.178624][ T6774] pimreg: left allmulticast mode [ 71.303533][ T29] audit: type=1326 audit(1762118121.888:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 71.327615][ T29] audit: type=1326 audit(1762118121.888:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 71.351764][ T29] audit: type=1326 audit(1762118121.888:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 71.375262][ T29] audit: type=1326 audit(1762118121.888:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 71.509894][ T6811] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 72.133679][ T6856] __nla_validate_parse: 10 callbacks suppressed [ 72.133696][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1414'. [ 72.185155][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 72.323927][ T6866] bond0: Caught tx_queue_len zero misconfig [ 73.058255][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 73.067230][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 73.443256][ T6946] geneve3: entered promiscuous mode [ 73.448545][ T6946] geneve3: entered allmulticast mode [ 73.895869][ T6984] xt_connbytes: Forcing CT accounting to be enabled [ 73.904554][ T6984] set match dimension is over the limit! [ 73.974398][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1468'. [ 74.007827][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 74.150231][ T6989] futex_wake_op: syz.0.1469 tries to shift op by 144; fix this program [ 74.409365][ T7000] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 74.584650][ T7015] geneve2: entered promiscuous mode [ 74.589974][ T7015] geneve2: entered allmulticast mode [ 74.753297][ T7038] xt_connbytes: Forcing CT accounting to be enabled [ 74.798311][ T7038] Cannot find set identified by id 0 to match [ 74.805642][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 74.805656][ T29] audit: type=1400 audit(1762118125.388:1363): avc: denied { create } for pid=7042 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.865016][ T29] audit: type=1400 audit(1762118125.388:1364): avc: denied { connect } for pid=7042 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.884809][ T29] audit: type=1400 audit(1762118125.388:1365): avc: denied { ioctl } for pid=7042 comm="syz.1.1496" path="socket:[21324]" dev="sockfs" ino=21324 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.948357][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 74.972524][ T7055] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1501'. [ 75.040227][ T29] audit: type=1326 audit(1762118125.628:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.067566][ T7059] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1503'. [ 75.117630][ T29] audit: type=1326 audit(1762118125.628:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.141116][ T29] audit: type=1326 audit(1762118125.668:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.164706][ T29] audit: type=1326 audit(1762118125.668:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.188318][ T29] audit: type=1326 audit(1762118125.668:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.211858][ T29] audit: type=1326 audit(1762118125.668:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.235283][ T29] audit: type=1326 audit(1762118125.668:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 75.375602][ T7081] netlink: 'syz.1.1512': attribute type 10 has an invalid length. [ 76.045666][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 76.084147][ T7142] 9pnet_fd: Insufficient options for proto=fd [ 77.127067][ T7192] capability: warning: `syz.3.1558' uses deprecated v2 capabilities in a way that may be insecure [ 77.946687][ T7252] __nla_validate_parse: 2 callbacks suppressed [ 77.946781][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1583'. [ 78.422749][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1599'. [ 78.525512][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7297 comm=syz.2.1604 [ 78.749429][ T7322] xt_connbytes: Forcing CT accounting to be enabled [ 78.765442][ T7322] set match dimension is over the limit! [ 79.159835][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 79.403935][ T7364] netlink: 'syz.2.1628': attribute type 16 has an invalid length. [ 79.411939][ T7364] netlink: 'syz.2.1628': attribute type 3 has an invalid length. [ 79.419700][ T7364] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1628'. [ 79.728077][ T7400] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 80.132438][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 80.150101][ T7415] hsr_slave_0: left promiscuous mode [ 80.156090][ T7415] hsr_slave_1: left promiscuous mode [ 80.214326][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 80.214341][ T29] audit: type=1326 audit(1762118130.788:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.243950][ T29] audit: type=1326 audit(1762118130.788:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.267382][ T29] audit: type=1326 audit(1762118130.788:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.290791][ T29] audit: type=1326 audit(1762118130.788:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.314184][ T29] audit: type=1326 audit(1762118130.798:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.337581][ T29] audit: type=1326 audit(1762118130.798:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.361151][ T29] audit: type=1326 audit(1762118130.798:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.384522][ T29] audit: type=1326 audit(1762118130.798:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.464293][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'. [ 80.543218][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'. [ 80.598457][ T29] audit: type=1326 audit(1762118131.178:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 80.622358][ T29] audit: type=1326 audit(1762118131.178:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 81.413539][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1686'. [ 81.742475][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1697'. [ 82.889498][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 82.920201][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1739'. [ 83.020320][ T7638] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 83.043038][ T7638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.067547][ T7638] bond1: (slave veth9): Enslaving as an active interface with a down link [ 83.086749][ T7638] bond1: (slave dummy0): making interface the new active one [ 83.096009][ T7638] dummy0: entered promiscuous mode [ 83.108540][ T7638] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 83.367790][ T7678] tipc: Failed to remove unknown binding: 66,1,1/0:2899899862/2899899864 [ 83.491323][ T7691] tipc: Failed to remove unknown binding: 66,1,1/0:3073751975/3073751977 [ 83.513621][ T7691] tipc: Failed to remove unknown binding: 66,1,1/0:3073751975/3073751977 [ 83.522093][ T7691] tipc: Failed to remove unknown binding: 66,1,1/0:3073751975/3073751977 [ 83.608237][ T7703] atomic_op ffff88810bf01d28 conn xmit_atomic 0000000000000000 [ 83.648602][ T7711] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1776'. [ 83.657747][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 83.671775][ T7713] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 83.685523][ T7713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.719256][ T7713] bond2: (slave veth9): Enslaving as an active interface with a down link [ 83.736261][ T7713] bond2: (slave dummy0): making interface the new active one [ 83.744760][ T7713] dummy0: entered promiscuous mode [ 83.750059][ T7713] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 83.970271][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 84.128983][ T7757] infiniband syz2: set down [ 84.133528][ T7757] infiniband syz2: added bond0 [ 84.144733][ T7757] RDS/IB: syz2: added [ 84.148791][ T7757] smc: adding ib device syz2 with port count 1 [ 84.154971][ T7757] smc: ib device syz2 port 1 has no pnetid [ 84.456076][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 85.121214][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 85.130213][ T7819] netlink: 'syz.0.1826': attribute type 30 has an invalid length. [ 85.148303][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.156576][ T52] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.174922][ T52] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.195160][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.219092][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 85.219105][ T29] audit: type=1326 audit(1762118135.808:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 85.268754][ T29] audit: type=1326 audit(1762118135.848:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 85.335118][ T29] audit: type=1326 audit(1762118135.858:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 85.336411][ T7839] pim6reg: entered allmulticast mode [ 85.359093][ T29] audit: type=1326 audit(1762118135.878:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 85.387119][ T29] audit: type=1326 audit(1762118135.898:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 85.397566][ T7839] pim6reg: left allmulticast mode [ 85.411186][ T29] audit: type=1326 audit(1762118135.898:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 85.439543][ T29] audit: type=1326 audit(1762118135.898:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 85.622489][ T7865] macvtap1: entered promiscuous mode [ 85.627818][ T7865] macvtap1: entered allmulticast mode [ 85.633704][ T7865] dummy0: entered allmulticast mode [ 85.639050][ T7865] dummy0: entered promiscuous mode [ 85.645147][ T7865] team0: Device macvtap1 failed to register rx_handler [ 85.658409][ T7865] dummy0: left allmulticast mode [ 85.663666][ T7865] dummy0: left promiscuous mode [ 85.680248][ T7867] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1846'. [ 85.761103][ T29] audit: type=1400 audit(1762118136.328:1816): avc: denied { setopt } for pid=7874 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.816779][ T7884] tipc: Failed to remove unknown binding: 66,1,1/0:552277969/552277971 [ 86.010786][ T7917] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.101651][ T29] audit: type=1400 audit(1762118136.688:1817): avc: denied { setattr } for pid=7933 comm="syz.0.1874" name="/" dev="configfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.221646][ T29] audit: type=1326 audit(1762118136.808:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc871f1efc9 code=0x0 [ 86.618852][ T7883] tipc: Failed to remove unknown binding: 66,1,1/0:552277969/552277971 [ 86.627120][ T7883] tipc: Failed to remove unknown binding: 66,1,1/0:552277969/552277971 [ 87.510867][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 87.524408][ T8013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.699426][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 88.737304][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 88.761420][ T8088] netlink: 'syz.2.1936': attribute type 83 has an invalid length. [ 89.136224][ T8139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8139 comm=syz.0.1960 [ 89.152835][ T8143] tunl0: Caught tx_queue_len zero misconfig [ 89.158803][ T8143] sch_fq: defrate 0 ignored. [ 89.346630][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 89.360991][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 89.406085][ T8183] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 89.423772][ T8182] netlink: 'syz.0.1980': attribute type 12 has an invalid length. [ 89.818587][ T8224] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 89.855026][ T8228] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 16 [ 89.897843][ T8236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8236 comm=syz.1.2010 [ 90.116260][ T8276] vlan2: entered allmulticast mode [ 90.121489][ T8276] dummy0: entered allmulticast mode [ 90.266060][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 90.275128][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2026'. [ 90.284231][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 90.307220][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2026'. [ 90.316225][ T8285] netlink: 'syz.0.2026': attribute type 6 has an invalid length. [ 90.448042][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2036'. [ 90.987170][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 90.987258][ T29] audit: type=1400 audit(1762118141.568:2725): avc: denied { read } for pid=8328 comm="syz.2.2045" path="socket:[33872]" dev="sockfs" ino=33872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.373784][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 91.400684][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 91.512613][ T8382] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 91.585201][ T29] audit: type=1400 audit(1762118142.168:2726): avc: denied { listen } for pid=8390 comm="syz.4.2068" path=2F3336362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 91.974913][ T29] audit: type=1326 audit(1762118142.558:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 91.999107][ T29] audit: type=1326 audit(1762118142.568:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.022413][ T29] audit: type=1326 audit(1762118142.568:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.046533][ T29] audit: type=1326 audit(1762118142.568:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.069961][ T29] audit: type=1326 audit(1762118142.568:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.093945][ T29] audit: type=1326 audit(1762118142.568:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.117302][ T29] audit: type=1326 audit(1762118142.568:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 92.141306][ T29] audit: type=1326 audit(1762118142.568:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 93.067296][ T8535] bridge0: port 1(batadv0) entered blocking state [ 93.073924][ T8535] bridge0: port 1(batadv0) entered disabled state [ 93.090223][ T8535] batadv0: entered allmulticast mode [ 93.096118][ T8535] batadv0: entered promiscuous mode [ 93.216599][ T8542] netlink: 'syz.2.2139': attribute type 7 has an invalid length. [ 93.230511][ T8542] netlink: 'syz.2.2139': attribute type 7 has an invalid length. [ 93.238311][ T61] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.248829][ T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.257004][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.265930][ T61] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.536210][ T8579] syzkaller0: entered allmulticast mode [ 93.547866][ T8579] syzkaller0 (unregistering): left allmulticast mode [ 93.568467][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 93.577699][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.169258][ T31] dummy0: left promiscuous mode [ 94.457978][ T8653] veth1_to_batadv: entered promiscuous mode [ 94.460563][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 94.478954][ T8653] batadv_slave_0: entered promiscuous mode [ 94.501976][ T8653] hsr1: Slave A (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network [ 94.512838][ T8653] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.527769][ T8659] __nla_validate_parse: 3 callbacks suppressed [ 94.527780][ T8659] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2191'. [ 94.555906][ T8653] hsr1: entered promiscuous mode [ 94.850728][ T59] dummy0: left promiscuous mode [ 95.460885][ T8759] netlink: 'syz.0.2235': attribute type 1 has an invalid length. [ 95.476374][ T8759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.491931][ T8759] bond2: (slave dummy0): making interface the new active one [ 95.500663][ T8759] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 95.513270][ T8759] netlink: 'syz.0.2235': attribute type 10 has an invalid length. [ 95.521148][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2235'. [ 95.530256][ T8759] dummy0: entered promiscuous mode [ 95.536076][ T8759] bond2: (slave dummy0): Releasing active interface [ 95.550090][ T8768] veth1_to_batadv: entered promiscuous mode [ 95.563076][ T8768] batadv_slave_0: entered promiscuous mode [ 95.569047][ T8768] batadv_slave_0: left promiscuous mode [ 95.579185][ T8768] veth1_to_batadv: left promiscuous mode [ 95.682841][ T8787] : renamed from vlan0 [ 95.743995][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 95.754659][ T8796] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.801105][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 95.811092][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2257'. [ 95.840360][ T8796] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.941683][ T8796] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.002946][ T8796] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.074802][ T42] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.086525][ T61] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.102997][ T42] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.138453][ T42] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.751787][ T8853] capability: warning: `syz.0.2278' uses 32-bit capabilities (legacy support in use) [ 96.802417][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 96.802431][ T29] audit: type=1400 audit(1762118147.388:2828): avc: denied { mounton } for pid=8852 comm="syz.0.2278" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.987786][ T29] audit: type=1326 audit(1762118147.568:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.036545][ T29] audit: type=1326 audit(1762118147.568:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.060126][ T29] audit: type=1326 audit(1762118147.578:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.083535][ T29] audit: type=1326 audit(1762118147.578:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.107163][ T29] audit: type=1326 audit(1762118147.578:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.130623][ T29] audit: type=1326 audit(1762118147.578:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.154041][ T29] audit: type=1326 audit(1762118147.608:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbdae0f003 code=0x7ffc0000 [ 97.177455][ T29] audit: type=1326 audit(1762118147.608:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbdae0f003 code=0x7ffc0000 [ 97.200725][ T29] audit: type=1326 audit(1762118147.608:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 97.516485][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 97.525737][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.533160][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.555114][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.562563][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.833488][ T8908] netlink: 'syz.0.2301': attribute type 27 has an invalid length. [ 97.852484][ T8910] vlan2: entered allmulticast mode [ 97.862456][ T8910] dummy0: entered allmulticast mode [ 97.873789][ T8908] dummy0: left promiscuous mode [ 97.878955][ T8908] xfrm1: left promiscuous mode [ 97.883742][ T8908] xfrm1: left allmulticast mode [ 97.893631][ T31] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.913803][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.922049][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.936902][ T8908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.952516][ T31] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.962913][ T31] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.974121][ T31] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.358729][ T8945] netlink: 'syz.2.2318': attribute type 27 has an invalid length. [ 98.373172][ T31] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.387877][ T31] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.401963][ T31] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.421769][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.429897][ T8945] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.449224][ T8945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.464925][ T31] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.491193][ T8957] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 98.545491][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2328'. [ 98.582668][ T8967] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 98.596609][ T8967] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 98.659536][ T8986] netlink: 'syz.1.2336': attribute type 27 has an invalid length. [ 98.718338][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.726181][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.735890][ T8986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.105875][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 99.115485][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'. [ 99.226236][ T9039] tipc: Started in network mode [ 99.231202][ T9039] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.240478][ T9039] tipc: Enabling of bearer rejected, failed to enable media [ 99.326622][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2362'. [ 100.232913][ T9139] __nla_validate_parse: 1 callbacks suppressed [ 100.232927][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'. [ 100.278433][ T9139] IPVS: Error connecting to the multicast addr [ 100.590496][ T9150] netlink: 'syz.0.2378': attribute type 3 has an invalid length. [ 101.008617][ T9181] netlink: 'syz.4.2391': attribute type 27 has an invalid length. [ 101.154047][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.163125][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.173425][ T9187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.188946][ T9111] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.198510][ T9111] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.209040][ T9111] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.218085][ T9111] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.304195][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 101.332379][ T9204] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 101.343508][ T9204] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 101.376170][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 101.385288][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 101.484246][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2410'. [ 101.579187][ T9231] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2411'. [ 101.863162][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 101.863178][ T29] audit: type=1326 audit(1762118152.448:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 101.893439][ T29] audit: type=1326 audit(1762118152.448:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 101.916828][ T29] audit: type=1326 audit(1762118152.448:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 101.940948][ T29] audit: type=1326 audit(1762118152.448:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 101.964327][ T29] audit: type=1326 audit(1762118152.448:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 101.988043][ T29] audit: type=1326 audit(1762118152.448:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 102.011760][ T29] audit: type=1326 audit(1762118152.448:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 102.035109][ T29] audit: type=1326 audit(1762118152.448:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 102.058876][ T29] audit: type=1326 audit(1762118152.448:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 102.082254][ T29] audit: type=1326 audit(1762118152.448:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 102.187970][ T9279] netlink: 'syz.3.2436': attribute type 27 has an invalid length. [ 102.203377][ T9279] hsr1: left promiscuous mode [ 102.223434][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.231333][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.239741][ T9279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.284821][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2439'. [ 102.308741][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2440'. [ 102.353095][ T9292] bridge: RTM_NEWNEIGH with invalid ether address [ 102.480005][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 102.497510][ T9306] bridge_slave_1: Caught tx_queue_len zero misconfig [ 103.454021][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2463'. [ 103.714984][ T9369] netem: unknown loss type 13 [ 103.720459][ T9369] netem: change failed [ 104.594865][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.603625][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.612519][ T9443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.856538][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.864994][ T9481] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.877744][ T9481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.403457][ T9588] netlink: 'syz.4.2568': attribute type 13 has an invalid length. [ 105.486157][ T9594] tipc: Started in network mode [ 105.491517][ T9594] tipc: Node identity ac14140f, cluster identity 4711 [ 105.498735][ T9594] tipc: New replicast peer: 255.255.255.255 [ 105.504780][ T9594] tipc: Enabled bearer , priority 10 [ 105.862371][ T9620] __nla_validate_parse: 20 callbacks suppressed [ 105.862388][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2582'. [ 106.351050][ T9655] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2597'. [ 106.493481][ T9662] 9pnet_fd: Insufficient options for proto=fd [ 106.628535][ T1036] tipc: Node number set to 2886997007 [ 106.679570][ T9685] vlan2: entered allmulticast mode [ 106.684790][ T9685] bridge_slave_0: entered allmulticast mode [ 107.346967][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 107.346981][ T29] audit: type=1326 audit(1762118157.928:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.381102][ T29] audit: type=1326 audit(1762118157.928:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.405086][ T29] audit: type=1326 audit(1762118157.928:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.429161][ T29] audit: type=1326 audit(1762118157.928:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.452625][ T29] audit: type=1326 audit(1762118157.928:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.476390][ T29] audit: type=1326 audit(1762118157.928:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.500186][ T29] audit: type=1326 audit(1762118157.938:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.523534][ T29] audit: type=1326 audit(1762118157.938:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.547416][ T29] audit: type=1326 audit(1762118157.938:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 107.571266][ T29] audit: type=1326 audit(1762118157.938:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa931d1d717 code=0x7ffc0000 [ 107.702407][ T9744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9744 comm=syz.1.2636 [ 107.714930][ T9744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9744 comm=syz.1.2636 [ 107.729252][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 108.325914][ T9824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9824 comm=syz.0.2668 [ 108.384760][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 108.420666][ T9828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2680'. [ 108.463546][ T9835] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2673'. [ 108.474699][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2672'. [ 109.034199][ T9894] netlink: 'syz.1.2700': attribute type 13 has an invalid length. [ 109.310390][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 109.358819][ T9921] netlink: 'syz.2.2712': attribute type 13 has an invalid length. [ 109.583426][ T9939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9939 comm=syz.2.2720 [ 109.979916][ T9984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2739'. [ 110.053742][ T9997] ip6gre1: entered allmulticast mode [ 110.109829][T10009] geneve3: entered promiscuous mode [ 110.115121][T10009] geneve3: entered allmulticast mode [ 110.457908][T10031] netlink: 'syz.0.2759': attribute type 13 has an invalid length. [ 110.578978][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 110.714702][T10075] netlink: 'syz.3.2781': attribute type 13 has an invalid length. [ 111.104070][T10082] Set syz1 is full, maxelem 65536 reached [ 111.235695][T10114] sctp: [Deprecated]: syz.4.2799 (pid 10114) Use of int in max_burst socket option. [ 111.235695][T10114] Use struct sctp_assoc_value instead [ 111.326424][T10124] netlink: 'syz.2.2803': attribute type 13 has an invalid length. [ 111.354603][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'. [ 112.044879][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2837'. [ 112.487985][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 112.488011][ T29] audit: type=1326 audit(1762118163.068:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.519001][ T29] audit: type=1326 audit(1762118163.068:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.543219][ T29] audit: type=1326 audit(1762118163.108:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.566783][ T29] audit: type=1326 audit(1762118163.108:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.590377][ T29] audit: type=1326 audit(1762118163.108:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.613836][ T29] audit: type=1326 audit(1762118163.108:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.637479][ T29] audit: type=1326 audit(1762118163.108:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.661005][ T29] audit: type=1326 audit(1762118163.108:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.684727][ T29] audit: type=1326 audit(1762118163.108:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 112.708222][ T29] audit: type=1326 audit(1762118163.108:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.2.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 113.232065][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 113.377645][T10306] netlink: 'syz.1.2884': attribute type 13 has an invalid length. [ 113.584883][T10332] netlink: 'syz.2.2896': attribute type 13 has an invalid length. [ 113.670972][T10343] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2900'. [ 114.085767][T10397] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 114.519425][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 114.601606][T10436] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 114.689791][T10443] vlan0: entered allmulticast mode [ 114.695025][T10443] bridge_slave_0: entered allmulticast mode [ 114.976255][T10475] netlink: 'syz.0.2959': attribute type 21 has an invalid length. [ 114.984860][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 115.410894][T10524] netlink: 'syz.2.2980': attribute type 83 has an invalid length. [ 115.565652][T10536] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 115.578334][T10536] bond1: (slave dummy0): Releasing active interface [ 115.601538][T10536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.422634][T10557] Set syz1 is full, maxelem 65536 reached [ 116.731243][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 116.740338][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 117.248869][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3028'. [ 117.850163][T10623] syz.4.3022 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 117.860919][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.4.3022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.861021][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.861035][T10623] Call Trace: [ 117.861113][T10623] [ 117.861121][T10623] __dump_stack+0x1d/0x30 [ 117.861146][T10623] dump_stack_lvl+0xe8/0x140 [ 117.861169][T10623] dump_stack+0x15/0x1b [ 117.861188][T10623] dump_header+0x81/0x220 [ 117.861208][T10623] oom_kill_process+0x342/0x400 [ 117.861289][T10623] out_of_memory+0x979/0xb80 [ 117.861361][T10623] try_charge_memcg+0x610/0xa10 [ 117.861398][T10623] charge_memcg+0x51/0xc0 [ 117.861496][T10623] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 117.861589][T10623] __read_swap_cache_async+0x17b/0x2d0 [ 117.861653][T10623] swap_cluster_readahead+0x362/0x3c0 [ 117.861683][T10623] swapin_readahead+0xde/0x6f0 [ 117.861720][T10623] ? __rcu_read_unlock+0x4f/0x70 [ 117.861765][T10623] ? __rcu_read_unlock+0x4f/0x70 [ 117.861793][T10623] ? swap_cache_get_folio+0x277/0x280 [ 117.861856][T10623] do_swap_page+0x2ae/0x2370 [ 117.861882][T10623] ? _raw_spin_unlock+0x26/0x50 [ 117.861908][T10623] ? finish_task_switch+0xad/0x2b0 [ 117.861938][T10623] ? __pfx_default_wake_function+0x10/0x10 [ 117.861969][T10623] handle_mm_fault+0x9a5/0x2be0 [ 117.862043][T10623] ? vma_start_read+0x141/0x1f0 [ 117.862107][T10623] do_user_addr_fault+0x630/0x1080 [ 117.862131][T10623] ? fpregs_restore_userregs+0xe2/0x1d0 [ 117.862166][T10623] ? switch_fpu_return+0xe/0x20 [ 117.862214][T10623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.862244][T10623] exc_page_fault+0x62/0xa0 [ 117.862307][T10623] asm_exc_page_fault+0x26/0x30 [ 117.862329][T10623] RIP: 0033:0x7f592bbe58ec [ 117.862346][T10623] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 117.862365][T10623] RSP: 002b:00007ffff8e7fe70 EFLAGS: 00010202 [ 117.862382][T10623] RAX: 0000000000000000 RBX: 00007f592bf65fa0 RCX: 0000000000000000 [ 117.862396][T10623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555562ecf808 [ 117.862463][T10623] RBP: 00007f592bf67da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 117.862477][T10623] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001cc8f [ 117.862490][T10623] R13: 00007ffff8e7ff60 R14: ffffffffffffffff R15: 00007ffff8e7ff80 [ 117.862511][T10623] [ 117.862518][T10623] memory: usage 307200kB, limit 307200kB, failcnt 451 [ 118.102674][T10623] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0 [ 118.110643][T10623] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 118.118062][T10623] Memory cgroup stats for /syz4: [ 118.118390][T10623] cache 0 [ 118.126414][T10623] rss 0 [ 118.129192][T10623] shmem 0 [ 118.132121][T10623] mapped_file 0 [ 118.135618][T10623] dirty 0 [ 118.138601][T10623] writeback 0 [ 118.141881][T10623] workingset_refault_anon 98 [ 118.146455][T10623] workingset_refault_file 129 [ 118.151202][T10623] swap 1261568 [ 118.154572][T10623] swapcached 0 [ 118.158029][T10623] pgpgin 154076 [ 118.161532][T10623] pgpgout 154076 [ 118.165069][T10623] pgfault 134075 [ 118.168721][T10623] pgmajfault 29 [ 118.172196][T10623] inactive_anon 0 [ 118.175933][T10623] active_anon 0 [ 118.179444][T10623] inactive_file 0 [ 118.183073][T10623] active_file 0 [ 118.186526][T10623] unevictable 0 [ 118.190093][T10623] hierarchical_memory_limit 314572800 [ 118.195460][T10623] hierarchical_memsw_limit 9223372036854771712 [ 118.201652][T10623] total_cache 0 [ 118.205105][T10623] total_rss 0 [ 118.208433][T10623] total_shmem 0 [ 118.209237][ T3387] IPVS: starting estimator thread 0... [ 118.211883][T10623] total_mapped_file 0 [ 118.211891][T10623] total_dirty 0 [ 118.211898][T10623] total_writeback 0 [ 118.211906][T10623] total_workingset_refault_anon 98 [ 118.233669][T10623] total_workingset_refault_file 129 [ 118.238976][T10623] total_swap 1261568 [ 118.242957][T10623] total_swapcached 0 [ 118.246882][T10623] total_pgpgin 154076 [ 118.250868][T10623] total_pgpgout 154076 [ 118.254924][T10623] total_pgfault 134075 [ 118.259037][T10623] total_pgmajfault 29 [ 118.263045][T10623] total_inactive_anon 0 [ 118.267190][T10623] total_active_anon 0 [ 118.271183][T10623] total_inactive_file 0 [ 118.275323][T10623] total_active_file 0 [ 118.279332][T10623] total_unevictable 0 [ 118.283297][T10623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.659,pid=5123,uid=0 [ 118.297909][T10623] Memory cgroup out of memory: Killed process 5123 (syz.4.659) total-vm:95872kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 118.319119][T10676] IPVS: using max 2496 ests per chain, 124800 per kthread [ 118.326328][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 118.326342][ T29] audit: type=1400 audit(1762118168.908:3671): avc: denied { write } for pid=10670 comm="syz.1.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.337150][T10626] syz.4.3022 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 118.365824][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.4.3022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.365852][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.365866][T10626] Call Trace: [ 118.365873][T10626] [ 118.365881][T10626] __dump_stack+0x1d/0x30 [ 118.365902][T10626] dump_stack_lvl+0xe8/0x140 [ 118.365977][T10626] dump_stack+0x15/0x1b [ 118.365997][T10626] dump_header+0x81/0x220 [ 118.366075][T10626] oom_kill_process+0x342/0x400 [ 118.366112][T10626] out_of_memory+0x979/0xb80 [ 118.366146][T10626] try_charge_memcg+0x610/0xa10 [ 118.366193][T10626] obj_cgroup_charge_pages+0xa6/0x150 [ 118.366216][T10626] __memcg_kmem_charge_page+0x9f/0x170 [ 118.366240][T10626] __alloc_frozen_pages_noprof+0x188/0x360 [ 118.366332][T10626] alloc_pages_mpol+0xb3/0x260 [ 118.366355][T10626] ? alloc_pages_noprof+0x61/0x130 [ 118.366381][T10626] alloc_pages_noprof+0x90/0x130 [ 118.366405][T10626] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 118.366491][T10626] __kvmalloc_node_noprof+0x483/0x670 [ 118.366528][T10626] ? ip_set_alloc+0x24/0x30 [ 118.366561][T10626] ? ip_set_alloc+0x24/0x30 [ 118.366629][T10626] ip_set_alloc+0x24/0x30 [ 118.366657][T10626] hash_netiface_create+0x282/0x740 [ 118.366696][T10626] ? __pfx_hash_netiface_create+0x10/0x10 [ 118.366772][T10626] ip_set_create+0x3cc/0x970 [ 118.366831][T10626] ? __nla_parse+0x40/0x60 [ 118.366856][T10626] nfnetlink_rcv_msg+0x4c6/0x590 [ 118.366907][T10626] netlink_rcv_skb+0x123/0x220 [ 118.366943][T10626] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.367113][T10626] nfnetlink_rcv+0x167/0x16c0 [ 118.367146][T10626] ? __perf_event_overflow+0x6b0/0x8f0 [ 118.367169][T10626] ? __list_add_valid_or_report+0x38/0xe0 [ 118.367248][T10626] ? merge_sched_in+0x605/0xa30 [ 118.367281][T10626] ? rb_next+0x5c/0x80 [ 118.367352][T10626] ? visit_groups_merge+0xf7e/0xfd0 [ 118.367481][T10626] ? should_fail_ex+0x30/0x280 [ 118.367502][T10626] ? selinux_nlmsg_lookup+0x99/0x890 [ 118.367532][T10626] ? __rcu_read_unlock+0x34/0x70 [ 118.367689][T10626] ? __netlink_lookup+0x266/0x2a0 [ 118.367709][T10626] netlink_unicast+0x5c0/0x690 [ 118.367744][T10626] netlink_sendmsg+0x58b/0x6b0 [ 118.367764][T10626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.367853][T10626] __sock_sendmsg+0x145/0x180 [ 118.367879][T10626] ____sys_sendmsg+0x31e/0x4e0 [ 118.367954][T10626] ___sys_sendmsg+0x17b/0x1d0 [ 118.368050][T10626] __x64_sys_sendmsg+0xd4/0x160 [ 118.368075][T10626] x64_sys_call+0x191e/0x3000 [ 118.368100][T10626] do_syscall_64+0xd2/0x200 [ 118.368120][T10626] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.368147][T10626] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.368246][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.368269][T10626] RIP: 0033:0x7f592bd0efc9 [ 118.368286][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.368371][T10626] RSP: 002b:00007f592a76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.368391][T10626] RAX: ffffffffffffffda RBX: 00007f592bf65fa0 RCX: 00007f592bd0efc9 [ 118.368408][T10626] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 118.368419][T10626] RBP: 00007f592bd91f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.368471][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.368485][T10626] R13: 00007f592bf66038 R14: 00007f592bf65fa0 R15: 00007ffff8e7fd08 [ 118.368505][T10626] [ 118.701920][T10626] memory: usage 307200kB, limit 307200kB, failcnt 512 [ 118.708718][T10626] memory+swap: usage 308260kB, limit 9007199254740988kB, failcnt 0 [ 118.716619][T10626] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 118.724019][T10626] Memory cgroup stats for /syz4: [ 118.724298][T10626] cache 0 [ 118.732153][T10626] rss 0 [ 118.735019][T10626] shmem 0 [ 118.738099][T10626] mapped_file 0 [ 118.741584][T10626] dirty 0 [ 118.744509][T10626] writeback 0 [ 118.747784][T10626] workingset_refault_anon 98 [ 118.752430][T10626] workingset_refault_file 129 [ 118.757169][T10626] swap 1261568 [ 118.760574][T10626] swapcached 0 [ 118.764001][T10626] pgpgin 154076 [ 118.767560][T10626] pgpgout 154076 [ 118.771129][T10626] pgfault 134075 [ 118.774668][T10626] pgmajfault 29 [ 118.778118][T10626] inactive_anon 0 [ 118.781794][T10626] active_anon 0 [ 118.785240][T10626] inactive_file 0 [ 118.788878][T10626] active_file 0 [ 118.792359][T10626] unevictable 0 [ 118.795803][T10626] hierarchical_memory_limit 314572800 [ 118.801182][T10626] hierarchical_memsw_limit 9223372036854771712 [ 118.807336][T10626] total_cache 0 [ 118.810824][T10626] total_rss 0 [ 118.814157][T10626] total_shmem 0 [ 118.817604][T10626] total_mapped_file 0 [ 118.821611][T10626] total_dirty 0 [ 118.825085][T10626] total_writeback 0 [ 118.828943][T10626] total_workingset_refault_anon 98 [ 118.834062][T10626] total_workingset_refault_file 129 [ 118.839259][T10626] total_swap 1261568 [ 118.843214][T10626] total_swapcached 0 [ 118.847096][T10626] total_pgpgin 154076 [ 118.851150][T10626] total_pgpgout 154076 [ 118.855227][T10626] total_pgfault 134075 [ 118.859287][T10626] total_pgmajfault 29 [ 118.863360][T10626] total_inactive_anon 0 [ 118.867638][T10626] total_active_anon 0 [ 118.871670][T10626] total_inactive_file 0 [ 118.875806][T10626] total_active_file 0 [ 118.879781][T10626] total_unevictable 0 [ 118.883732][T10626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.760,pid=5358,uid=0 [ 118.898279][T10626] Memory cgroup out of memory: Killed process 5358 (syz.4.760) total-vm:96004kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 118.922166][T10623] syz.4.3022 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 118.932945][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.4.3022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.932972][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.932984][T10623] Call Trace: [ 118.932991][T10623] [ 118.932998][T10623] __dump_stack+0x1d/0x30 [ 118.933019][T10623] dump_stack_lvl+0xe8/0x140 [ 118.933044][T10623] dump_stack+0x15/0x1b [ 118.933063][T10623] dump_header+0x81/0x220 [ 118.933079][T10623] oom_kill_process+0x342/0x400 [ 118.933118][T10623] out_of_memory+0x979/0xb80 [ 118.933147][T10623] try_charge_memcg+0x610/0xa10 [ 118.933266][T10623] charge_memcg+0x51/0xc0 [ 118.933290][T10623] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 118.933313][T10623] __read_swap_cache_async+0x17b/0x2d0 [ 118.933364][T10623] swap_cluster_readahead+0x362/0x3c0 [ 118.933441][T10623] swapin_readahead+0xde/0x6f0 [ 118.933465][T10623] ? __rcu_read_unlock+0x4f/0x70 [ 118.933494][T10623] ? __rcu_read_unlock+0x4f/0x70 [ 118.933523][T10623] ? swap_cache_get_folio+0x277/0x280 [ 118.933616][T10623] do_swap_page+0x2ae/0x2370 [ 118.933711][T10623] ? _raw_spin_unlock+0x26/0x50 [ 118.933732][T10623] ? finish_task_switch+0xad/0x2b0 [ 118.933760][T10623] ? __pfx_default_wake_function+0x10/0x10 [ 118.933792][T10623] handle_mm_fault+0x9a5/0x2be0 [ 118.933820][T10623] ? vma_start_read+0x141/0x1f0 [ 118.933860][T10623] do_user_addr_fault+0x630/0x1080 [ 118.933883][T10623] ? fpregs_restore_userregs+0xe2/0x1d0 [ 118.933953][T10623] ? switch_fpu_return+0xe/0x20 [ 118.933985][T10623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.934016][T10623] exc_page_fault+0x62/0xa0 [ 118.934107][T10623] asm_exc_page_fault+0x26/0x30 [ 118.934128][T10623] RIP: 0033:0x7f592bbe58ec [ 118.934213][T10623] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 118.934230][T10623] RSP: 002b:00007ffff8e7fe70 EFLAGS: 00010202 [ 118.934245][T10623] RAX: 0000000000000000 RBX: 00007f592bf65fa0 RCX: 0000000000000000 [ 118.934333][T10623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555562ecf808 [ 118.934346][T10623] RBP: 00007f592bf67da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 118.934357][T10623] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001cc8f [ 118.934369][T10623] R13: 00007ffff8e7ff60 R14: ffffffffffffffff R15: 00007ffff8e7ff80 [ 118.934386][T10623] [ 118.934393][T10623] memory: usage 307200kB, limit 307200kB, failcnt 512 [ 119.174506][T10623] memory+swap: usage 308080kB, limit 9007199254740988kB, failcnt 0 [ 119.182431][T10623] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 119.189699][T10623] Memory cgroup stats for /syz4: [ 119.189865][T10623] cache 0 [ 119.197679][T10623] rss 0 [ 119.200436][T10623] shmem 0 [ 119.203345][T10623] mapped_file 0 [ 119.206776][T10623] dirty 0 [ 119.209767][T10623] writeback 0 [ 119.213022][T10623] workingset_refault_anon 98 [ 119.217584][T10623] workingset_refault_file 129 [ 119.222309][T10623] swap 1261568 [ 119.225724][T10623] swapcached 0 [ 119.229092][T10623] pgpgin 154076 [ 119.232520][T10623] pgpgout 154076 [ 119.236035][T10623] pgfault 134075 [ 119.239573][T10623] pgmajfault 29 [ 119.243003][T10623] inactive_anon 0 [ 119.246654][T10623] active_anon 0 [ 119.250160][T10623] inactive_file 0 [ 119.253763][T10623] active_file 0 [ 119.257192][T10623] unevictable 0 [ 119.260638][T10623] hierarchical_memory_limit 314572800 [ 119.265978][T10623] hierarchical_memsw_limit 9223372036854771712 [ 119.272164][T10623] total_cache 0 [ 119.275596][T10623] total_rss 0 [ 119.278918][T10623] total_shmem 0 [ 119.282359][T10623] total_mapped_file 0 [ 119.286357][T10623] total_dirty 0 [ 119.289801][T10623] total_writeback 0 [ 119.293578][T10623] total_workingset_refault_anon 98 [ 119.298672][T10623] total_workingset_refault_file 129 [ 119.303843][T10623] total_swap 1261568 [ 119.307708][T10623] total_swapcached 0 [ 119.311592][T10623] total_pgpgin 154076 [ 119.315609][T10623] total_pgpgout 154076 [ 119.319809][T10623] total_pgfault 134075 [ 119.323847][T10623] total_pgmajfault 29 [ 119.327802][T10623] total_inactive_anon 0 [ 119.331946][T10623] total_active_anon 0 [ 119.335926][T10623] total_inactive_file 0 [ 119.340079][T10623] total_active_file 0 [ 119.344032][T10623] total_unevictable 0 [ 119.347985][T10623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.269,pid=4142,uid=0 [ 119.362467][T10623] Memory cgroup out of memory: Killed process 4142 (syz.4.269) total-vm:95872kB, anon-rss:1144kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 119.484215][T10702] syz.1.3051: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 119.498755][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.1.3051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.498783][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.498869][T10702] Call Trace: [ 119.498875][T10702] [ 119.498881][T10702] __dump_stack+0x1d/0x30 [ 119.498907][T10702] dump_stack_lvl+0xe8/0x140 [ 119.498931][T10702] dump_stack+0x15/0x1b [ 119.499047][T10702] warn_alloc+0x12b/0x1a0 [ 119.499146][T10702] ? __rcu_read_unlock+0x4f/0x70 [ 119.499174][T10702] __vmalloc_node_range_noprof+0x9d/0xed0 [ 119.499209][T10702] ? __futex_wait+0x1fa/0x260 [ 119.499234][T10702] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.499293][T10702] ? __rcu_read_unlock+0x4f/0x70 [ 119.499317][T10702] ? avc_has_perm_noaudit+0x1b1/0x200 [ 119.499344][T10702] vmalloc_user_noprof+0x7d/0xb0 [ 119.499378][T10702] ? xskq_create+0x80/0xe0 [ 119.499465][T10702] xskq_create+0x80/0xe0 [ 119.499484][T10702] xsk_init_queue+0x95/0xf0 [ 119.499559][T10702] xsk_setsockopt+0x477/0x640 [ 119.499582][T10702] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.499603][T10702] __sys_setsockopt+0x184/0x200 [ 119.499633][T10702] __x64_sys_setsockopt+0x64/0x80 [ 119.499729][T10702] x64_sys_call+0x20ec/0x3000 [ 119.499767][T10702] do_syscall_64+0xd2/0x200 [ 119.499787][T10702] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.499819][T10702] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.499856][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.499881][T10702] RIP: 0033:0x7fdbdae0efc9 [ 119.499894][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.499939][T10702] RSP: 002b:00007fdbd9877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.500024][T10702] RAX: ffffffffffffffda RBX: 00007fdbdb065fa0 RCX: 00007fdbdae0efc9 [ 119.500037][T10702] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 119.500059][T10702] RBP: 00007fdbdae91f91 R08: 0000000000000004 R09: 0000000000000000 [ 119.500073][T10702] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 119.500087][T10702] R13: 00007fdbdb066038 R14: 00007fdbdb065fa0 R15: 00007ffd82119728 [ 119.500107][T10702] [ 119.500113][T10702] Mem-Info: [ 119.507921][T10626] syz.4.3022 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 119.509976][T10702] active_anon:48888 inactive_anon:53 isolated_anon:0 [ 119.509976][T10702] active_file:24831 inactive_file:2416 isolated_file:0 [ 119.509976][T10702] unevictable:16904 dirty:122 writeback:0 [ 119.509976][T10702] slab_reclaimable:3506 slab_unreclaimable:158336 [ 119.509976][T10702] mapped:28896 shmem:34541 pagetables:1442 [ 119.509976][T10702] sec_pagetables:0 bounce:0 [ 119.509976][T10702] kernel_misc_reclaimable:0 [ 119.509976][T10702] free:1599173 free_pcp:11279 free_cma:0 [ 119.510051][T10702] Node 0 active_anon:195552kB inactive_anon:212kB active_file:99324kB inactive_file:9664kB unevictable:67616kB isolated(anon):0kB isolated(file):0kB mapped:115584kB dirty:488kB writeback:0kB shmem:138164kB kernel_stack:4560kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.510105][T10702] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.510215][T10702] lowmem_reserve[]: 0 2881 7859 7859 [ 119.510247][T10702] Node 0 DMA32 free:2946732kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 119.510325][T10702] lowmem_reserve[]: 0 0 4978 4978 [ 119.510437][T10702] Node 0 Normal free:3434600kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:195552kB inactive_anon:212kB active_file:99324kB inactive_file:9664kB unevictable:67616kB writepending:604kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:41588kB local_pcp:16728kB free_cma:0kB [ 119.510526][T10702] lowmem_reserve[]: 0 0 0 0 [ 119.510593][T10702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 119.520730][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.4.3022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.520758][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.520771][T10626] Call Trace: [ 119.520777][T10626] [ 119.520785][T10626] __dump_stack+0x1d/0x30 [ 119.520839][T10626] dump_stack_lvl+0xe8/0x140 [ 119.520861][T10626] dump_stack+0x15/0x1b [ 119.520879][T10626] dump_header+0x81/0x220 [ 119.520968][T10626] oom_kill_process+0x342/0x400 [ 119.521021][T10626] out_of_memory+0x979/0xb80 [ 119.521103][T10626] try_charge_memcg+0x610/0xa10 [ 119.521137][T10626] obj_cgroup_charge_pages+0xa6/0x150 [ 119.521159][T10626] __memcg_kmem_charge_page+0x9f/0x170 [ 119.521182][T10626] __alloc_frozen_pages_noprof+0x188/0x360 [ 119.521284][T10626] alloc_pages_mpol+0xb3/0x260 [ 119.521408][T10626] ? alloc_pages_noprof+0x61/0x130 [ 119.521432][T10626] alloc_pages_noprof+0x90/0x130 [ 119.521479][T10626] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 119.521579][T10626] __kvmalloc_node_noprof+0x483/0x670 [ 119.521650][T10626] ? ip_set_alloc+0x24/0x30 [ 119.521682][T10626] ? ip_set_alloc+0x24/0x30 [ 119.521766][T10626] ip_set_alloc+0x24/0x30 [ 119.521797][T10626] hash_netiface_create+0x282/0x740 [ 119.521834][T10626] ? __pfx_hash_netiface_create+0x10/0x10 [ 119.521868][T10626] ip_set_create+0x3cc/0x970 [ 119.521945][T10626] ? __nla_parse+0x40/0x60 [ 119.521977][T10626] nfnetlink_rcv_msg+0x4c6/0x590 [ 119.522024][T10626] netlink_rcv_skb+0x123/0x220 [ 119.522165][T10626] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 119.522211][T10626] nfnetlink_rcv+0x167/0x16c0 [ 119.522248][T10626] ? __perf_event_overflow+0x6b0/0x8f0 [ 119.522298][T10626] ? __list_add_valid_or_report+0x38/0xe0 [ 119.522328][T10626] ? merge_sched_in+0x605/0xa30 [ 119.522364][T10626] ? rb_next+0x5c/0x80 [ 119.522400][T10626] ? visit_groups_merge+0xf7e/0xfd0 [ 119.522436][T10626] ? should_fail_ex+0x30/0x280 [ 119.522456][T10626] ? selinux_nlmsg_lookup+0x99/0x890 [ 119.522520][T10626] ? __rcu_read_unlock+0x34/0x70 [ 119.522548][T10626] ? __netlink_lookup+0x266/0x2a0 [ 119.522572][T10626] netlink_unicast+0x5c0/0x690 [ 119.522672][T10626] netlink_sendmsg+0x58b/0x6b0 [ 119.522693][T10626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.522713][T10626] __sock_sendmsg+0x145/0x180 [ 119.522772][T10626] ____sys_sendmsg+0x31e/0x4e0 [ 119.522809][T10626] ___sys_sendmsg+0x17b/0x1d0 [ 119.522903][T10626] __x64_sys_sendmsg+0xd4/0x160 [ 119.522926][T10626] x64_sys_call+0x191e/0x3000 [ 119.523011][T10626] do_syscall_64+0xd2/0x200 [ 119.523031][T10626] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.523060][T10626] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.523095][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.523151][T10626] RIP: 0033:0x7f592bd0efc9 [ 119.523167][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.523186][T10626] RSP: 002b:00007f592a76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.523206][T10626] RAX: ffffffffffffffda RBX: 00007f592bf65fa0 RCX: 00007f592bd0efc9 [ 119.523220][T10626] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 119.523233][T10626] RBP: 00007f592bd91f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.523316][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.523329][T10626] R13: 00007f592bf66038 R14: 00007f592bf65fa0 R15: 00007ffff8e7fd08 [ 119.523348][T10626] [ 119.523355][T10626] memory: usage 307200kB, limit 307200kB, failcnt 750 [ 119.524001][T10702] 0*256kB [ 119.526914][T10626] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 119.531237][T10702] 0*512kB [ 119.535799][T10626] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 119.539956][T10702] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 119.540080][T10702] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946732kB [ 119.540266][T10702] Node 0 Normal: 810*4kB (UME) 350*8kB (ME) 11*16kB (ME) 5*32kB (U) 4*64kB (UME) 119*128kB (UME) 89*256kB (UME) 47*512kB (UM) 23*1024kB (UM) 8*2048kB (UM) 812*4096kB (UM) = 3434600kB [ 119.540503][T10702] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 119.540522][T10702] 78665 total pagecache pages [ 119.540530][T10702] 16 pages in swap cache [ 119.540537][T10702] Free swap = 124152kB [ 119.540543][T10702] Total swap = 124996kB [ 119.540550][T10702] 2097051 pages RAM [ 119.540555][T10702] 0 pages HighMem/MovableOnly [ 119.540563][T10702] 81086 pages reserved [ 119.718460][ T29] audit: type=1326 audit(1762118170.228:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.719620][T10626] Memory cgroup stats for [ 119.722159][ T29] audit: type=1326 audit(1762118170.228:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.735875][T10626] /syz4: [ 119.736230][T10626] cache 0 [ 119.781530][ T29] audit: type=1326 audit(1762118170.228:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.781558][ T29] audit: type=1326 audit(1762118170.228:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.781585][ T29] audit: type=1326 audit(1762118170.228:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.781632][ T29] audit: type=1326 audit(1762118170.228:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.781659][ T29] audit: type=1326 audit(1762118170.228:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 119.781758][ T29] audit: type=1326 audit(1762118170.248:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 120.575565][T10626] rss 0 [ 120.578307][T10626] shmem 0 [ 120.581677][T10626] mapped_file 0 [ 120.585110][T10626] dirty 0 [ 120.588019][T10626] writeback 0 [ 120.591333][T10626] workingset_refault_anon 177 [ 120.595978][T10626] workingset_refault_file 170 [ 120.600666][T10626] swap 798720 [ 120.603923][T10626] swapcached 0 [ 120.607287][T10626] pgpgin 154196 [ 120.611180][T10626] pgpgout 154196 [ 120.614701][T10626] pgfault 134152 [ 120.618327][T10626] pgmajfault 98 [ 120.621794][T10626] inactive_anon 0 [ 120.625405][T10626] active_anon 0 [ 120.628852][T10626] inactive_file 0 [ 120.632464][T10626] active_file 0 [ 120.635899][T10626] unevictable 0 [ 120.639724][T10626] hierarchical_memory_limit 314572800 [ 120.645068][T10626] hierarchical_memsw_limit 9223372036854771712 [ 120.651209][T10626] total_cache 0 [ 120.654647][T10626] total_rss 0 [ 120.657904][T10626] total_shmem 0 [ 120.661347][T10626] total_mapped_file 0 [ 120.665355][T10626] total_dirty 0 [ 120.669217][T10626] total_writeback 0 [ 120.672996][T10626] total_workingset_refault_anon 177 [ 120.678168][T10626] total_workingset_refault_file 170 [ 120.683356][T10626] total_swap 798720 [ 120.687249][T10626] total_swapcached 0 [ 120.691164][T10626] total_pgpgin 154196 [ 120.695123][T10626] total_pgpgout 154196 [ 120.699546][T10626] total_pgfault 134152 [ 120.703587][T10626] total_pgmajfault 98 [ 120.707537][T10626] total_inactive_anon 0 [ 120.711711][T10626] total_active_anon 0 [ 120.715672][T10626] total_inactive_file 0 [ 120.719805][T10626] total_active_file 0 [ 120.723759][T10626] total_unevictable 0 [ 120.727752][T10626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3022,pid=10623,uid=0 [ 120.742762][T10626] Memory cgroup out of memory: Killed process 10623 (syz.4.3022) total-vm:93824kB, anon-rss:1140kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 120.875963][ T29] audit: type=1326 audit(1762118171.458:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc871f1efc9 code=0x7ffc0000 [ 121.081914][T10757] vlan3: entered allmulticast mode [ 121.087120][T10757] bridge_slave_0: entered allmulticast mode [ 121.125146][T10626] syz.4.3022 (10626) used greatest stack depth: 7304 bytes left [ 121.416672][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 121.426056][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 121.440299][T10808] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3100'. [ 121.498222][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 121.690416][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'. [ 121.700897][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 121.738173][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'. [ 121.957128][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 121.968547][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 122.052295][T10890] syz_tun: entered allmulticast mode [ 122.059340][T10889] syz_tun: left allmulticast mode [ 122.117520][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 122.126981][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 122.354412][T10909] Set syz1 is full, maxelem 65536 reached [ 122.430640][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 122.651677][T10952] tipc: Started in network mode [ 122.656674][T10952] tipc: Node identity ac14140f, cluster identity 4711 [ 122.660071][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 122.663864][T10952] tipc: New replicast peer: 255.255.255.83 [ 122.678095][T10952] tipc: Enabled bearer , priority 10 [ 122.692451][T10958] macvtap1: entered allmulticast mode [ 122.697840][T10958] veth0_macvtap: entered allmulticast mode [ 122.748162][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 122.767514][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3167'. [ 122.836750][T10978] bond2: entered promiscuous mode [ 122.841884][T10978] bond2: entered allmulticast mode [ 122.847317][T10978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.858705][T10978] bond2 (unregistering): Released all slaves [ 123.019507][T11006] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 123.155152][T11026] xt_hashlimit: size too large, truncated to 1048576 [ 123.162004][T11026] xt_hashlimit: max too large, truncated to 1048576 [ 123.274937][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 123.287393][T11026] Cannot find add_set index 0 as target [ 123.359958][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 123.359971][ T29] audit: type=1326 audit(1762118173.948:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.376005][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 123.456085][ T29] audit: type=1326 audit(1762118173.948:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.480286][ T29] audit: type=1326 audit(1762118173.948:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.503780][ T29] audit: type=1326 audit(1762118173.948:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.527314][ T29] audit: type=1326 audit(1762118173.948:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.551490][ T29] audit: type=1326 audit(1762118173.948:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.574951][ T29] audit: type=1326 audit(1762118173.948:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.598988][ T29] audit: type=1326 audit(1762118173.948:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.622463][ T29] audit: type=1326 audit(1762118173.948:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.646469][ T29] audit: type=1326 audit(1762118173.948:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 123.698708][ T1036] tipc: Node number set to 2886997007 [ 125.117497][T11202] IPVS: Error connecting to the multicast addr [ 125.265091][T11222] veth12: entered promiscuous mode [ 125.270244][T11222] veth12: entered allmulticast mode [ 126.353620][T11367] team0: Port device team_slave_1 removed [ 127.084137][T11435] __nla_validate_parse: 8 callbacks suppressed [ 127.084154][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 127.652775][T11503] netlink: 'syz.3.3401': attribute type 27 has an invalid length. [ 127.661241][T11503] ip6gre1: left allmulticast mode [ 127.668147][T11503] veth0_macvtap: left allmulticast mode [ 127.673990][T11503] macvtap1: left allmulticast mode [ 127.701741][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.710254][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.720205][T11503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.841627][T11521] IPVS: Error connecting to the multicast addr [ 128.272687][T11559] tipc: New replicast peer: 255.255.255.255 [ 128.278772][T11559] tipc: Enabled bearer , priority 10 [ 128.378525][T11567] netem: change failed [ 128.504132][T11577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3432'. [ 128.761938][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 128.761953][ T29] audit: type=1326 audit(1762118179.348:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 128.807466][ T29] audit: type=1326 audit(1762118179.378:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 128.831512][ T29] audit: type=1326 audit(1762118179.378:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 128.855047][ T29] audit: type=1326 audit(1762118179.378:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 128.879216][ T29] audit: type=1326 audit(1762118179.378:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592bd0efc9 code=0x7ffc0000 [ 128.956151][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 129.507410][T11662] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 129.618984][ T29] audit: type=1326 audit(1762118180.208:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 129.643259][ T29] audit: type=1326 audit(1762118180.208:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 129.670091][ T29] audit: type=1326 audit(1762118180.248:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 129.694326][ T29] audit: type=1326 audit(1762118180.248:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 129.717845][ T29] audit: type=1326 audit(1762118180.248:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdae0efc9 code=0x7ffc0000 [ 129.864687][T11691] pim6reg: entered allmulticast mode [ 129.872265][T11691] pim6reg: left allmulticast mode [ 129.977222][T11716] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 129.985621][T11716] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3495'. [ 129.999005][T11716] .`: renamed from bond0 [ 130.447522][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 130.478231][T11782] bond3: entered promiscuous mode [ 130.483920][T11782] bond3: entered allmulticast mode [ 130.489318][T11782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.498040][T11782] bond3 (unregistering): Released all slaves [ 130.562589][T11785] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 130.931235][T11812] netlink: 'syz.4.3537': attribute type 10 has an invalid length. [ 130.942475][T11814] bond3: entered promiscuous mode [ 130.947514][T11814] bond3: entered allmulticast mode [ 130.953052][T11814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.962469][T11814] bond3 (unregistering): Released all slaves [ 131.814132][T11862] xt_hashlimit: size too large, truncated to 1048576 [ 131.820914][T11862] xt_hashlimit: max too large, truncated to 1048576 [ 131.950996][T11862] Cannot find add_set index 0 as target [ 132.732788][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3584'. [ 132.800349][T11936] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3587'. [ 132.848160][T11942] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3590'. [ 132.942245][T11957] netlink: 'syz.1.3592': attribute type 10 has an invalid length. [ 133.890797][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 133.890813][ T29] audit: type=1326 audit(1762118184.458:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.0.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc871f1efc9 code=0x7ffc0000 [ 133.920450][ T29] audit: type=1326 audit(1762118184.458:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.0.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc871f1efc9 code=0x7ffc0000 [ 133.944043][ T29] audit: type=1326 audit(1762118184.458:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.0.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc871f1efc9 code=0x7ffc0000 [ 133.967604][ T29] audit: type=1326 audit(1762118184.468:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 133.991158][ T29] audit: type=1326 audit(1762118184.468:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.014706][ T29] audit: type=1326 audit(1762118184.468:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.038207][ T29] audit: type=1326 audit(1762118184.468:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.061710][ T29] audit: type=1326 audit(1762118184.468:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.085224][ T29] audit: type=1326 audit(1762118184.468:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.108612][ T29] audit: type=1326 audit(1762118184.478:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 134.463702][T12072] bridge: RTM_NEWNEIGH with invalid ether address [ 135.005347][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 135.053466][T12105] team0: Port device team_slave_1 removed [ 135.153306][T12119] netlink: 'syz.4.3658': attribute type 1 has an invalid length. [ 135.404095][T12147] netlink: 'syz.3.3669': attribute type 10 has an invalid length. [ 135.441522][T12155] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 135.480674][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.496298][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.507771][T12157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.593291][T12170] netlink: 'syz.0.3676': attribute type 30 has an invalid length. [ 135.616242][T12175] vlan2: entered allmulticast mode [ 135.752479][T12197] netlink: 'syz.0.3690': attribute type 21 has an invalid length. [ 135.917929][T12219] vlan3: entered allmulticast mode [ 136.110470][T12238] syz_tun: entered allmulticast mode [ 136.121740][T12236] syz_tun: left allmulticast mode [ 136.419317][T12270] vlan1: entered allmulticast mode [ 136.430858][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 136.448969][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 136.462036][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 136.471366][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 136.480654][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 136.793669][T12303] netlink: 'syz.1.3734': attribute type 30 has an invalid length. [ 136.822812][T12306] syz_tun: entered allmulticast mode [ 136.830502][T12304] syz_tun: left allmulticast mode [ 137.440308][T12339] syz.2.3749(12339): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 137.487804][T12343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12343 comm=syz.1.3750 [ 137.617299][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 137.851449][T12372] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12372 comm=syz.4.3762 [ 137.864093][T12372] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12372 comm=syz.4.3762 [ 138.372485][T12433] __nla_validate_parse: 3 callbacks suppressed [ 138.372570][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 138.396697][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 138.711067][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3798'. [ 138.759991][T12477] netlink: 'syz.3.3801': attribute type 4 has an invalid length. [ 138.771874][T12477] netlink: 'syz.3.3801': attribute type 4 has an invalid length. [ 138.846120][T12487] netlink: 'syz.1.3805': attribute type 27 has an invalid length. [ 138.866824][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.874929][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.883851][T12487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.995811][T12501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12501 comm=syz.3.3810 [ 138.996185][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 138.996200][ T29] audit: type=1400 audit(1762118189.578:4364): avc: denied { name_connect } for pid=12502 comm="syz.1.3812" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 139.105108][ T29] audit: type=1326 audit(1762118189.688:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.129283][ T29] audit: type=1326 audit(1762118189.688:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.248459][ T29] audit: type=1326 audit(1762118189.688:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.272020][ T29] audit: type=1326 audit(1762118189.688:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.295814][ T29] audit: type=1326 audit(1762118189.688:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.319322][ T29] audit: type=1326 audit(1762118189.718:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc106befc9 code=0x7ffc0000 [ 139.342794][ T29] audit: type=1326 audit(1762118189.798:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.2.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 139.366345][ T29] audit: type=1326 audit(1762118189.798:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.2.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 139.389872][ T29] audit: type=1326 audit(1762118189.798:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.2.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa931d1efc9 code=0x7ffc0000 [ 139.700783][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3857'. [ 140.018021][T12606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3856'. [ 140.141264][T12629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3866'. [ 140.267484][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 140.566144][T12685] sctp: [Deprecated]: syz.3.3891 (pid 12685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.566144][T12685] Use struct sctp_sack_info instead [ 140.642755][T12695] netlink: 'syz.0.3896': attribute type 4 has an invalid length. [ 140.973286][T12716] netlink: 'syz.1.3904': attribute type 5 has an invalid length. [ 141.145628][T12739] netlink: 'syz.2.3914': attribute type 4 has an invalid length. [ 141.184454][T12739] netlink: 'syz.2.3914': attribute type 4 has an invalid length. [ 141.450934][T12765] veth14: entered promiscuous mode [ 141.456080][T12765] veth14: entered allmulticast mode [ 141.772399][T12795] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3938'. [ 141.861153][T12811] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.3942'. [ 141.870344][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3942'. [ 142.960543][T12853] ================================================================== [ 142.968639][T12853] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release [ 142.977316][T12853] [ 142.979617][T12853] write to 0xffff88812b62cf00 of 8 bytes by task 12863 on cpu 1: [ 142.987315][T12853] page_pool_release+0x28a/0x780 [ 142.992233][T12853] page_pool_destroy+0x202/0x370 [ 142.997149][T12853] bpf_test_run_xdp_live+0x112f/0x11c0 [ 143.002586][T12853] bpf_prog_test_run_xdp+0x525/0x970 [ 143.007852][T12853] bpf_prog_test_run+0x22a/0x390 [ 143.012762][T12853] __sys_bpf+0x4c0/0x7c0 [ 143.016979][T12853] __x64_sys_bpf+0x41/0x50 [ 143.021376][T12853] x64_sys_call+0x2aee/0x3000 [ 143.026032][T12853] do_syscall_64+0xd2/0x200 [ 143.030507][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.036378][T12853] [ 143.038676][T12853] read to 0xffff88812b62cf00 of 8 bytes by task 12853 on cpu 0: [ 143.046297][T12853] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 143.052170][T12853] napi_pp_put_page+0xe9/0x200 [ 143.056913][T12853] skb_free_head+0x12c/0x150 [ 143.061478][T12853] skb_release_data+0x33b/0x370 [ 143.066310][T12853] __kfree_skb+0x44/0x150 [ 143.070618][T12853] sk_skb_reason_drop+0xbd/0x270 [ 143.075540][T12853] udp_recvmsg+0x11a/0xb90 [ 143.079935][T12853] inet_recvmsg+0x143/0x290 [ 143.084422][T12853] sock_recvmsg+0xf6/0x170 [ 143.088814][T12853] ____sys_recvmsg+0xf5/0x280 [ 143.093475][T12853] ___sys_recvmsg+0x11f/0x370 [ 143.098122][T12853] do_recvmmsg+0x1ef/0x540 [ 143.102511][T12853] __x64_sys_recvmmsg+0xe5/0x170 [ 143.107427][T12853] x64_sys_call+0x27aa/0x3000 [ 143.112080][T12853] do_syscall_64+0xd2/0x200 [ 143.116563][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.122439][T12853] [ 143.124742][T12853] value changed: 0xffffea0004fd7ac0 -> 0x0000000000000000 [ 143.131820][T12853] [ 143.134118][T12853] Reported by Kernel Concurrency Sanitizer on: [ 143.140241][T12853] CPU: 0 UID: 0 PID: 12853 Comm: syz.3.3964 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.150026][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.160059][T12853] ==================================================================