last executing test programs: 2.036429605s ago: executing program 2 (id=1626): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4180, 0x18) getdents(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = getpgrp(0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0xa755, 0x8}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1.962366865s ago: executing program 2 (id=1629): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x32, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.270140893s ago: executing program 1 (id=1649): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/129, 0x40000, 0x40010020, 0x0, 0x0) 1.155479733s ago: executing program 1 (id=1651): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) 1.094553773s ago: executing program 2 (id=1652): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 785.723992ms ago: executing program 3 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) unshare(0x20000) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') shmdt(0x0) 768.560892ms ago: executing program 0 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r0, 0x0, 0x1}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 747.714382ms ago: executing program 0 (id=1664): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 705.778822ms ago: executing program 0 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 630.520962ms ago: executing program 3 (id=1668): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r4}, 0x20) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 628.639252ms ago: executing program 0 (id=1678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 607.142192ms ago: executing program 3 (id=1670): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x6, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f00000000c0)={[{@name={'name', 0x3d, 'clone.children'}}]}) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200"], 0x80}, 0x1, 0x7}, 0x0) 603.940592ms ago: executing program 0 (id=1671): r0 = creat(0x0, 0xc9028ba210c11f48) fadvise64(r0, 0x8, 0x40, 0x3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) 583.409162ms ago: executing program 3 (id=1672): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000600)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) 529.498352ms ago: executing program 0 (id=1673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x1) 384.754261ms ago: executing program 3 (id=1674): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000400"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000000000000843f00000000000010000000000000000000000001000100180000000000000007"], 0x38}, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0xffffffffffffffff}, {0xf19}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfa9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffd}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) pselect6(0x2a00, 0x0, 0x0, &(0x7f0000000140)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x3fffc00000000000, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 384.517361ms ago: executing program 4 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) 331.712271ms ago: executing program 4 (id=1676): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000ecff000000f8ffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) sync() sync() 303.075681ms ago: executing program 1 (id=1677): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fcntl$notify(r0, 0x402, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) fcntl$notify(r3, 0x402, 0x8000003d) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 271.931661ms ago: executing program 2 (id=1679): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 271.045211ms ago: executing program 3 (id=1680): io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) 235.405261ms ago: executing program 1 (id=1681): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x400, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107802, 0x42) sendfile(r3, r3, 0x0, 0x80000000) 234.804821ms ago: executing program 4 (id=1682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) write$UHID_INPUT(r2, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x18}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 213.31099ms ago: executing program 1 (id=1683): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x803, 0x0, 0x2000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) socket(0x10, 0x803, 0x0) 201.836541ms ago: executing program 2 (id=1684): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x13) 146.955891ms ago: executing program 4 (id=1685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100) 146.542901ms ago: executing program 1 (id=1686): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0xd) preadv(r0, 0x0, 0x0, 0x401, 0x3649) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0xee00, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) 145.935011ms ago: executing program 4 (id=1687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0x114, 0xc) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) 22.59198ms ago: executing program 4 (id=1688): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @remote}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 2 (id=1689): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): 9][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.374453][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.384964][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.396286][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.406726][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.419508][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.428432][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.437383][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.447041][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.459699][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.470648][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.481808][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.494180][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.505453][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.515508][ T3306] veth0_macvtap: entered promiscuous mode [ 29.533658][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.538152][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 29.538166][ T29] audit: type=1400 audit(1737389614.602:110): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.NNOYHO/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.546261][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.553056][ T29] audit: type=1400 audit(1737389614.602:111): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.553085][ T29] audit: type=1400 audit(1737389614.602:112): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.NNOYHO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.577987][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.588779][ T29] audit: type=1400 audit(1737389614.602:113): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.588812][ T29] audit: type=1400 audit(1737389614.602:114): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.NNOYHO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.611315][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.637329][ T29] audit: type=1400 audit(1737389614.602:115): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.NNOYHO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.648036][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.648051][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.650755][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.671627][ T29] audit: type=1400 audit(1737389614.602:116): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.709434][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.727296][ T29] audit: type=1400 audit(1737389614.782:117): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.744028][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.754305][ T29] audit: type=1400 audit(1737389614.782:118): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=4622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.764286][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.862867][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874736][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.893263][ T3306] veth1_macvtap: entered promiscuous mode [ 29.902753][ T29] audit: type=1400 audit(1737389614.972:119): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.919819][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.939363][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.949706][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.960406][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.971209][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.982784][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.992776][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.003229][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.013960][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.036857][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.047692][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.057846][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.068480][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.078800][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.089619][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.100402][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.112300][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.127294][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.135152][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.144535][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.153656][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.162550][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.178253][ T3452] veth0_to_team: entered promiscuous mode [ 30.184479][ T3452] veth0_to_team: entered allmulticast mode [ 30.199127][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.209754][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.219467][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.223024][ T3455] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.229531][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.257295][ T3455] +}k calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.336050][ T3458] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 30.566120][ T3481] loop2: detected capacity change from 0 to 1024 [ 30.586800][ T3481] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.596670][ T3481] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 30.765776][ T3503] syz.4.23[3503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.765833][ T3503] syz.4.23[3503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.783098][ T3503] syz.4.23[3503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.907044][ T3512] $H˙: renamed from bond0 (while UP) [ 30.930618][ T3512] $H˙: entered promiscuous mode [ 30.937627][ T3512] bond_slave_0: entered promiscuous mode [ 30.944011][ T3512] bond_slave_1: entered promiscuous mode [ 31.328100][ T3552] mmap: syz.2.39 (3552) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.381609][ T3555] loop4: detected capacity change from 0 to 2048 [ 31.425950][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.526969][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.657603][ T3579] veth0_to_team: entered promiscuous mode [ 31.663591][ T3579] veth0_to_team: entered allmulticast mode [ 31.741668][ T3587] syzkaller0: entered promiscuous mode [ 31.747168][ T3587] syzkaller0: entered allmulticast mode [ 31.854183][ T3600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3600 comm=syz.2.59 [ 32.094921][ T3625] ======================================================= [ 32.094921][ T3625] WARNING: The mand mount option has been deprecated and [ 32.094921][ T3625] and is ignored by this kernel. Remove the mand [ 32.094921][ T3625] option from the mount to silence this warning. [ 32.094921][ T3625] ======================================================= [ 32.156130][ T3629] sd 0:0:1:0: device reset [ 32.208964][ T3639] capability: warning: `syz.3.75' uses 32-bit capabilities (legacy support in use) [ 32.310520][ T3652] loop3: detected capacity change from 0 to 2048 [ 32.356321][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.376541][ T3652] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.394900][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 32.591898][ T3671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.79: bg 0: block 345: padding at end of block bitmap is not set [ 32.627548][ T3671] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 32.642895][ T3671] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.642895][ T3671] [ 32.656394][ T3671] syz.3.79 (3671) used greatest stack depth: 9176 bytes left [ 32.678079][ T3686] bridge0: port 3(veth0_to_bond) entered blocking state [ 32.685961][ T3686] bridge0: port 3(veth0_to_bond) entered disabled state [ 32.711468][ T3686] veth0_to_bond: entered allmulticast mode [ 32.713613][ T1971] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 32.718507][ T3686] veth0_to_bond: entered promiscuous mode [ 32.733418][ T1971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.733418][ T1971] [ 32.749586][ T3686] bridge0: port 3(veth0_to_bond) entered blocking state [ 32.756572][ T3686] bridge0: port 3(veth0_to_bond) entered forwarding state [ 32.771802][ T1971] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 32.785262][ T1971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.785262][ T1971] [ 32.795557][ T1971] EXT4-fs (loop3): Total free blocks count 0 [ 32.802010][ T1971] EXT4-fs (loop3): Free/Dirty block details [ 32.808137][ T1971] EXT4-fs (loop3): free_blocks=0 [ 32.919656][ T3692] pim6reg1: entered promiscuous mode [ 32.925906][ T3692] pim6reg1: entered allmulticast mode [ 33.071641][ T3704] netlink: 76 bytes leftover after parsing attributes in process `syz.3.103'. [ 33.081442][ T3705] syz.2.102[3705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.081536][ T3705] syz.2.102[3705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.094377][ T3705] syz.2.102[3705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.108912][ T3700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.171899][ T3714] loop3: detected capacity change from 0 to 256 [ 33.192931][ T3714] FAT-fs (loop3): IO charset euc-jp not found [ 33.384620][ T3725] batadv_slave_1: entered promiscuous mode [ 33.391464][ T3724] batadv_slave_1: left promiscuous mode [ 33.963208][ T3767] loop1: detected capacity change from 0 to 8192 [ 33.971368][ T3767] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.176849][ T3796] bridge0: port 3(veth0_to_bond) entered blocking state [ 34.178372][ T3797] Process accounting resumed [ 34.184234][ T3796] bridge0: port 3(veth0_to_bond) entered disabled state [ 34.203604][ T3796] veth0_to_bond: entered allmulticast mode [ 34.210084][ T3796] veth0_to_bond: entered promiscuous mode [ 34.216416][ T3796] bridge0: port 3(veth0_to_bond) entered blocking state [ 34.223530][ T3796] bridge0: port 3(veth0_to_bond) entered forwarding state [ 34.537990][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 34.538003][ T29] audit: type=1400 audit(1737389619.612:295): avc: denied { tracepoint } for pid=3815 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.584053][ T29] audit: type=1400 audit(1737389619.652:296): avc: denied { read } for pid=3815 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.873504][ T29] audit: type=1400 audit(1737389619.942:297): avc: denied { create } for pid=3832 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 34.894532][ T3833] netlink: 'syz.1.150': attribute type 13 has an invalid length. [ 34.904125][ T29] audit: type=1400 audit(1737389619.962:298): avc: denied { ioctl } for pid=3832 comm="syz.1.150" path="socket:[5290]" dev="sockfs" ino=5290 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 34.921392][ T3835] loop3: detected capacity change from 0 to 1024 [ 34.929304][ T29] audit: type=1400 audit(1737389619.962:299): avc: denied { setopt } for pid=3832 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.936507][ T3835] EXT4-fs: Ignoring removed orlov option [ 34.958269][ T29] audit: type=1400 audit(1737389619.962:300): avc: denied { connect } for pid=3832 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.005090][ T29] audit: type=1400 audit(1737389620.072:301): avc: denied { append } for pid=3836 comm="syz.2.152" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.029609][ T3833] gretap0: refused to change device tx_queue_len [ 35.036500][ T3833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 35.053914][ T3835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.090529][ T29] audit: type=1400 audit(1737389620.162:302): avc: denied { read open } for pid=3834 comm="syz.3.151" path="/25/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.114652][ T29] audit: type=1400 audit(1737389620.162:303): avc: denied { write } for pid=3834 comm="syz.3.151" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.421887][ T3855] loop0: detected capacity change from 0 to 512 [ 35.439955][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.461382][ T3855] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.504041][ T29] audit: type=1400 audit(1737389620.572:304): avc: denied { create } for pid=3861 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.575201][ C1] hrtimer: interrupt took 27189 ns [ 35.790972][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.396625][ T3855] syz.0.159 (3855) used greatest stack depth: 6424 bytes left [ 36.429530][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.511690][ T3912] syz.0.182[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.511794][ T3912] syz.0.182[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.527037][ T3912] syz.0.182[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.541599][ T3912] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 36.608574][ T3922] 9pnet: p9_errstr2errno: server reported unknown error [ 36.710486][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 36.969877][ T3952] Illegal XDP return value 2608137457 on prog (id 147) dev N/A, expect packet loss! [ 36.996057][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.003844][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.049988][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.057460][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.077371][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 37.209720][ T3966] tipc: Can't bind to reserved service type 1 [ 38.056174][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 38.081995][ T3995] ip6_vti0: mtu greater than device maximum [ 38.181417][ T4013] loop2: detected capacity change from 0 to 128 [ 38.188543][ T4013] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 38.198824][ T4013] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.212608][ T4013] ext2 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.266081][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.349604][ T4022] bridge_slave_0: left allmulticast mode [ 38.355558][ T4022] bridge_slave_0: left promiscuous mode [ 38.361711][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.373613][ T4022] bridge_slave_1: left allmulticast mode [ 38.379689][ T4022] bridge_slave_1: left promiscuous mode [ 38.385774][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.399288][ T4022] bond0: (slave bond_slave_0): Releasing backup interface [ 38.410566][ T4022] bond0: (slave bond_slave_1): Releasing backup interface [ 38.425856][ T4022] team0: Port device team_slave_0 removed [ 38.437442][ T4022] team0: Port device team_slave_1 removed [ 38.447278][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.455352][ T4022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.464775][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.473042][ T4022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.128117][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 39.177034][ T4058] syz.2.244[4058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.177153][ T4058] syz.2.244[4058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.190557][ T4058] syz.2.244[4058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.356518][ T4078] bond1: entered promiscuous mode [ 39.373971][ T4078] bond1: entered allmulticast mode [ 39.379700][ T4078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.390707][ T4078] bond1 (unregistering): Released all slaves [ 39.462268][ T4088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 39.491199][ T4094] syz.1.260[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.491398][ T4094] syz.1.260[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.503333][ T4094] syz.1.260[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.521090][ T4096] syz.2.261[4096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.565025][ T4100] loop3: detected capacity change from 0 to 1024 [ 39.590449][ T4100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.603142][ T4100] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.616409][ T4100] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.631740][ T4100] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 39.644413][ T4100] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.644413][ T4100] [ 39.654602][ T4100] EXT4-fs (loop3): Total free blocks count 0 [ 39.661975][ T4100] EXT4-fs (loop3): Free/Dirty block details [ 39.667989][ T4100] EXT4-fs (loop3): free_blocks=4293918720 [ 39.673842][ T4100] EXT4-fs (loop3): dirty_blocks=64 [ 39.678974][ T4100] EXT4-fs (loop3): Block reservation details [ 39.684976][ T4100] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 39.716385][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.753855][ T4114] loop3: detected capacity change from 0 to 1024 [ 39.782278][ T4114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.812035][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 39.812050][ T29] audit: type=1326 audit(1737389624.872:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 39.841835][ T29] audit: type=1326 audit(1737389624.872:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 39.858264][ T4114] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.865321][ T29] audit: type=1326 audit(1737389624.872:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 39.952038][ T4127] batadv_slave_1: entered promiscuous mode [ 39.958640][ T4127] batadv_slave_1: left promiscuous mode [ 40.005057][ T29] audit: type=1400 audit(1737389625.072:503): avc: denied { write } for pid=4124 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.048657][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.124111][ T29] audit: type=1400 audit(1737389625.192:504): avc: denied { create } for pid=4136 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.158096][ T29] audit: type=1400 audit(1737389625.222:505): avc: denied { setopt } for pid=4136 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.178260][ T29] audit: type=1400 audit(1737389625.222:506): avc: denied { bind } for pid=4136 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.202528][ T29] audit: type=1326 audit(1737389625.252:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 40.228061][ T29] audit: type=1326 audit(1737389625.252:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 40.255416][ T29] audit: type=1326 audit(1737389625.252:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 40.325524][ T4146] loop0: detected capacity change from 0 to 1024 [ 40.337922][ T4146] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 40.347831][ T4146] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.367964][ T4146] EXT4-fs (loop0): invalid journal inode [ 40.373905][ T4146] EXT4-fs (loop0): can't get journal size [ 40.398249][ T4146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.432060][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.454182][ T4161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 40.963902][ T4167] loop2: detected capacity change from 0 to 2048 [ 40.988679][ T4173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.023671][ T4167] Alternate GPT is invalid, using primary GPT. [ 41.030218][ T4167] loop2: p2 p3 p7 [ 41.046516][ T4177] ip6gre1: entered allmulticast mode [ 41.090870][ T4183] capability: warning: `syz.0.295' uses deprecated v2 capabilities in a way that may be insecure [ 41.125665][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 41.126091][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 41.138269][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 41.354100][ T4205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.304'. [ 41.363287][ T4205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'. [ 41.372505][ T4205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.304'. [ 41.389118][ T4205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.304'. [ 41.663813][ T4233] dccp_close: ABORT with 236 bytes unread [ 41.685862][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 41.798355][ T4245] loop2: detected capacity change from 0 to 1764 [ 41.891769][ T4245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.958204][ T4245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.008609][ T4272] loop3: detected capacity change from 0 to 512 [ 42.022791][ T4272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.028485][ T4279] bpf_get_probe_write_proto: 8 callbacks suppressed [ 42.028501][ T4279] syz.4.337[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.042542][ T4279] syz.4.337[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.055556][ T4245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.066181][ T4279] syz.4.337[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.089525][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.114398][ T4272] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.129976][ T4245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.178384][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.195546][ T4245] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.207576][ T4245] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.219006][ T4245] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.254090][ T4245] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.263712][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 42.355862][ T4302] syz.2.345 uses obsolete (PF_INET,SOCK_PACKET) [ 42.357595][ T4306] tipc: Started in network mode [ 42.367789][ T4306] tipc: Node identity 7, cluster identity 5 [ 42.373730][ T4306] tipc: Node number set to 7 [ 42.467026][ T4319] syz.4.354[4319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.467081][ T4319] syz.4.354[4319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.485390][ T4319] syz.4.354[4319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.510423][ T4321] loop2: detected capacity change from 0 to 128 [ 42.551168][ T4321] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.564365][ T4321] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.620268][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.745186][ T4347] syz.4.366[4347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.745301][ T4347] syz.4.366[4347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.757507][ T4347] syz.4.366[4347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.848533][ T4356] xt_connbytes: Forcing CT accounting to be enabled [ 42.866615][ T4356] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 43.204230][ T4386] netlink: 'syz.4.382': attribute type 16 has an invalid length. [ 43.212075][ T4386] __nla_validate_parse: 1 callbacks suppressed [ 43.212099][ T4386] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.382'. [ 43.447885][ T4396] netlink: 'syz.3.385': attribute type 4 has an invalid length. [ 43.476280][ T4396] netlink: 'syz.3.385': attribute type 4 has an invalid length. [ 43.628208][ T4406] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.390'. [ 43.646877][ T4404] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.390'. [ 43.778450][ T4416] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 43.791976][ T4416] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 43.847104][ T4416] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 43.905445][ T4424] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 43.952642][ T4426] Zero length message leads to an empty skb [ 44.013478][ T4432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.110819][ T4432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.203933][ T4432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.317421][ T4432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.409228][ T4432] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.420553][ T4461] netlink: 'syz.3.413': attribute type 7 has an invalid length. [ 44.428272][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 44.436148][ T4432] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.449336][ T4460] loop2: detected capacity change from 0 to 164 [ 44.489658][ T4432] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.531369][ T4432] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.863370][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 44.863423][ T29] audit: type=1326 audit(1737389629.932:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 44.898326][ T29] audit: type=1326 audit(1737389629.962:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 44.922035][ T29] audit: type=1326 audit(1737389629.962:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 44.945399][ T29] audit: type=1326 audit(1737389629.962:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 44.969794][ T29] audit: type=1326 audit(1737389629.962:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 44.994649][ T29] audit: type=1326 audit(1737389630.062:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 45.018347][ T29] audit: type=1326 audit(1737389630.062:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 45.042842][ T29] audit: type=1326 audit(1737389630.062:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 45.066880][ T29] audit: type=1326 audit(1737389630.062:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 45.090344][ T29] audit: type=1326 audit(1737389630.062:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fcc483d5d29 code=0x7ffc0000 [ 45.522667][ T4512] syz.2.428[4512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.524892][ T4512] .: renamed from bond0 (while UP) [ 45.715294][ T4527] bridge: RTM_NEWNEIGH with invalid ether address [ 45.912403][ T4543] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.006292][ T4549] pim6reg1: entered promiscuous mode [ 46.011695][ T4549] pim6reg1: entered allmulticast mode [ 46.070056][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 46.102475][ T4554] xt_hashlimit: max too large, truncated to 1048576 [ 47.044669][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 47.151103][ T4610] loop3: detected capacity change from 0 to 1024 [ 47.187025][ T4610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.260534][ T4625] loop0: detected capacity change from 0 to 512 [ 47.310000][ T4610] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 47.324702][ T4610] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.3.467: corrupted in-inode xattr: bad magic number in in-inode xattr [ 47.341819][ T4610] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.467: attempt to clear invalid blocks 1886221359 len 1 [ 47.365722][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.392064][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.415143][ T4625] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.457372][ T4648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.482'. [ 47.485717][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 47.573362][ T4658] ip6_vti0: mtu greater than device maximum [ 47.738823][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.798809][ T4686] sd 0:0:1:0: device reset [ 47.949563][ T4706] loop0: detected capacity change from 0 to 512 [ 47.967125][ T4703] loop2: detected capacity change from 0 to 8192 [ 47.967543][ T4706] EXT4-fs: Ignoring removed bh option [ 47.994460][ T4706] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.008341][ T4706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.025160][ T4706] EXT4-fs (loop0): 1 truncate cleaned up [ 48.032147][ T4706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.061945][ T4706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.071257][ T4706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.456671][ T4714] bond_slave_1: entered promiscuous mode [ 48.463174][ T4714] bond_slave_1: left promiscuous mode [ 48.600022][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.609717][ T4719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=4719 comm=syz.4.514 [ 48.635024][ T4721] loop0: detected capacity change from 0 to 512 [ 48.653745][ T4721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.695511][ T4721] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.794271][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.870707][ T4730] loop0: detected capacity change from 0 to 1024 [ 48.901975][ T4730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.912699][ T4738] loop2: detected capacity change from 0 to 2048 [ 48.921290][ T4730] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.954720][ T4738] EXT4-fs: Ignoring removed bh option [ 48.979773][ T4738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.022261][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.103699][ T4752] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.137718][ T4752] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 480 with error 28 [ 49.151111][ T4752] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.151111][ T4752] [ 49.161120][ T4752] EXT4-fs (loop2): Total free blocks count 0 [ 49.167196][ T4752] EXT4-fs (loop2): Free/Dirty block details [ 49.173286][ T4752] EXT4-fs (loop2): free_blocks=2415919104 [ 49.179632][ T4752] EXT4-fs (loop2): dirty_blocks=496 [ 49.185144][ T4752] EXT4-fs (loop2): Block reservation details [ 49.191172][ T4752] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 49.225468][ T2194] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 49.406285][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 49.430699][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 49.497481][ T4784] bpf_get_probe_write_proto: 14 callbacks suppressed [ 49.497497][ T4784] syz.4.535[4784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.510981][ T4784] syz.4.535[4784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.522742][ T4784] syz.4.535[4784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.685031][ T4794] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.780866][ T4794] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.829444][ T4794] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.869934][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 49.869946][ T29] audit: type=1326 audit(1737389634.942:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 49.929618][ T4794] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.999450][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 50.101880][ T29] audit: type=1400 audit(1737389635.162:1089): avc: denied { getopt } for pid=4815 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.107189][ T4818] loop2: detected capacity change from 0 to 1024 [ 50.170761][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.195344][ T4818] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.387453][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.424877][ T4794] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.451256][ T4794] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.466167][ T4794] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.494520][ T4836] 9pnet: p9_errstr2errno: server reported unknown error [ 50.504126][ T4794] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654324][ T29] audit: type=1326 audit(1737389635.722:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.681574][ T29] audit: type=1326 audit(1737389635.752:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.761258][ T29] audit: type=1326 audit(1737389635.822:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.785725][ T29] audit: type=1326 audit(1737389635.822:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.913954][ T29] audit: type=1326 audit(1737389635.982:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4865 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.940611][ T29] audit: type=1326 audit(1737389635.982:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4865 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 50.982743][ T29] audit: type=1326 audit(1737389636.042:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4865 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 51.008786][ T29] audit: type=1326 audit(1737389636.042:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4865 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 51.534749][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.581'. [ 52.141897][ T4931] Set syz1 is full, maxelem 65536 reached [ 52.149092][ T4933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4933 comm=syz.3.588 [ 52.163629][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 52.173485][ T4933] netlink: 'syz.3.588': attribute type 30 has an invalid length. [ 52.698614][ T4967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.040545][ T5003] 9pnet: p9_errstr2errno: server reported unknown error [ 53.240555][ T5013] dccp_close: ABORT with 236 bytes unread [ 53.518660][ T5033] veth0_to_team: entered promiscuous mode [ 53.524468][ T5033] veth0_to_team: entered allmulticast mode [ 53.737124][ T5053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 53.846763][ T5063] syz.1.642[5063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.846895][ T5063] syz.1.642[5063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.859462][ T5063] syz.1.642[5063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.680543][ T5091] syz.2.650[5091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.695106][ T5091] syz.2.650[5091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.707254][ T5091] syz.2.650[5091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.036358][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 55.036371][ T29] audit: type=1326 audit(1737389640.102:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.078243][ T29] audit: type=1326 audit(1737389640.102:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.142352][ T29] audit: type=1326 audit(1737389640.172:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.165638][ T29] audit: type=1326 audit(1737389640.172:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.189788][ T29] audit: type=1326 audit(1737389640.172:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.239032][ T29] audit: type=1326 audit(1737389640.262:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.262662][ T29] audit: type=1326 audit(1737389640.262:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.285979][ T29] audit: type=1326 audit(1737389640.262:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.309312][ T29] audit: type=1326 audit(1737389640.272:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbbde71f29 code=0x7ffc0000 [ 55.309333][ T29] audit: type=1326 audit(1737389640.272:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbbbded5d29 code=0x7ffc0000 [ 55.582908][ T5155] xt_connbytes: Forcing CT accounting to be enabled [ 55.596751][ T5159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 55.597873][ T5155] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 55.605841][ T5159] tipc: Started in network mode [ 55.618129][ T5159] tipc: Node identity 7, cluster identity 5 [ 55.624137][ T5159] tipc: Node number set to 7 [ 55.935018][ T5185] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.019940][ T5185] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.078680][ T5185] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.150077][ T5185] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.313711][ T5185] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.324723][ T5185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.337698][ T5185] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.350404][ T5185] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.490258][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'. [ 56.500804][ T5207] tipc: Started in network mode [ 56.506082][ T5207] tipc: Node identity 7, cluster identity 5 [ 56.513259][ T5207] tipc: Node number set to 7 [ 56.666235][ T5220] netlink: 'syz.3.700': attribute type 16 has an invalid length. [ 56.675446][ T5220] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.700'. [ 56.991370][ T5240] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.004124][ T5240] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 57.128528][ T5240] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 57.306104][ T5246] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.322728][ T5244] loop3: detected capacity change from 0 to 512 [ 57.340130][ T5246] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.359827][ T5244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.390851][ T5246] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.405458][ T5244] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.470496][ T5246] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.492342][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.573641][ T5246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.595468][ T5246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.610833][ T5246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.622043][ T5246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.821337][ T5273] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.833891][ T5273] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 57.859430][ T5273] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 57.977374][ T5287] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.723'. [ 58.003870][ T5281] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.723'. [ 58.842457][ T5320] loop0: detected capacity change from 0 to 512 [ 58.948076][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.964336][ T5320] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.001257][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.101679][ T5336] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.169031][ T5336] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.218980][ T5346] bridge: RTM_NEWNEIGH with invalid ether address [ 59.234644][ T5336] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.269544][ T5336] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.502465][ T5372] syz.0.755[5372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.502587][ T5372] syz.0.755[5372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.515592][ T5372] syz.0.755[5372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.530596][ T5372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 60.038385][ T5376] syz.4.759[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.038435][ T5376] syz.4.759[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.067702][ T5376] syz.4.759[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.097001][ T5376] xt_hashlimit: max too large, truncated to 1048576 [ 60.158376][ T5389] syz.4.763[5389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.158471][ T5389] syz.4.763[5389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.169918][ T5389] syz.4.763[5389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.532202][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 60.532215][ T29] audit: type=1326 audit(1737389645.602:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 60.622215][ T29] audit: type=1326 audit(1737389645.642:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 60.648824][ T29] audit: type=1326 audit(1737389645.642:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 60.674487][ T29] audit: type=1326 audit(1737389645.642:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 60.698030][ T29] audit: type=1326 audit(1737389645.642:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 60.721801][ T29] audit: type=1326 audit(1737389645.642:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96fa4f7c47 code=0x7ffc0000 [ 60.745390][ T29] audit: type=1326 audit(1737389645.642:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f96fa4f7bbc code=0x7ffc0000 [ 60.768921][ T29] audit: type=1326 audit(1737389645.642:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f96fa4f7af4 code=0x7ffc0000 [ 60.792192][ T29] audit: type=1326 audit(1737389645.642:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f96fa4f7af4 code=0x7ffc0000 [ 60.815825][ T29] audit: type=1326 audit(1737389645.642:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f96fa4f498a code=0x7ffc0000 [ 61.320811][ T5446] syz.0.783[5446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.320915][ T5446] syz.0.783[5446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.332208][ T5446] syz.0.783[5446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.462056][ T5336] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.483936][ T5336] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.494542][ T5336] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.505138][ T5336] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.356392][ T5451] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 63.451468][ T5464] lo speed is unknown, defaulting to 1000 [ 63.484351][ T5464] lo speed is unknown, defaulting to 1000 [ 63.498884][ T5464] lo speed is unknown, defaulting to 1000 [ 63.515198][ T5464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.527260][ T5464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.540316][ T5464] lo speed is unknown, defaulting to 1000 [ 63.546492][ T5464] lo speed is unknown, defaulting to 1000 [ 63.553838][ T5464] lo speed is unknown, defaulting to 1000 [ 63.560008][ T5464] lo speed is unknown, defaulting to 1000 [ 63.566105][ T5464] lo speed is unknown, defaulting to 1000 [ 63.573201][ T5464] lo speed is unknown, defaulting to 1000 [ 63.676521][ T5476] bridge_slave_0: left allmulticast mode [ 63.682279][ T5476] bridge_slave_0: left promiscuous mode [ 63.688180][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.699778][ T5476] bridge_slave_1: left allmulticast mode [ 63.705471][ T5476] bridge_slave_1: left promiscuous mode [ 63.711324][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.723231][ T5476] bond0: (slave bond_slave_0): Releasing backup interface [ 63.764967][ T5476] bond0: (slave bond_slave_1): Releasing backup interface [ 63.779111][ T5476] team0: Port device team_slave_0 removed [ 63.790920][ T5476] team0: Port device team_slave_1 removed [ 63.799477][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.806937][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.816916][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.824404][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.849835][ T5478] lo speed is unknown, defaulting to 1000 [ 64.916762][ T5507] loop3: detected capacity change from 0 to 512 [ 65.054554][ T5507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.057336][ T5513] syz.4.812[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.068386][ T5513] syz.4.812[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.092400][ T5507] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.093321][ T5513] syz.4.812[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.196352][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.441922][ T5517] loop3: detected capacity change from 0 to 512 [ 65.498134][ T5517] EXT4-fs: Ignoring removed bh option [ 65.509072][ T5517] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.527257][ T5529] loop0: detected capacity change from 0 to 512 [ 65.543183][ T5517] EXT4-fs (loop3): 1 truncate cleaned up [ 65.549535][ T5528] bridge_slave_0: left allmulticast mode [ 65.555621][ T5528] bridge_slave_0: left promiscuous mode [ 65.557963][ T5517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.561534][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.593401][ T5529] EXT4-fs: Ignoring removed i_version option [ 65.600284][ T5529] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.607561][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.618056][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.638638][ T5529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.653827][ T5528] bridge_slave_1: left allmulticast mode [ 65.662815][ T5528] bridge_slave_1: left promiscuous mode [ 65.669351][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.680203][ T5528] veth0_to_bond: left allmulticast mode [ 65.685979][ T5528] veth0_to_bond: left promiscuous mode [ 65.692315][ T5528] bridge0: port 3(veth0_to_bond) entered disabled state [ 65.702670][ T5529] EXT4-fs (loop0): 1 truncate cleaned up [ 65.710015][ T5529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.725047][ T5528] bond0: (slave bond_slave_0): Releasing backup interface [ 65.735737][ T5528] bond0: (slave bond_slave_1): Releasing backup interface [ 65.749519][ T5528] team0: Port device team_slave_0 removed [ 65.759095][ T5528] team0: Port device team_slave_1 removed [ 65.765957][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.773440][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.784093][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.791609][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.020836][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.046315][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 66.046328][ T29] audit: type=1326 audit(1737389651.112:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.078808][ T29] audit: type=1326 audit(1737389651.112:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.118464][ T29] audit: type=1326 audit(1737389651.172:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.142699][ T29] audit: type=1326 audit(1737389651.172:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.142720][ T29] audit: type=1326 audit(1737389651.172:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.142868][ T29] audit: type=1326 audit(1737389651.182:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.142889][ T29] audit: type=1326 audit(1737389651.182:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.142981][ T29] audit: type=1326 audit(1737389651.182:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.143003][ T29] audit: type=1326 audit(1737389651.182:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.143061][ T29] audit: type=1326 audit(1737389651.182:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc260e05d29 code=0x7ffc0000 [ 66.190355][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.379292][ T5547] syz.3.827[5547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.379418][ T5547] syz.3.827[5547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.413954][ T5547] syz.3.827[5547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.170476][ T5578] siw: device registration error -23 [ 67.211842][ T5580] loop0: detected capacity change from 0 to 2048 [ 67.219678][ T5580] EXT4-fs: Ignoring removed bh option [ 67.253131][ T5580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.325840][ T5588] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.402408][ T5588] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 67.414953][ T5588] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.414953][ T5588] [ 67.424615][ T5588] EXT4-fs (loop0): Total free blocks count 0 [ 67.430772][ T5588] EXT4-fs (loop0): Free/Dirty block details [ 67.436881][ T5588] EXT4-fs (loop0): free_blocks=2415919104 [ 67.442632][ T5588] EXT4-fs (loop0): dirty_blocks=368 [ 67.448009][ T5588] EXT4-fs (loop0): Block reservation details [ 67.454097][ T5588] EXT4-fs (loop0): i_reserved_data_blocks=23 [ 67.526684][ T318] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 67.639494][ T5595] syz.0.844[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.639585][ T5595] syz.0.844[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.803586][ T5604] xfrm1: entered allmulticast mode [ 67.931997][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 68.014315][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 68.120544][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'. [ 68.129617][ T5633] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 68.137997][ T5633] tipc: Enabled bearer , priority 10 [ 68.208908][ T5647] pim6reg1: entered promiscuous mode [ 68.214530][ T5647] pim6reg1: entered allmulticast mode [ 68.307015][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 68.314572][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.322263][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.329789][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.337266][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.344842][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.358686][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.366126][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.373681][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.381152][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.388575][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.396238][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.403800][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.411297][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.418721][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.426298][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.433911][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.441361][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.448912][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.456302][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.463748][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.471167][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.478584][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.486118][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.493603][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.501075][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.508484][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.515869][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.523300][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.530783][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.538232][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.545628][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.553371][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.560789][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.568488][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.575965][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.583606][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.591341][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.599451][ T1038] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 68.642551][ T5667] syz.4.873[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.642663][ T5667] syz.4.873[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.837373][ T5685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 68.909904][ T5694] loop3: detected capacity change from 0 to 512 [ 68.917348][ T5694] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.925604][ T5694] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.886: corrupted in-inode xattr: e_value out of bounds [ 68.950717][ T5694] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.886: couldn't read orphan inode 15 (err -117) [ 68.964828][ T5694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.987250][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.103262][ T5712] loop3: detected capacity change from 0 to 8192 [ 69.110456][ T5712] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 69.320580][ T5740] lo speed is unknown, defaulting to 1000 [ 69.355189][ T5742] lo speed is unknown, defaulting to 1000 [ 69.565297][ T5750] ref_ctr increment failed for inode: 0x3f0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888100055f80 [ 69.599133][ T5749] uprobe: syz.1.909:5749 failed to unregister, leaking uprobe [ 70.098278][ T5773] serio: Serial port ptm0 [ 70.564960][ T5806] bpf_get_probe_write_proto: 4 callbacks suppressed [ 70.564974][ T5806] syz.0.930[5806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.573696][ T5806] syz.0.930[5806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.585625][ T5806] syz.0.930[5806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.651308][ T5817] loop0: detected capacity change from 0 to 512 [ 70.670636][ T5817] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.690774][ T5817] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.934: corrupted in-inode xattr: e_value out of bounds [ 70.707433][ T5817] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.934: couldn't read orphan inode 15 (err -117) [ 70.720753][ T5817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.746281][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.446181][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 71.455354][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 71.467160][ T5833] lo speed is unknown, defaulting to 1000 [ 71.901514][ T5875] lo speed is unknown, defaulting to 1000 [ 71.982178][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 71.982191][ T29] audit: type=1326 audit(1737389657.052:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.083937][ T29] audit: type=1326 audit(1737389657.052:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.107475][ T29] audit: type=1326 audit(1737389657.102:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.130920][ T29] audit: type=1326 audit(1737389657.102:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.154941][ T29] audit: type=1326 audit(1737389657.102:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.179254][ T29] audit: type=1326 audit(1737389657.102:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.203483][ T29] audit: type=1326 audit(1737389657.102:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.227327][ T29] audit: type=1326 audit(1737389657.102:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.250822][ T29] audit: type=1326 audit(1737389657.102:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 72.274235][ T29] audit: type=1326 audit(1737389657.102:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 73.341823][ T5966] Process accounting resumed [ 73.430905][ T5975] ref_ctr increment failed for inode: 0x4fc offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7cc000 [ 73.442832][ T5974] uprobe: syz.4.996:5974 failed to unregister, leaking uprobe [ 73.451628][ T5973] loop3: detected capacity change from 0 to 8192 [ 73.459119][ T5973] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.051888][ T5988] ip6gretap0: entered promiscuous mode [ 74.059919][ T5988] batadv_slave_0: entered promiscuous mode [ 74.069929][ T5988] ip6gretap0: left promiscuous mode [ 74.075726][ T5988] batadv_slave_0: left promiscuous mode [ 74.468714][ T6017] syzkaller1: entered promiscuous mode [ 74.474326][ T6017] syzkaller1: entered allmulticast mode [ 74.509220][ T6017] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 74.631736][ T6040] loop3: detected capacity change from 0 to 512 [ 74.660731][ T6040] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.675126][ T6040] EXT4-fs (loop3): 1 truncate cleaned up [ 74.682513][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.497738][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.567256][ T6095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.620446][ T6095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.680179][ T6095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.703627][ T6111] netlink: 'syz.2.1043': attribute type 7 has an invalid length. [ 75.711527][ T6111] netlink: 'syz.2.1043': attribute type 5 has an invalid length. [ 75.719354][ T6111] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1043'. [ 75.740373][ T6095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.810061][ T6095] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822015][ T6095] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.840792][ T6095] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.860167][ T6095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369024][ T6190] netlink: 'syz.2.1067': attribute type 4 has an invalid length. [ 76.389091][ T6190] netlink: 'syz.2.1067': attribute type 4 has an invalid length. [ 76.460256][ T6198] ip6gretap0: entered promiscuous mode [ 76.468385][ T6198] batadv_slave_0: entered promiscuous mode [ 76.475620][ T6198] ip6gretap0: left promiscuous mode [ 76.482150][ T6198] batadv_slave_0: left promiscuous mode [ 76.801989][ T6207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1075'. [ 77.054672][ T6240] lo speed is unknown, defaulting to 1000 [ 77.095942][ T6242] ref_ctr increment failed for inode: 0x3f1 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810489ef40 [ 77.158679][ T6245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6245 comm=syz.3.1085 [ 77.171576][ T6245] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 77.192240][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.218700][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.226758][ T6245] bond1: (slave batadv1): making interface the new active one [ 77.257937][ T6245] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 77.314983][ T6253] syz.2.1088[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.315110][ T6253] syz.2.1088[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.347484][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 77.347505][ T29] audit: type=1326 audit(1737389662.412:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.350032][ T6255] loop3: detected capacity change from 0 to 512 [ 77.359051][ T29] audit: type=1326 audit(1737389662.412:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.367032][ T6253] syz.2.1088[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.388682][ T29] audit: type=1326 audit(1737389662.412:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.388722][ T29] audit: type=1326 audit(1737389662.412:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.388743][ T29] audit: type=1326 audit(1737389662.412:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.388763][ T29] audit: type=1326 audit(1737389662.412:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.524302][ T29] audit: type=1326 audit(1737389662.412:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.548034][ T29] audit: type=1326 audit(1737389662.412:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.571426][ T29] audit: type=1326 audit(1737389662.412:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.595041][ T29] audit: type=1326 audit(1737389662.412:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 77.608604][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.634754][ T6255] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.688024][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.739414][ T6270] loop3: detected capacity change from 0 to 128 [ 77.753409][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 78.168822][ T6320] ref_ctr increment failed for inode: 0x4ab offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7ce4c0 [ 78.180079][ T6320] ref_ctr increment failed for inode: 0x4ab offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811b7ce4c0 [ 78.195028][ T6322] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 78.203917][ T6318] uprobe: syz.1.1110:6318 failed to unregister, leaking uprobe [ 78.240074][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'. [ 78.266511][ T6328] netlink: 'syz.0.1114': attribute type 7 has an invalid length. [ 78.274882][ T6328] netlink: 'syz.0.1114': attribute type 5 has an invalid length. [ 78.283254][ T6328] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1114'. [ 78.294022][ T6318] uprobe: syz.1.1110:6318 failed to unregister, leaking uprobe [ 78.678060][ T6353] syz.0.1123[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.678122][ T6353] syz.0.1123[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.721760][ T6353] syz.0.1123[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.776089][ T6364] netlink: 'syz.1.1127': attribute type 7 has an invalid length. [ 78.795341][ T6364] netlink: 'syz.1.1127': attribute type 5 has an invalid length. [ 78.803096][ T6364] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1127'. [ 78.832025][ T6370] veth6: entered allmulticast mode [ 78.887411][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 78.903484][ T6376] lo speed is unknown, defaulting to 1000 [ 78.943676][ T6383] ref_ctr increment failed for inode: 0x486 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7cda40 [ 79.240873][ T6396] msdos: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777˙0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 79.350790][ T6404] loop3: detected capacity change from 0 to 256 [ 80.007874][ T35] IPVS: starting estimator thread 0... [ 80.077356][ T6437] syzkaller0: entered allmulticast mode [ 80.094112][ T6437] syzkaller0 (unregistering): left allmulticast mode [ 80.097938][ T6428] IPVS: using max 2880 ests per chain, 144000 per kthread [ 80.255477][ T6468] netlink: 'syz.4.1164': attribute type 21 has an invalid length. [ 80.263542][ T6468] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.462285][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 81.080602][ T6636] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.143528][ T6636] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.220108][ T6636] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.235266][ T6652] netlink: 'syz.3.1186': attribute type 3 has an invalid length. [ 81.283455][ T6658] ref_ctr increment failed for inode: 0x478 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7ccfc0 [ 81.296054][ T6636] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.306656][ T6657] uprobe: syz.0.1188:6657 failed to unregister, leaking uprobe [ 81.343941][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 81.356493][ T6668] loop3: detected capacity change from 0 to 512 [ 81.359833][ T6636] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.372910][ T6668] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 81.385238][ T6668] EXT4-fs (loop3): invalid journal inode [ 81.388232][ T6636] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.404925][ T6636] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443618][ T6636] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480247][ T3379] IPVS: starting estimator thread 0... [ 81.565980][ T6689] xt_TCPMSS: Only works on TCP SYN packets [ 81.572043][ T6679] IPVS: using max 2880 ests per chain, 144000 per kthread [ 81.618518][ T3379] IPVS: starting estimator thread 0... [ 81.629062][ T6685] msdos: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777˙0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 81.655443][ T6699] netlink: 'syz.3.1201': attribute type 21 has an invalid length. [ 81.663419][ T6699] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.671450][ T6700] syzkaller0: entered allmulticast mode [ 81.681574][ T6700] syzkaller0 (unregistering): left allmulticast mode [ 81.695911][ T6704] syz.0.1203[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.695973][ T6704] syz.0.1203[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.708280][ T6696] IPVS: using max 3504 ests per chain, 175200 per kthread [ 81.727567][ T6704] syz.0.1203[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.133119][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 82.170708][ T6744] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1218'. [ 82.232960][ T6752] atomic_op ffff888117b16128 conn xmit_atomic 0000000000000000 [ 82.249341][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 82.258337][ T6757] tipc: Started in network mode [ 82.263185][ T6757] tipc: Node identity 7, cluster identity 1 [ 82.269115][ T6757] tipc: Node number set to 7 [ 82.302432][ T6766] xt_TCPMSS: Only works on TCP SYN packets [ 82.353310][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 82.353337][ T29] audit: type=1400 audit(1737389667.422:2422): avc: denied { write } for pid=6772 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.394934][ T29] audit: type=1400 audit(1737389667.462:2423): avc: denied { read } for pid=6772 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.435269][ T29] audit: type=1400 audit(1737389667.502:2424): avc: denied { create } for pid=6782 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.617834][ T29] audit: type=1400 audit(1737389667.682:2425): avc: denied { map } for pid=6801 comm="syz.1.1230" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.642046][ T29] audit: type=1400 audit(1737389667.682:2426): avc: denied { read write } for pid=6801 comm="syz.1.1230" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.827551][ T6783] Set syz1 is full, maxelem 65536 reached [ 82.855745][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 82.934877][ T29] audit: type=1400 audit(1737389668.002:2427): avc: denied { name_bind } for pid=6827 comm="syz.1.1235" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.956829][ T29] audit: type=1400 audit(1737389668.002:2428): avc: denied { node_bind } for pid=6827 comm="syz.1.1235" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.011625][ T29] audit: type=1400 audit(1737389668.052:2429): avc: denied { bind } for pid=6829 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.031964][ T29] audit: type=1400 audit(1737389668.052:2430): avc: denied { setopt } for pid=6829 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.052883][ T6830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.088514][ T29] audit: type=1326 audit(1737389668.142:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 83.145972][ T6845] netem: unknown loss type 0 [ 83.227401][ T6830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.255953][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1238'. [ 83.265090][ T6894] tipc: Started in network mode [ 83.270075][ T6894] tipc: Node identity 7, cluster identity 1 [ 83.275999][ T6894] tipc: Node number set to 7 [ 83.320416][ T6830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.412239][ T6830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.479957][ T6830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491796][ T6830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.494617][ T6918] syz.4.1245[6918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.501313][ T6918] syz.4.1245[6918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.504006][ T6830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.513000][ T6918] syz.4.1245[6918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.552101][ T6830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.635064][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 83.937059][ T6998] syz.4.1262[6998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.937114][ T6998] syz.4.1262[6998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.949103][ T6998] syz.4.1262[6998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.655586][ T7127] syz.0.1274[7127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.667572][ T7127] syz.0.1274[7127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.910618][ T7136] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1278'. [ 84.936235][ T7140] syz.0.1279[7140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.936298][ T7140] syz.0.1279[7140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.027919][ T7149] netlink: 'syz.3.1284': attribute type 3 has an invalid length. [ 85.100954][ T7156] netem: unknown loss type 0 [ 85.105634][ T7156] netem: change failed [ 85.129757][ T7149] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.214949][ T7161] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1289'. [ 85.243128][ T7173] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1294'. [ 85.293677][ T7179] IPv4: Oversized IP packet from 127.202.26.0 [ 85.395378][ T7185] netem: unknown loss type 0 [ 85.400109][ T7185] netem: change failed [ 85.677633][ T7176] Set syz1 is full, maxelem 65536 reached [ 85.694091][ T7198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.829827][ T7210] bridge0: port 1(vlan2) entered blocking state [ 85.836930][ T7210] bridge0: port 1(vlan2) entered disabled state [ 85.844262][ T7210] vlan2: entered allmulticast mode [ 85.850611][ T7210] vlan2: left allmulticast mode [ 85.869229][ T7220] lo speed is unknown, defaulting to 1000 [ 86.190739][ T7248] loop3: detected capacity change from 0 to 2048 [ 86.197505][ T7248] EXT4-fs: inline encryption not supported [ 86.210022][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.378728][ T7255] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.395541][ T7255] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.408774][ T7255] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.408774][ T7255] [ 86.418655][ T7255] EXT4-fs (loop3): Total free blocks count 0 [ 86.424715][ T7255] EXT4-fs (loop3): Free/Dirty block details [ 86.430662][ T7255] EXT4-fs (loop3): free_blocks=2415919104 [ 86.436406][ T7255] EXT4-fs (loop3): dirty_blocks=8192 [ 86.445547][ T7255] EXT4-fs (loop3): Block reservation details [ 86.451588][ T7255] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 86.510455][ T2349] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 86.642669][ T7261] IPv4: Oversized IP packet from 127.202.26.0 [ 86.712565][ T7259] bridge0: port 3(vlan2) entered blocking state [ 86.719011][ T7259] bridge0: port 3(vlan2) entered disabled state [ 86.725662][ T7259] vlan2: entered allmulticast mode [ 86.731501][ T7259] vlan2: left allmulticast mode [ 86.821615][ T7266] loop3: detected capacity change from 0 to 1024 [ 86.828937][ T7266] EXT4-fs: Ignoring removed orlov option [ 86.843340][ T7266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.929441][ T7281] EXT4-fs (loop3): shut down requested (0) [ 86.960977][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.419090][ T7309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.507732][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 87.507749][ T29] audit: type=1326 audit(1737389928.547:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.539118][ T29] audit: type=1326 audit(1737389928.547:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.564743][ T29] audit: type=1326 audit(1737389928.547:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.589189][ T29] audit: type=1326 audit(1737389928.547:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.614187][ T29] audit: type=1326 audit(1737389928.547:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.638142][ T29] audit: type=1326 audit(1737389928.547:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.661885][ T29] audit: type=1326 audit(1737389928.547:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.686670][ T29] audit: type=1326 audit(1737389928.547:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.710422][ T29] audit: type=1326 audit(1737389928.547:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.735281][ T29] audit: type=1326 audit(1737389928.547:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 87.768273][ T7320] netlink: 'syz.1.1356': attribute type 4 has an invalid length. [ 87.779615][ T7318] __nla_validate_parse: 2 callbacks suppressed [ 87.779630][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 87.922004][ T7332] lo speed is unknown, defaulting to 1000 [ 88.475608][ T7381] lo speed is unknown, defaulting to 1000 [ 89.213376][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1388'. [ 89.234627][ T7400] bpf_get_probe_write_proto: 17 callbacks suppressed [ 89.234643][ T7400] syz.4.1386[7400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.250908][ T7400] syz.4.1386[7400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.327474][ T7400] syz.4.1386[7400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.369172][ T7412] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1392'. [ 89.969293][ T7433] lo speed is unknown, defaulting to 1000 [ 90.351097][ T7411] syz.3.1393 (7411) used greatest stack depth: 6360 bytes left [ 90.375889][ T7444] wg2: entered promiscuous mode [ 90.380862][ T7444] wg2: entered allmulticast mode [ 90.479594][ T7457] syzkaller0: entered allmulticast mode [ 90.496105][ T7457] syzkaller0 (unregistering): left allmulticast mode [ 90.539392][ T7466] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1413'. [ 90.691481][ T7480] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.706346][ T7484] loop3: detected capacity change from 0 to 764 [ 90.712554][ T7487] xt_hashlimit: max too large, truncated to 1048576 [ 90.720310][ T7487] Cannot find set identified by id 0 to match [ 90.725253][ T7484] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.739811][ T7480] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.781388][ T7493] ALSA: seq fatal error: cannot create timer (-19) [ 90.810414][ T7480] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.833651][ T7501] tipc: Enabled bearer , priority 0 [ 90.849485][ T7501] syzkaller0: entered promiscuous mode [ 90.854993][ T7501] syzkaller0: entered allmulticast mode [ 90.861369][ T7501] tipc: Resetting bearer [ 90.870115][ T7480] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.882737][ T7500] tipc: Resetting bearer [ 90.900796][ T7500] tipc: Disabling bearer [ 90.945549][ T7480] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.957495][ T7480] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.969665][ T7480] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983793][ T7480] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.011726][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 91.530343][ T7545] 9pnet: p9_errstr2errno: server reported unknown error śćç [ 91.540809][ T7547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.891108][ T7572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.062672][ T7572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.139101][ T7572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.187821][ T1038] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 92.198334][ T7572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.254095][ T7572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.265868][ T7572] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.277395][ T7572] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.289845][ T7572] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.537937][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 92.537951][ T29] audit: type=1326 audit(1737389933.607:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7fc00000 [ 92.580874][ T7589] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1462'. [ 92.604743][ T29] audit: type=1400 audit(1737389933.667:2874): avc: denied { ioctl } for pid=7591 comm="syz.4.1463" path="socket:[15650]" dev="sockfs" ino=15650 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.715435][ T29] audit: type=1400 audit(1737389933.777:2875): avc: denied { watch watch_reads } for pid=7603 comm="syz.3.1469" path="/300" dev="tmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.785121][ T29] audit: type=1400 audit(1737389933.847:2876): avc: denied { create } for pid=7607 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.824787][ T29] audit: type=1400 audit(1737389933.847:2877): avc: denied { write } for pid=7607 comm="syz.3.1471" path="socket:[15687]" dev="sockfs" ino=15687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.849724][ T29] audit: type=1400 audit(1737389933.847:2878): avc: denied { nlmsg_read } for pid=7607 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.871733][ T29] audit: type=1326 audit(1737389933.907:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 92.895941][ T29] audit: type=1326 audit(1737389933.907:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 92.919998][ T29] audit: type=1326 audit(1737389933.907:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 92.943606][ T29] audit: type=1326 audit(1737389933.907:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa4f5d29 code=0x7ffc0000 [ 93.307572][ T7634] 9pnet: p9_errstr2errno: server reported unknown error śćç [ 93.617855][ T7654] syz.3.1491[7654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.617943][ T7654] syz.3.1491[7654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.629914][ T7654] syz.3.1491[7654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.292030][ T7642] syz.4.1484 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=0 [ 94.317387][ T7642] CPU: 0 UID: 0 PID: 7642 Comm: syz.4.1484 Not tainted 6.13.0-syzkaller #0 [ 94.326068][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.336131][ T7642] Call Trace: [ 94.339498][ T7642] [ 94.342454][ T7642] dump_stack_lvl+0xf2/0x150 [ 94.347133][ T7642] dump_stack+0x15/0x1a [ 94.351355][ T7642] dump_header+0x83/0x2d0 [ 94.355707][ T7642] oom_kill_process+0x341/0x4c0 [ 94.360574][ T7642] out_of_memory+0x9af/0xbe0 [ 94.365172][ T7642] ? css_next_descendant_pre+0x11c/0x140 [ 94.370916][ T7642] mem_cgroup_out_of_memory+0x13e/0x190 [ 94.376482][ T7642] try_charge_memcg+0x508/0x7f0 [ 94.381363][ T7642] obj_cgroup_charge_pages+0xbd/0x1a0 [ 94.386865][ T7642] __memcg_kmem_charge_page+0x9d/0x170 [ 94.392390][ T7642] __alloc_pages_noprof+0x1bc/0x340 [ 94.397620][ T7642] alloc_pages_mpol_noprof+0xb8/0x260 [ 94.403016][ T7642] alloc_pages_noprof+0xe1/0x100 [ 94.407979][ T7642] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 94.413895][ T7642] __kvmalloc_node_noprof+0x121/0x170 [ 94.419331][ T7642] ? ip_set_alloc+0x1f/0x30 [ 94.423943][ T7642] ip_set_alloc+0x1f/0x30 [ 94.428310][ T7642] hash_netiface_create+0x273/0x730 [ 94.433637][ T7642] ? __nla_parse+0x40/0x60 [ 94.438113][ T7642] ? __pfx_hash_netiface_create+0x10/0x10 [ 94.444010][ T7642] ip_set_create+0x359/0x8a0 [ 94.448629][ T7642] ? strnstr+0xe1/0x100 [ 94.452985][ T7642] ? __nla_parse+0x40/0x60 [ 94.457421][ T7642] nfnetlink_rcv_msg+0x4a9/0x570 [ 94.462494][ T7642] netlink_rcv_skb+0x12c/0x230 [ 94.467273][ T7642] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 94.472818][ T7642] nfnetlink_rcv+0x16c/0x15d0 [ 94.477498][ T7642] ? kmem_cache_free+0xdc/0x2d0 [ 94.482363][ T7642] ? nlmon_xmit+0x51/0x60 [ 94.486729][ T7642] ? __kfree_skb+0x102/0x150 [ 94.491356][ T7642] ? consume_skb+0x49/0x160 [ 94.495967][ T7642] ? nlmon_xmit+0x51/0x60 [ 94.500364][ T7642] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 94.505748][ T7642] ? __dev_queue_xmit+0xb6e/0x2090 [ 94.511034][ T7642] ? ref_tracker_free+0x3a5/0x410 [ 94.516057][ T7642] ? __dev_queue_xmit+0x186/0x2090 [ 94.521621][ T7642] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 94.527112][ T7642] netlink_unicast+0x599/0x670 [ 94.531964][ T7642] netlink_sendmsg+0x5cc/0x6e0 [ 94.536729][ T7642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.542119][ T7642] __sock_sendmsg+0x140/0x180 [ 94.546827][ T7642] ____sys_sendmsg+0x312/0x410 [ 94.551589][ T7642] __sys_sendmsg+0x19d/0x230 [ 94.556271][ T7642] __x64_sys_sendmsg+0x46/0x50 [ 94.561157][ T7642] x64_sys_call+0x2734/0x2dc0 [ 94.565829][ T7642] do_syscall_64+0xc9/0x1c0 [ 94.570495][ T7642] ? clear_bhb_loop+0x55/0xb0 [ 94.575178][ T7642] ? clear_bhb_loop+0x55/0xb0 [ 94.580023][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.586099][ T7642] RIP: 0033:0x7fcc483d5d29 [ 94.590580][ T7642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.610202][ T7642] RSP: 002b:00007fcc46a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.618718][ T7642] RAX: ffffffffffffffda RBX: 00007fcc485c5fa0 RCX: 00007fcc483d5d29 [ 94.626712][ T7642] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 94.634703][ T7642] RBP: 00007fcc48451b08 R08: 0000000000000000 R09: 0000000000000000 [ 94.642718][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.650695][ T7642] R13: 0000000000000000 R14: 00007fcc485c5fa0 R15: 00007ffc5f321d68 [ 94.658817][ T7642] [ 94.662281][ T7642] memory: usage 307200kB, limit 307200kB, failcnt 343 [ 94.669703][ T7642] memory+swap: usage 307936kB, limit 9007199254740988kB, failcnt 0 [ 94.677736][ T7642] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 94.685949][ T7642] Memory cgroup stats for /syz4: [ 94.686120][ T7642] cache 0 [ 94.694211][ T7642] rss 4096 [ 94.697280][ T7642] shmem 0 [ 94.700326][ T7642] mapped_file 0 [ 94.703805][ T7642] dirty 0 [ 94.706820][ T7642] writeback 0 [ 94.710126][ T7642] workingset_refault_anon 67 [ 94.714889][ T7642] workingset_refault_file 187 [ 94.719604][ T7642] swap 753664 [ 94.722904][ T7642] swapcached 4096 [ 94.726546][ T7642] pgpgin 104554 [ 94.730160][ T7642] pgpgout 104553 [ 94.733839][ T7642] pgfault 114336 [ 94.737382][ T7642] pgmajfault 42 [ 94.740857][ T7642] inactive_anon 0 [ 94.744574][ T7642] active_anon 4096 [ 94.748338][ T7642] inactive_file 0 [ 94.751974][ T7642] active_file 0 [ 94.755427][ T7642] unevictable 0 [ 94.758997][ T7642] hierarchical_memory_limit 314572800 [ 94.764356][ T7642] hierarchical_memsw_limit 9223372036854771712 [ 94.770528][ T7642] total_cache 0 [ 94.773984][ T7642] total_rss 4096 [ 94.777517][ T7642] total_shmem 0 [ 94.781086][ T7642] total_mapped_file 0 [ 94.785075][ T7642] total_dirty 0 [ 94.788547][ T7642] total_writeback 0 [ 94.792355][ T7642] total_workingset_refault_anon 67 [ 94.797458][ T7642] total_workingset_refault_file 187 [ 94.802674][ T7642] total_swap 753664 [ 94.806645][ T7642] total_swapcached 4096 [ 94.810814][ T7642] total_pgpgin 104554 [ 94.814786][ T7642] total_pgpgout 104553 [ 94.818866][ T7642] total_pgfault 114336 [ 94.822946][ T7642] total_pgmajfault 42 [ 94.827087][ T7642] total_inactive_anon 0 [ 94.831429][ T7642] total_active_anon 4096 [ 94.835714][ T7642] total_inactive_file 0 [ 94.839913][ T7642] total_active_file 0 [ 94.843880][ T7642] total_unevictable 0 [ 94.847936][ T7642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1484,pid=7641,uid=0 [ 94.862625][ T7642] Memory cgroup out of memory: Killed process 7641 (syz.4.1484) total-vm:95696kB, anon-rss:792kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 94.936419][ T7670] loop3: detected capacity change from 0 to 2048 [ 94.982379][ T7670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.042880][ T7676] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1500'. [ 95.078564][ T7678] ip6gretap1: entered allmulticast mode [ 95.095401][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.106316][ T7678] bridge0: port 1(ip6gretap1) entered blocking state [ 95.113322][ T7678] bridge0: port 1(ip6gretap1) entered disabled state [ 95.140122][ T7678] ip6gretap1: entered promiscuous mode [ 95.159975][ T7678] bridge0: port 1(ip6gretap1) entered blocking state [ 95.166705][ T7678] bridge0: port 1(ip6gretap1) entered forwarding state [ 95.218779][ T7681] loop3: detected capacity change from 0 to 512 [ 95.225612][ T7679] bridge0: port 2(syz_tun) entered blocking state [ 95.232380][ T7679] bridge0: port 2(syz_tun) entered disabled state [ 95.240481][ T7681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.258315][ T7679] syz_tun: entered allmulticast mode [ 95.265210][ T7681] EXT4-fs (loop3): 1 orphan inode deleted [ 95.271030][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 95.287971][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.294084][ T7679] syz_tun: entered promiscuous mode [ 95.305956][ T7678] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 95.306188][ T7679] bridge0: port 2(syz_tun) entered blocking state [ 95.320270][ T7679] bridge0: port 2(syz_tun) entered forwarding state [ 95.329838][ T7678] bridge0: port 2(syz_tun) entered disabled state [ 95.336400][ T7678] bridge0: port 1(ip6gretap1) entered disabled state [ 95.366745][ T7678] bridge0: port 2(syz_tun) entered blocking state [ 95.373264][ T7678] bridge0: port 2(syz_tun) entered forwarding state [ 95.380086][ T7678] bridge0: port 1(ip6gretap1) entered blocking state [ 95.386827][ T7678] bridge0: port 1(ip6gretap1) entered forwarding state [ 95.408325][ T7678] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.427236][ T7689] wg2: entered promiscuous mode [ 95.432411][ T7689] wg2: entered allmulticast mode [ 95.453448][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.563794][ T7704] loop3: detected capacity change from 0 to 128 [ 95.571541][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.580571][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.627775][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.641875][ T7704] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.656223][ T7704] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.753379][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.762553][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.797646][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.847364][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.941884][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.950954][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 95.960984][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1510'. [ 96.266171][ T7739] xt_hashlimit: size too large, truncated to 1048576 [ 96.390941][ T7746] tipc: Enabling of bearer rejected, failed to enable media [ 97.190665][ T8] IPVS: starting estimator thread 0... [ 97.226425][ T7783] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 97.278340][ T7778] IPVS: using max 2544 ests per chain, 127200 per kthread [ 97.328677][ T7787] lo speed is unknown, defaulting to 1000 [ 98.915708][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 98.915722][ T29] audit: type=1326 audit(1737389939.977:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 98.972113][ T29] audit: type=1326 audit(1737389940.037:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 98.995620][ T29] audit: type=1326 audit(1737389940.037:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.019023][ T29] audit: type=1326 audit(1737389940.037:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.056198][ T7868] loop3: detected capacity change from 0 to 2048 [ 99.108285][ T29] audit: type=1326 audit(1737389940.037:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.131862][ T29] audit: type=1326 audit(1737389940.037:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.155373][ T29] audit: type=1326 audit(1737389940.037:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.178814][ T29] audit: type=1326 audit(1737389940.037:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.202217][ T29] audit: type=1326 audit(1737389940.037:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.225742][ T29] audit: type=1326 audit(1737389940.037:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ed95d29 code=0x7ffc0000 [ 99.284679][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.349341][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.621630][ T7827] syz.0.1559 (7827) used greatest stack depth: 6088 bytes left [ 99.802337][ T7902] loop3: detected capacity change from 0 to 164 [ 99.899519][ T7912] xt_CT: No such helper "netbios-ns" [ 100.404411][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 100.488927][ T7972] syz.2.1617[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.488996][ T7972] syz.2.1617[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.508631][ T7972] syz.2.1617[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.888098][ T8001] syz.3.1628[8001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.920628][ T8001] syz.3.1628[8001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.956652][ T8001] syz.3.1628[8001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.339807][ T8057] xt_CT: No such helper "netbios-ns" [ 101.738284][ T8077] __nla_validate_parse: 3 callbacks suppressed [ 101.738361][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.753543][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.763581][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.763621][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 101.781552][ T8078] netlink: 'syz.2.1652': attribute type 25 has an invalid length. [ 101.791855][ T8078] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.800160][ T8078] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.808470][ T8078] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.816714][ T8078] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.832165][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.841701][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.850993][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.874229][ T8083] syz.4.1653[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.874287][ T8083] syz.4.1653[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.885932][ T8083] syz.4.1653[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.887732][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.917748][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 101.927138][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 102.262778][ T8125] loop3: detected capacity change from 0 to 512 [ 102.279528][ T8125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.292145][ T8125] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.449146][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.673563][ T8159] syz.4.1685[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.793135][ T8167] syzkaller0: entered allmulticast mode [ 102.815180][ T8167] syzkaller0 (unregistering): left allmulticast mode [ 102.823987][ T8161] ================================================================== [ 102.832090][ T8161] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 102.840002][ T8161] [ 102.842332][ T8161] write to 0xffff88811f237140 of 8 bytes by task 8169 on cpu 0: [ 102.850054][ T8161] cpu_map_kthread_run+0x49b/0x11f0 [ 102.855275][ T8161] kthread+0x1d1/0x210 [ 102.859349][ T8161] ret_from_fork+0x4b/0x60 [ 102.863773][ T8161] ret_from_fork_asm+0x1a/0x30 [ 102.868546][ T8161] [ 102.870861][ T8161] read to 0xffff88811f237140 of 8 bytes by task 8161 on cpu 1: [ 102.878401][ T8161] bq_flush_to_queue+0x125/0x360 [ 102.883355][ T8161] cpu_map_enqueue+0x19e/0x1b0 [ 102.888144][ T8161] xdp_do_redirect_frame+0x2a4/0x6b0 [ 102.893455][ T8161] bpf_test_run_xdp_live+0x8c6/0x1040 [ 102.898835][ T8161] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 102.904390][ T8161] bpf_prog_test_run+0x20f/0x3a0 [ 102.909356][ T8161] __sys_bpf+0x400/0x7a0 [ 102.913598][ T8161] __x64_sys_bpf+0x43/0x50 [ 102.918012][ T8161] x64_sys_call+0x2914/0x2dc0 [ 102.922683][ T8161] do_syscall_64+0xc9/0x1c0 [ 102.927177][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.933074][ T8161] [ 102.935385][ T8161] value changed: 0xffff88813640d070 -> 0x0000000000000000 [ 102.942477][ T8161] [ 102.944787][ T8161] Reported by Kernel Concurrency Sanitizer on: [ 102.950975][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.1.1686 Not tainted 6.13.0-syzkaller #0 [ 102.959567][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 102.969620][ T8161] ================================================================== [ 104.677668][ T8] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec